Assigning Administrator Permissions to FPN Connections

Content usage mode: remote role assignment, remote delta link

Applies to: producers, consumers

Note Note

The functionality described in this topic is not available in an SAP NetWeaver Composition Environment system.

End of the note.

Portal administrators can perform various tasks related to FPN connections according to the administrator permissions for their user that are assigned to an FPN connection.

This topic describes how to assign administrator permissions to FPN connections using the Manage my FPN Connections tool, and how they affect the various tasks performed by portal administrators.

Note Note

Alternatively, a system administrator can modify the permissions of an FPN connection, using the Permissions editor in the portal, by editing the corresponding producer semantic object located in the Remote FPN Producers folder in the Portal Catalog. Unless instructed otherwise, we recommend you assign permissions only in the Manage My FPN Connections tool.
The system administrator on the consumer must also assign end-user permissions to producer objects to enable content to run at runtime. End-user permissions are typically assigned at later stage after the remote content has been created on the consumer and assigned to its business users; see Assigning End-User Permission to FPN Content.

End of the note.

Prerequisites

You are authorized to access the portal role containing the Federated Portal workset.
You have created an FPN connection that pairs your system with a remote system.
To modify the permissions of an FPN connection, you have administrator owner permission for the FPN connection.

Note
If you do not have this authorization, a system administrator can assign your user with the required permission level to either the Remote FPN Producers folder in the Portal Catalog or directly to the corresponding producer semantic object located in this folder. For more information, see Setting Permissions in the Permission Editor.

End of the note.

To view permissions of an FPN connection, you must have at least administrator read permission for the FPN connection.

Procedure

In the portal, navigate to System Administration Federated Portal SAP NetWeaver - FPN Connections Manage My FPN Connections .

The My FPN Connections tab appears.
In the My FPN Connections table, select an FPN connection.
Choose Open.
In the open editor of the FPN connection, choose Permissions.
The users, groups, and roles and their respective permissions that are assigned to the FPN connection are listed.
Add or remove the users, groups, or roles of administrators, as needed.

To each user, group, or role, assign the relevant permission in the Administrator column.

The following table describes which administrative tasks can be performed on the local portal for each permission setting:

Task for Administrators	Relevant To	Assigned Administration Permission
Task for Administrators	Relevant To	Owner	Full-control	Read/Write	Read	None
Delete an FPN connection	System administrators	Yes	Yes	No	No	No
Edit an FPN connection	System administrators	Yes	Yes	Yes	No	No
View an FPN connection and its basic settings	System administrators	Yes	Yes	Yes	Yes	No
Add or remove aliases	System administrators	Yes	Yes	Yes	Yes	No
Test the connection to a remote system	System administrators	Yes	Yes	Yes	Yes	No
Register or unregister an FPN connection	System administrators	Yes	Yes	Yes	No	No
Change the access setting to your system	System administrators	Yes	Yes	Yes	No	No
View remote roles (for remote role assignment)⁽²⁾	User administrators	Yes⁽¹⁾	Yes⁽¹⁾	Yes⁽¹⁾	Yes⁽¹⁾	No
View and copy remote content as remote delta links⁽⁴⁾	Content administrators	Yes⁽³⁾	Yes⁽³⁾	Yes⁽³⁾	Yes⁽³⁾	No

⁽¹⁾ Allows the assigned user administrator to view the remote roles of the producer in the Identity Management tool. This permission setting has no effect on whether or not the producer is displayed in the any of the data source dropdown lists in the Identity Management tool.

⁽²⁾ Additional permissions have to be assigned to remote roles on the producer portal, which allow a user administrator to perform remote role assignments. See Exposing Roles on the Producer for 'Remote Role Assignment' Usage.

⁽³⁾ Required to view the remote producer in your Portal Catalog and to browse its content. For information on the required permissions that must be assigned to remote content on the producer portal to support remote delta link mode, see Exposing Roles on the Producer for 'Remote Role Assignment' Usage.

⁽⁴⁾ Administrator permissions set to producer objects do not restrict an administrator's ability to view and edit local content created on the consumer from remote-based content (remote delta link content). Additional permissions must be applied to the remote-based content on the consumer by the system administrator or content administrator.

Save your changes.