Show TOC

Procedure documentationGenerating User Authorization Reports Locate this document in the navigation structure

 

The portal user administrator can use the User Authorization Reports function to ensure that the proper back-end authorizations have been assigned for using the portal applications. The generated reports are exposed as Web services and can be transferred to spreadsheets between the relevant administrators.

The following User Authorization reports are available:

  • Per role: lists of applications and users assigned to a role (retrieved from the Portal Directory only)

  • Per user: all applications for which a user has authorization (retrieved from the Portal Directory and the User Management Engine)

  • Per group: all applications and users assigned to a specified group (retrieved from the Portal Directory and the User Management Engine)

The following are a number of cases in which it is recommended to run these reports:

  • A content administrator creates a portal role and needs to ensure that all the necessary authorizations for running that role exist. The administrator generates a report for the role, which displays all applications (Content) and users assigned to the role. The administrator then sends the report to the security officer, who checks that access to these back-end applications is assigned for each listed user, so that the role can run smoothly.

  • A user administrator assigns a user to a group. To ensure that the user gains permissions to all applications of the group, the administrator runs the report for the group and retrieves the applications, and sends the report to the security officer to ensure that all authorizations are given to the new group member.

  • A user administrator adds a new user to a group or groups, and needs to give that user all permissions required to access the applications within the roles assigned to each group. The administrator runs the report according to user, and retrieves a list of all applications that should be checked by the security officer to ensure that the user can access them.

Prerequisites

You have been assigned a user administrator role.

Procedure

  1. In the portal, navigate to   User Administration   User Authorization Reports  . The User Authorization Reports tool appears.

  2. In the Create Report For dropdown list, select the type of report that you require, and enter the unique name of the role, group or user in the following field, accordingly.

  3. Choose Go.

    Note Note

    When generating a report for roles or groups, you can enter an asterisk (*) in the Role Name / Group Name field. When you choose Go, the Select Object dialog box is displayed with a list of all roles/groups from which you can choose. Note that in the Select Object dialog box:

    • The Name column of the table lists the display name of the role or group, and the tooltip displays the unique name of the selected item (for roles, this is the PCD location).

    • You can sort the Name column by clicking in the header and using the Sort (Sort) button.

    End of the note.

Result

The report corresponding to your selection is displayed. The display name and icon of the role, group or user is displayed immediately above the table.

  • A Content tab lists all portal applications assigned to the role, group or user, listing the:

    • Portal iView ID: the atomic name, with the PCD URL in the tooltip

    • Back-End Application: the namespace (if any) and name of the back-end application, transaction, query or other object

    • Portal System Alias

    • SAP System ID: the SID

  • For a role or group, a Users tab lists the names of all users and groups assigned to it, including Logon ID, Name and Organizational Unit.

You can sort each column of the tables using the Sort (Sort) button, and you can filter the columns of the Content table using the Filter (Filter) fields.

To send the report to a database or to the security officer responsible for providing the required authorizations, choose Export to File at the top of the report. The Export to File dialog box appears. Click the content.xls link to display the report in the worksheet.