Creating Users and Assigning Roles 

There are two types of users that are relevant for the set-up of data archiving in the Java environment. Each user is identified with a number in the figure.

●      XML DAS communication users (User 1): used in the HTTP connection between the application system(s) and XML DAS.

●      NWA users (User 2 and 3): used to login to the NWA and finally to the Java Archiving Cockpit (User 2) and the XML DAS Administration (User 3). These users are also used for the communication of the NWA with the local archiving session management (User 2) and the NWA and the XML DAS (User 3).

It is possible to have an arbitrary number of users. You can combine some or all users under one umbrella super user, if appropriate. However, you should carefully consider which user store (that of the application system or that of the XML DAS system) is relevant and must be used for the role assignment. For the users to be valid they must be assigned the roles listed in the table below.

Procedure

       1.      Create a user or as many users as you like using the User Management Engine (UME) (for more information see Administration of Users and Roles).

If you are creating a technical communications user the security policy setting should be Technical User.

       2.      Assign the appropriate NWA and archiving role to the users you created based on the information in the following table:

For more information see SAP NetWeaver Administrator and Assigning Principals to Roles or Groups.

 

User	Role
XML DAS Communication User (User 1)	XMLDASSecurityRole

 

User	Role (Read-Only)	Role (Read/Write/Execute)
NWA User for Java Archiving Cockpit (User 2)	NWA_READONLY SAP_ARCH_CO_VIEW	NWA_SUPERADMIN SAP_ARCH_SUPERADMIN
NWA User for XML DAS (User 3)	NWA_READONLY SAP_ARCH_XMLDAS_VIEW	NWA_SUPERADMIN SAP_ARCH_SUPERADMIN

 

Result

You have created the administration user(s) that is/are necessary for using the Java Archiving Cockpit and the XML DAS Administration via NWA. You have created the communication users(s) for the authentication of archiving client requests against XML DAS.