Show TOC

Procedure documentationProviding Users Through ILM for Use of XML DAS

 

For storing or archiving data of an application system with the functions of SAP NetWeaver Information Lifecycle Managements (SAP NetWeaver ILM), you need the XML Data Archiving Service (XML DAS), which runs on AS Java. To be able to manage it and use it, you have to create the following types of users:

  • Communications users for the HTTP connection between the application system and XML DAS

  • Administration users for XML DAS administration in SAP NetWeaver Administrator (NWA)

If you create multiple communications users or administration users, you can group these together in a role. The users have to be known to user administration of the AS Java on which XML DAS runs.

Procedure

1. Optional: Preparing Grouping of Users

If you need multiple communications or administration users (and you want to group them for the assignment of authorizations), proceed as follows:

Location of User Administration

Procedure

AS ABAP

(If AS ABAP and AS Java are installed on the same server)

In transaction PFCG, create a separate role each for communications and/or administration users.

AS Java

(If AS ABAP and AS Java are installed on different servers)

In the User Management Engine, create a separate group each for communications and/or administration users.
2. Creating Users

  1. Call user administration.

    Location of User Administration

    Call of user administration

    AS ABAP

    Transaction SU01 (User Maintenance).

    AS Java

    User Management Engine (UME)

  2. Create the user with the following classification:

    User

    AS ABAP: User Type

    AS Java: Security Policy

    Communications user

    Dialog

    Technical user

    Administration user

    System

    Standard

  3. If you create multiple communications or administration users: Assign the user to the corresponding role or group.

2. Authorize the user for XML DAS

On AS Java, assign the communications or administration user to the role with the authorization necessary for XML DAS (or the corresponding grouping).

User

Assign Role

Communications User

  1. Start the Visual Administrator.

  2. Under Cluster, expand the node that corresponds to your server.

  3. Choose Start of the navigation path Services Next navigation step Security Provider End of the navigation path.

  4. Activate editing mode.

  5. On the Policy Configurations tab page, choose the component sap.com/tc~TechSrv~XML_DAS*DataArchivingService.

  6. Choose the Security Roles tab page and choose the role XMLDASSecurityRole.

  7. Assign the communications user to this role under Mappings (using the Add function) as follows:

    • If you need only one communications user, assign it in the Users area.

    • If you have grouped multiple communications users in a role, assign these in the Groups area.

Administration User

  1. Start the User Management Engine.

  2. Depending on which authorizations you want to assign, call one of the following roles.

    • Super-administration authorization for XML DAS administration: SAP_ARCH_SUPERADMIN

    • Read access only to XML DAS administration: SAP_ARCH_XMLDAS_VIEW

  3. Assign the user (or the administration user group or role) to the role.