Defining Role Administration

Purpose

You can configure role administration in accordance with your requirements and prerequisites. The decision you make depends on where the original of the relevant object is to be.

Recommended Options for Role Administration

·        The users are stored in a directory service connected to the SAP NetWeaver Portal and the original roles are in the portal (roles were created there or migrated there from ABAP systems). Roles are assigned in the portal and distributed to the connected ABAP systems using WP3R.

·        The users are stored in the ABAP system and the original roles are in the portal (roles were created there or migrated there from ABAP systems). Roles are assigned in the portal and distributed with WP3R.

·        The users are stored in the ABAP system and the original roles are in the ABAP system. Roles are assigned in the ABAP system. (The ABAP roles are displayed as UME groups in the J2EE Engine and assigned to the relevant portal roles there.)

Role administration consists of two parts that are usually implemented by different teams: role creation and assigning the roles to users.

The role creation is independent of the role administration scenario chosen above. The role administration affects only the assigning of roles.