Basics of User Administration in SAP EP Portal

User Administration in SAP EP Portal

The user management administration console is a Web-based tool that provides administrators with the functions they need to manage users, groups, roles, and user-related data in SAP User Management Engine (UME).

It comes in two forms:

· As a standalone Web tool

· If you are using UME with SAP Enterprise Portal, the administration console is integrated in the User Administration role

You start the administration console using the following URL:

<http/https>://<J2EE_Engine_Server>:<J2EE_Engine_HTTP_port>/useradmin

OR

Enter the following in your Web browser:

<http/https>://<AS_hostname>:<AS_HTTP_port>/nwa

Choose System Management > Administration > Identity Management.

OR

Enter the following in your Web browser:

<http/https>://<AS_hostname>:<AS_HTTP_port>/irj

Choose User Administration > Identity Management.

Views of Identity Management User Interface

Identity Management:

Identity management is a Web Dynpro application for managing users on the AS Java

With identity management, you can perform the following activities:

1) Search for a user, group, or role (simple search)

1. In the search area, choose the type of object you are looking for: user, group, or role.

2. Enter a string to search for.

The search function searches for this string in the user ID (users only) and name. Use the asterisk (*) as a wildcard. If you do not enter any text, the search function returns a list of all users, groups, or roles, depending on the object you chose.

3. Choose Go.

A list of search results appears in the Search view.

Note:

● When searching for portal roles, you can only search for the URL path below the portal content directory (PCD). You cannot search for the full path.

● You can narrow the search by selecting the data source you want to search, if there is more than one data source.

A federated portal network adds some complexity. For roles only, you can search remote data sources, meaning remote portal systems in your network. If you search All Data Sources this includes the remote portals. For all other principals (users, groups, and actions) the search only includes the data sources relevant to your local portal.

2) Search for a user (advanced search)


1. In the search area, choose User as the type of object you are looking for.

2. Choose Advanced Search.

3. Enter your search criteria in the required fields in the various tabs.

4. Choose Search.

A list of search results appears in the Search view.

View detailed information on a user, group, or role


In the search results list, select the user, group, or role. The detailed information appears in the Details view.

3) Create new user, group, or role


1. In the search area, choose the type of object you wish to create.

2. Choose Create.

3. Enter data as required in the Details view.

4) Copy an existing user


1. In the search results list, select the user you want to copy.

2. Choose Copy to New.

3. Enter a logon ID and define a password.

4. Choose Save.

5) Change existing user, group, or role


1. In the search results list, select the user, group, or role you want to change.

2. Choose Modify.

3. Change the data as required.

4. Choose Save.

6) Delete a user, group, or role

SAP recommends that you do not delete users, rather lock the user and set the expiration date of the account. Only delete a user after a period of time in accordance with your local auditing regulations.

1. In the search results list, select a user, group, or role.

2. Choose Delete.

If you delete a user, you are prompted to write a reason for deleting the user. This text is sent to the user in a notification e-mail, if you enabled e-mail notification.

Note:

You cannot delete a portal role. You can only delete the group, user, and user mapping assignments. To delete the role itself you must do that with the portal content tools.

7) Change the logon alias of a user.


To perform this activity, you must enable the use of a logon alias. For more information, see Using Basic Authentication (User ID and Password).

1. In the search results list, select a user.

2. Choose Modify.

3. Choose the Additional Information tab.

4. Change the data as required.

5. Choose Save.

8) Lock or unlock a user.


9) Approve or reject a user.

10) Generate a new password for a user.

11) Assign a user to a group or a role.

12) Export user, group, or role data from the source system into a plain text file. Then you must convert the text file into a format supported by the import function. .

IMPORT

Users, groups, and roles can be uploaded from external systems to the User Management Engine (UME) using the import function.

Note:

1) You cannot import users, groups, and roles simultaneously in one import run.

2) The file size is restricted to 1MB.

3) The user, group, or role ID is used to uniquely identify the records in the import data and to match the imported user data with any existing users, groups, or roles. If you select Overwrite Existing Data, all fields in the import data will overwrite all existing field values for existing users, groups, or roles. No record is kept of previous values.

4) During import, user data is automatically replicated to any connected systems for which replication is configured.

Importing user data

You have two options for importing users, groups and roles:

1) Paste the content of a data file in the text area.

2) Upload user, group, or role data from a Text file.

Standard Format/ Syntax :

Note:
The delimiter between two parameters is "next line" .
FOR USER:

[User]
uid=<User ID>
Password=<Password>
last_name=<Last name>
first_name=<First name>
email_address=<email address>
language=<code for language>
accessibility=0
job_title=<designation>
department=<department name>
group=<Group>;

Example:

[User]
uid=3456
Password=pass123
last_name=JAGDISH
email_address=jagdish@gmail.com
language=en
accessibility=0
job_title=ASSISTANT Engineer
department=ENGINEERING SERVICES
group=Engineer Group;

FOR GROUP:

Example:

[Group]
gid=ESS Group
gdesc=This is a group of all satisfied buyers
user=Shyam;Sunder;Raj
group=Group1;Group2

Note:
The users shyam, sunder, and Raj must already exist, otherwise an error occurs. Similarly, the groups group1 and group2 must already exist.

FOR ROLE:

Example:

[Role]
rid=ESS Role
rdesc=Role description
user=Shyam;Sunder;Raj
group=group1;group2

Note:
The users shyam, sunder, and Raj must already exist, otherwise an error occurs. Similarly, the groups group1 and group2 must already exist.