HR ESS Services - Security setup

[Former Member]

Hello everyone.

I have been asked to add the following services to a set of users:

sap.com/ess_usaddr/Per_Address_US

sap.com/ess_usbank/Per_Bank_US

sap.com/ess_usw4/Per_W4_US

sap.com/ess~rem/PaySlip2

I understand that these allow users to enter and change their own data through a portal iview. However, how do I add these services? Is it to a user through the parameters tab? Where do I add these or assign them? I have found very little configuration into online.

Any guidance would be appreciated!

Todd

[Former Member]

Hello everyone.

I have been asked to add the following services to a set of users:

sap.com/ess_usaddr/Per_Address_US

sap.com/ess_usbank/Per_Bank_US

sap.com/ess_usw4/Per_W4_US

sap.com/ess~rem/PaySlip2

I understand that these allow users to enter and change their own data through a portal iview. However, how do I add these services? Is it to a user through the parameters tab? Where do I add these or assign them? I have found very little configuration into online.

Any guidance would be appreciated!

Todd

[Former Member]

Hi,

Please check the following notes

544708 - Changed password rules prevent ITS-based logon

872773 - Changed password rules and ITS-based logon

Also check this link

http://help.sap.com/printdocu/core/print46c/en/data/pdf/PAPA/PAPA.pdf

Thanks,

Sridhar

[Former Member]

>

> Hello everyone.
> 
> I have been asked to add the following services to a set of users:
> 
> sap.com/essusaddr/Per_Address_US
> sap.com/essusbank/Per_Bank_US
> sap.com/essusw4/Per_W4_US
> sap.com/ess~rem/PaySlip2
> 
> I understand that these allow users to enter and change their own data through a portal iview. However, how do I add these services? Is it to a user through the parameters tab? Where do I add these or assign them? I have found very little configuration into online.
> 
> Any guidance would be appreciated!
> 
> Todd

You have to use PFCG. The P_PERNR authorization object will is a key to building ESS security roles. Here is a link from SAP help: http://help.sap.com/search/highlightContent.jsp

[Former Member]

You can add new services or specific services by using the S_SERVICE object.

And, using P_PERNR object to idenitfy which inoftypes an employee can read or write for themselves.

[Former Member]

Ideally the developer should do this or document it for you - latest when they activate the service, or when wrap the corresponding function module and create a definition for it. At that point they should test it and know how it is implemented and which authorizations it will need (and which others it should not be mixed with).

Please read the documentation on object S_SERVICE as mentioned by Penny.

Cheers,

Julius

[Former Member]

Hi,

The services mentioned by you have to be added to the role in transaction PFCG.

1) goto Pfcg->menu tab-> Authorization default button

2) Select External Service

3) Type of ext service as Webdynpro

4) Service as the sap.com/ess_usaddr/Per_Address_US

5) In the Name field give the service name

6) Save and generate the role again.

Please let me know if you still have any questions. Wil be happy to help.

Thanks,

Vinaya