NW UME Administration for xMII ver 12.00

[Former Member]

Reposting the question posted earlier in xMII forum for quicker response...

1) All these days, BASIS team used to be managing user accounts and groups in UME.

Now, xMII Ver 12.0 is sharing NW UME to create Users and Groups which will be used within xMII environment for content management.

This necessitates xMII admin to have access to UME to create xMII specific groups and add users to these groups.

But once xMII admin has access to UME, he can even access other groups and add users to other groups. So now these users can cause potential problem to other applications running on Netweaver.

My question is how can a BASIS admin restrict access to xMII admin in UME. So that xMII admin will have rights only to create and add Users to xMII groups only.

[sufw]

Maybe you can maintain your user accounts and role memberships centrally (e.g. MIIS, Active Directory, LDAP, etc.) and have the UMEs on each of your 66 xMII servers map those roles in a consistent fashion. That way, you have some central control over who has what access, and can make sure that no local UME users are transported into production...

[jcgood25]

Praveen,

I'm not sure how this could be done from the UME perspective, but couldn't the BASIS admin create the desired xMII content users and roles for the xMII admin? Put together a process for defining the request and have the UME admin do this task based upon the needs of the application.

Regards,

Jeremy

[Former Member]

Hi Jeremy,

Since we are dealing with around 66 sites implementation, and role configuration requirements are different in most of these sites. Hence we cant have common roles at the application level.

User additions to different roles are very common and frequent as per current business scenario.This calls for the xMII admin to have administrator priviledges on UME.

So I am trying to find a way, where xMII admin has limited access to NW UME but still allows him to add users to different groups(xMII groups).

But at the same time he should not have access to add him self or others to Administrator group of NW UME.

[salvatore_castro]

Praveen,

Jeremy's previous suggestion will allow for accomodation of these business rules, but the Roles have to be consistent between the sites. Think of it as a tree structure and your just adding a new parent node that is not under the NW Admin node but is higher than other nodes in the NW Admin tree.

-Sam