cancel
Showing results for 
Search instead for 
Did you mean: 

Security roles needed for IR and ID access

Former Member
0 Kudos

I am trying to create security roles that will allow the appropriate access for an XI Developer and also an XI role for all functions within XI. The documentation indicates the roles needed are in the composite roles SAP_XI_CONFIGURATOR and SAP_XI_DEVELOPER. I have created a composite role that includes all the roles from these two composites, plus the service user roles, and a few others. When we attempt to have a user with the composite role attempt to access the ID or IR, we get a message that says "No authorization for this transaction". The documentation in the XI config guide does not indicate any additional security roles are missing, but I am obviously missing something. Can anyone tell me exactly what roles are needed to allow access to the IR and ID? For access to all the XI functions, I created a composite that contains all the SAP_XI...roles, and all the SAP_SLD roles, plus the service user roles, etc. That role also does not work successfully and we get the same error. Can someone who has this working tell me exactly what roles they have assigned to a user that can successfully access the IR and ID? The SAP_ALL profile is not an option we want to pursue in our QA Systems. Thanks.

Accepted Solutions (0)

Answers (2)

Answers (2)

moorthy
Active Contributor
0 Kudos

HI,

Actually whatever you have given is right. Just go thru these also-

http://help.sap.com/saphelp_nw04/helpdata/en/89/05793c05f0807be10000000a11405a/content.htm

Regards,

Moorthy

Former Member
0 Kudos

SAP_XI_DEVELOPER, SAP_XI_CONFIGURATOR and SAP_XI_MONITOR are sufficient for developing IR/ID objects. Check the profiles you have created are generated or not in SU01 and try to regenrate them.

With these roles they cannot create products/components in SLD and also they cannot add a namespace to the exisiting components in IR and they cannot do the transactions like SM59, IDOC transactions and other XI adminstration transactions. But, these roles should all the users to work with IR/ID objects.

http://help.sap.com/saphelp_nw04/helpdata/en/4e/83623c9c6b530de10000000a114084/frameset.htm