We have had question from customers on how to restrict end users from editing flavors. So we decided to have a tutorial in our Practitioner Forum session 14 on how to use shipped role or create custom roles in Personas 2.0 to meet your needs. For those who missed the session, I am documenting the same here.
We deliver 5 roles in Personas 2.0 which should cover most of the requirements. These roles can be viewed under SPRO -->Cross Application Components-->SAP Screen Personas--> Maintain Personas Roles
In addition you can also create custom roles to control the user access at very granular level. You can refer to "Maintain Roles" section of SAP Screen Personas configuration guide (you can find it at http://help.sap.com/personas) for BitMask values.
For example, if you need a role with which user can see basic view, switch between flavor, add new flavors from flavor gallery but not edit the flavor then you can create a new role by adding the BitMask values as follows:
AccessToProfileFlavors (allows to switch between flavors) = 0x1
AccessToSharedFlavors (get new ones from flavor gallery) = 0x2
ShowBasicView (have basic view) = 0x2000000
------------------------------------------------------------------------------------------------------
NewRole = 0x2000003
Convert this to decimal and new role value is 33554435. You can add this role with under Maintain Personas Roles and assign it to your users in admin ui (/n/persos/admin_ui -> User Management -> User Maintenance)
You can also use our PersonasRoleValueCalculator.xls (click here) to get the new role value quickly. Just select "yes" against each role entry under "allowed?" column and it will provide you the new role value.
8 Comments