Configuring Role Mappings

Map design-time logical roles to runtime physical roles.

When developing mobile business objects you can create and assign logical roles to mobile business objects and operations. When you deploy mobile business objects to SAP Mobile Server, you can map these logical roles to physical roles that are valid on SAP Mobile Server.

When mapping logical roles to physical roles, the wizard:

The wizard displays roles and mappings of the server to which you are deploying.
When creating a deployment profile, only user configured role mappings display.
Allows you to map a logical role to None (authorization always fails if a role is mapped to None, which disables access to the operations protected by this role).
Allows you to map a logical role to Auto (automatically passes through the mapping if the role exists on SAP Mobile Server and the logical and physical role names match).

During deployment of a Mobile Application project or mobile deployment package, follow wizard instructions to map logical roles to physical roles. Change the mapping for a logical role, if required:
- To change the state to either None or Auto, click the cell adjacent to the logical role and click one of these options.
- To change the role mapping itself, click the cell adjacent to the logical role and choose (Map Role). This command displays the Role Mappings dialog that allows you to manually set the logical and physical role mappings you require.

Selecting (Map Role) displays the Role Mappings dialog with the name of the physical roles to which you map in the text area of the dialog. When saved, the mapped physical roles display as a comma separated list.

Click OK after you map the role. You must map at least one physical role to enable OK.

Role Mappings Dialog
Option	Description
Role mappings	For this deployment. For example, if a mobile business object operation has the role design_role assigned to it, and the SAP Mobile Server to which you are deploying has a physical role named runtime_role, if you map design_role to runtime_role, any mobile business objects and operations assigned the logical role design_role are assigned runtime_role upon deployment and assume the characteristics of runtime_role.
Available physical roles	Displays the physical roles that are available on the SAP Mobile Server to which you are deploying.
Assigned physical roles	Displays the physical roles that are assigned to the package that you are deploying.
Physical role availability	Modify physical role availability: Add – add a physical role to the list of assigned physical roles, allowing that physical role to be mapped to a logical role. Input – allows you to enter a known physical role even if it is not listed. Remove – makes the selected physical role unavailable for mapping. Add All – makes all physical roles located on the SAP Mobile Server available for mapping. Remove All – makes all physical roles located on the SAP Mobile Server unavailable for mapping. Note: Removing physical roles only removes their availability to be mapped to logical roles. It does not remove them from the SAP Mobile Server.