GRC10 Access Request give dump when slecting role

Note
The following error text was processed in system ACS : Unable to interpret YES as a number.
The error occurred on the application server ch01erp9001_ACS_06 and in the work process 9 .
The termination type was: RABAX_STATE
The ABAP call stack was:
Method: ON_BROWSE_COLLECT_SELECT of program /1BCWDY/KHXHSW01UB84G8JOLL8O==CP
Method: ON_BROWSE_COLLECT_SELECT of program /1BCWDY/KHXHSW01UB84G8JOLL8O==CP
Method: IF_WDR_COMPONENT_DELEGATE~WD_INVOKE_EVENT_HANDLER of program /1BCWDY/KHXHSW01UB84G8JOLL8O==CP
Method: INVOKE_EVENTHANDLER of program CL_WDR_DELEGATING_COMPONENT===CP
Method: FIRE_EVENT of program CL_WDR_COMPONENT==============CP
Method: IFWDR_INTERNAL_API~RAISE_EVENT of program SAPLWDR_RG_PROXY_FACTORY
Method: IF_COMPONENTCONTROLLER~FIRE_GRAC_BROWSE_COLLECT_EVT of program /1BCWDY/KHXHSW01UB84G91MXG7Q==CP
Method: RETURN_SELECTION of program /1BCWDY/KHXHSW01UB84G91MXG7Q==CP
Method: IF_COMPONENTCONTROLLER~RETURN_SELECTION of program /1BCWDY/KHXHSW01UB84G91MXG7Q==CP
Method: ONACTIONOK of program /1BCWDY/KHXHSW01UB84G91MXG7Q==CP

Hi there,
If it is type RABAX_STATE, then you will probably find further information in transaction ST22 since it is an ABAP error.
I would check this and then look at the underlying code. It might be a system bug which is fixed through an SAP note or might benefit from an ABAP'ers eyes.
Simon

Similar Messages

Approving the access request gives error in Sharepoint Foundation 2013 / Email notification codepage problem

Hello
On our SharePoint Foundation 2013 server approving Access Requests fails with "request approval failed" after pressing the approve button. The user is site administrator, site collection administrator and site owner.
In the ulsviewer we see the following error:
System.NotSupportedException: No data is available for encoding 1033.     at System.Text.Encoding.GetEncodingRare(Int32 codepage)     at System.Text.Encoding.GetEncoding(Int32 codepage)     at Microsoft.SharePoint.Email.SPMailMessageHelper.GetSocialNotificationMailMessage(SPWeb
web, String senderAddress, String senderName, Boolean useSenderAddressAsFromAddress, String recipientAddress, CultureInfo recipientCulture, String subject, String sidebarHtml, String descriptionHtml, String customMessageHtml, List`1 embeddedAttachments)
at Microsoft.SharePoint.SPSharingEmailHelper.SendAccessRequestsEmail(SPCachedItemEventProperties eventProperties, SPUser sender, String message, SPUser recipient, String recipientEmailAddress, String strSubject, String body)     at Microsoft.SharePoint.SPSharingEmailHelper.SendRequestorNotification(SPCachedItemEventProperties
eventProperties, String objRequestedTitle, SPUser reqByUser, SPUser reqForUser, String message, Boolean isMessageUpdate, Int32 status)     at Microsoft.SharePoint.SPAccessRequestsOperationHandler.HandleStatusChangingToApprove(SPCachedItemEventProperties
properties, Int32 reqByUserId, Int32 reqForUserId, Int32 newStatus, SPUserCollection users, SPGroupCollection groups, IEnumerable`1 roleDefs)     at Microsoft.SharePoint.SPAccessRequestsOperationHandler.HandleRequestStatusChanging(SPCachedItemEventProperties
properties, SPUserCollection users, SPGroupCollection groups, IEnumerable`1 roleDefs)     at Microsoft.SharePoint.SPAccessRequestsOperationHandler.ItemUpdating(SPCachedItemEventProperties properties, SPUserCollection users, SPGroupCollection
groups, IEnumerable`1 roleDefs)     at Microsoft.SharePoint.SPAccessRequests.UpdateItem(Int32 newStatus, SPUser reqFor, String convStr, String permType, Int32 permissionLevel, Boolean extendInvitation, String anonLinkType, SPList accReqList,
SPListItem item, SPUserCollection users, SPGroupCollection groups, IEnumerable`1 roleDefs)     at Microsoft.SharePoint.SPAccessRequests.ChangeRequestStatusCore(Int32 newStatus, SPUser reqFor, String convStr, String permType, Int32 newPermissionLevel,
Boolean extendInvitation, String anonLinkType, SPList accReqList, SPListItem request)     at Microsoft.SharePoint.SPAccessRequests.ChangeRequestStatus(Int32 itemId, Int32 newStatus, SPUser reqForUser, String convStr, String permType, Int32
permissionLevel, Boolean extendInvitation, String anonLinkType, SPWeb web)     at Microsoft.SharePoint.SPAccessRequests.ChangeRequestStatus(Int32 itemId, Int32 newStatus, String convStr, String permType, Int32 permissionLevel)
at Microsoft.SharePoint.ServerStub.SPAccessRequestsServerStub.ChangeRequestStatus_MethodProxy(XmlNodeList xmlargs, ProxyContext proxyContext)     at Microsoft.SharePoint.ServerStub.SPAccessRequestsServerStub.InvokeStaticMethod(String methodName,
XmlNodeList xmlargs, ProxyContext proxyContext, Boolean& isVoid)     at Microsoft.SharePoint.Client.ServerStub.InvokeStaticMethodWithMonitoredScope(String methodName, XmlNodeList args, ProxyContext proxyContext, Boolean& isVoid)
at Microsoft.SharePoint.Client.ClientMethodsProcessor.InvokeStaticMethod(String typeId, String methodName, XmlNodeList xmlargs, Boolean& isVoid)     at Microsoft.SharePoint.Client.ClientMethodsProcessor.ProcessStaticMethod(XmlElement
xe)     at Microsoft.SharePoint.Client.ClientMethodsProcessor.ProcessOne(XmlElement xe)     at Microsoft.SharePoint.Client.ClientMethodsProcessor.ProcessStatements(XmlNode xe)     at Microsoft.SharePoint.Client.ClientMethodsProcessor.Process() 449c7b9c-6cec-f09a-9792-3d76c4d7e351
The server is running on an English Windows 2012 Server and also the English version of SharePoint Foundation 2013 with the June 2013 CU.
We see exactly the same error when add users to a group with the option "Send an email invitation" enabled.
Any ideas what could cause this problems?
Regards,
Reinhard

Hi Reinhard ,
According to your error message, it says that no data is available after encoding the social notification mail message. It should be caused by the E-Mail encoding setting.
For troubleshooting your issue, please check the character set of your E-Mail Settings:
Verify that the user account that is performing this procedure is a member of the Farm Administrators group.
On the Central Administration Home page, click System Settings.
On the System Settings page, in the E-Mail and Text Messages(SMS) section, click Configure outgoing e-mail settings.
On the Outgoing E-Mail Settings page, make sure
Character set setting is 65001(Unicode UTF-8).
Best Regards,
Eric
Eric Tao
TechNet Community Support

Gives dump when page is extended

Hi,
I am develpoing one form which has two pages. Now my requirment is that my first page can be extended and my second page also can be extended up to no of pages. I am using main window at first page and last window at second page now when my first page is extended it gives error .....and also when my second page is exteded gives error .......What is solution for that.?
Help will be rewarded by good points.

Hi
don't use multiple Windows
Just use a single MAIN window and write the complete thing in that as per the sequence of printing
it will print in any number of pages correctly
define the pages FIRST and NEXT and define this MAIN window in both the pages and run
Regards
ANJI

User details are not populating in access request

Hello All,
We have configured GRC 10 with LDAP and we are able to search the users in LDAP tcode(find option) and in the access request. But when i select the user and click on ok in the access request, user information is not populating to user details tab. I have followed the SAP Standard doc and configuration is fine. When i select data source as SAP system, user details are population as expected. But when i use LDAP as data source, i am having the issue. I hope this is an field mapping issue but i tried all different options but no solution i found. Kindly help me with your expert suggestions.
Field mapping is as follows:
LASTNAME
SN
FIRSTNAME
GIVENNAME
USERID
SAMACCOUNTNAME
ROLE_NAME
NAME
MEMBER_OF
MEMBEROF
EMAIL
MAIL
MANAGERID
MANAGER
Regards,
Jai Reddy.

I know the path, but how to check it? is it using metaverse search?
Look at the Runs. Are they succeeding, or failing to connect?
Remove the Bit 17 and try again.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Hi Trying to download CS5 Design Premium. We have a copy on the Mac and want to put a second copy on the Macbook pro. Can download the file but when it is clicked the file give an error message "User access denied" and dumps the download. So hence I do no

Hi Trying to download CS5 Design Premium. We have a copy on the Mac and want to put a second copy on the Macbook pro. Can download the file but when it is clicked the file give an error message "User access denied" and dumps the download. So hence I do not get an installation screen or a chance to enter the Licence no.

Use another browser.
Mylenium

GRC 10.0 SP 14 access request form displays unassigned roles

Dear experts, when I open the Access Request form and I select a user, and then I click on existing assignments, I am shown a list of roles and systems assigned to this user. However, when I go to those corresponding backend systems to see if the roles are actually assigned, it turns out that they are not. I have rerun all the sync jobs and they all completed successfully. Auto provisioning works on all these systems and there are no issues in terms of the RFC. However, as indicated by the attachments, it continues to show rules that were unassigned from this user some time ago. where might these assignments be coming from?

Hi Santosh,
did you run the repository object sync job in full mode for this connector? This has mostly to do with outdated sync information as you can also see in the following note:
http://service.sap.com/sap/support/notes/1667112
Please check again.
Regards,
Alessandro

ARQ: Default Role Provisioning Problem in Access Request???

Hi,
This Business Scenario is very common to have default role(s) assigned to a User at the back end system. So I have the same requirement. In achieving this, I followed below thread here:
MSMP Issue - GRC 10
I have also followed the note#1616092 for configuring the Default Roles.
I have performed below activities:
1. Param#2009 = YES
2. Param#2010 = 001
3. Param#2011 = REQUEST
4. Param#2013 = SYSTEM
5. Param#2038 = YES
6. Imported a test role and NO ROLE OWNER is maintained.
7.In NWBC->-AM->RM, I maintained a test role as a default.
Now when I raise a request, application is successfully adding the default role to the request. However, the problem I am facing is that, one Manager approves the request, it is getting failed.
The Audit Log says that, the STAGE is "Completed" but I could also see "No Agent Found, Cancelling path XYZ (in stage no. 002- GRAC_ROLEOWNER)
May I know what I am missing here? Why I am getting error and how can I resolve it?
Please advise.
Regards,
Faisal

Hi Faisal,
sorry for late resposne I was away traveling.
default roles are being added by default to access request
Yes, these roles are added to the access request.
FN: OK
and this roles are following your normal paths which I guess assumes manager and role owner.
How such roles (not having role owner) will follow the normal path Manager->Role Owner if we are enabling routing (Rule ID: GRAC_MSMP_ROUTE_NO_ROLEOWNER) at manager stage level? Can you please help me understand this?
FN: OK If you enable routing it will go to routing path. I have understood your post as you put in question the behavior of default roles and my point was - they act exacly the same like regular roles.
- request is going to detour path
Does it answer my question?
FN: My point was default roles like all other will go to detur path (assuming you setup it globaly)
Deafault roles can have separate path (in my case) where only supervisor is approving it.
Instead of "GRAC_MSMP_ROUTE_NO_ROLEOWNER" I believe we can have our own rule to have a separate path for such default roles based upon business requirement. Correct me, if required.
FN; correct
It was design in way that initiator rule based on role crtivality is sending this rule to separate path without role owner.
Again, I believe you have enabled your custom rule here to achieve your business requirement instead standard rule id.
correct
If you do not have separate path - this role like any other will follow standard path you have.
Here, I had used a stage called "ZNO_STAGE_PATH" for routing the system line item, which does not have any owner. I used the same path ID for "GRAC_MSMP_ROUTE_NO_ROLEOWNER"Rule ID and it is working fine as of now.
FN: good
My question is that, do you think if I don't use "ZNO_STAGE_PATH" as Path ID for "GRAC_MSMP_ROUTE_NO_ROLEOWNER" Rule ID, should it follow the standard Manager->Role Owner path and these default roles get approved and assigned automatically?
FN: You should use the path ZNO_STAGE_PATH as path ID for routing rule.
If the role does not have role owner it will not allow you the even get to Role Onwer stage - request will be detured.
My point from the begining was - instead of using the routing rule - in our case we used separate path for default roles without role owner:) only consisted with manager stage. Again your approach is different but also will work.
Then which Path ID should I use for "GRAC_MSMP_ROUTE_NO_ROLEOWNER" Rule ID, as it is mandatory?
Should I use my current path for New/Change Account where at Manager level this was routed due to non availability of role owner?
Are you asking for default roles?
Please advise.
Regards,
Faisal

No Roles In Access Request - GRC 10 SP06

Hello Experts ,
With GRC 10 SP 06 ,I am facing strange issue .In Access request when I search for roles to be assigned I am not getting any result .
I have performed all post installation system and same working with SP 05 in other landscape .
Important steps like running back ground jobs for user.role.profile synch role import all is done .
Thanks & Regards
Ashish

Hi,
You have hit a similar problem I faced after moving to SP06.
What is the value assigned to the "Role Status"? If it is not "Production/PRD", then Access request doesn't allow it to be displayed as a selectable option for assignment. Prior to SP06, this was not checked, but SP06 got updated to ensure roles that are not in Productive use status can not be assigned for usage.
Once you change this status over in the roles you wish to make available for assignment via Access Request, you should be able to search and select them.
Hope that helps.

GRC 10 Not able to search roles in Access Request Creation

Hello Experts,
I am unable to search for roles while creating access request by giving system name.
I am able to search with any other search criteria except system.
When I look for valid entries for System I get the following connector group values:
ECC - (Custom Connector Group)
SAP_BAS_LG
SAP_ECC_LG
SAP_HR_LG
SAP_R3_LG
All the above connector groups are pointing to the same system XXXCLNT100. I want to get only ECC as the result when I search for the system (Probably then it might work right).
Others that start with SAP are linked to the XXXCLNT100 for generating rules after activating BC Sets.
Any ideas how to get this work !!
Thanks and Regards,
Ajesh Raju.

Found Note:
Note 1654033 - Role search by System is giving same result
Regards,
Ajesh.

Composite role not showing in Access request screen. (BRM not used)

Dear All
I have created a composite role in backend system with 2 single roles.
a. I have imported the single roles using the NWBC screen.
b. run the auth sync job.
c. imported the composite role as a techincal role using the NWBC import screen.
the import procedure was successfully completed.
But when i try to search for the role in Access request screen for a user - i can only see the single roles & not the composite roles?
Pls advise
Raju

Hi Raju,
In addition to Alessandro's valuable inputs, you need to be sure whether or not you were able to generate the composite roles (in NWBC).
The final stage of the composite role has to be in complete status.
Regards,
Ameet

Access Request Creation - Role or System Required at Creation

Hi - We are installing GRC 10.1 SP6. When I create a request it is forcing me to include at least one system or role. Is there a system setting that I'm missing to not enforce the requirmenet to add either a system or a role at the time you create a request?
This is not a huge deal to me as I created templates that include the systems we provision to by default. However, if I don't need to include a system or role at time of request creation I would prefer that this requirement be turned off.
Thanks,
Rich

Hi Richard,
additionally to what Colleen has already mentioned you can set up the provisioning configuration in the way that you don't have to select a system in the access request. So basically a requests requires either a system or a role. Most of the time (best practice) users select a role without a system. Personally I also recommend that way as the system comes with the role automatically.
In the global provisioning configuration (SPRO > AC > User Provisioning > Maintain Provisioning Settings) you have to define that the user gets created when the role gets assigned.
Alternatively, as you would like to remove both, you can check if it is workable via the request type settings. I don't have a system to test, but you might be lucky. Remove the "Assign object" action from the request type and check if it is still mandatory to add at least one assignment.
SPRO > GRC > AC > User Provisionign > Define Request Type
Please let me know if this helps.
Regards,
Alessandro

Access Request "Model User" - Role Type "Role" disabled in "Select Model Access" screen.

Hi All,
I am implementing GRC AC 10.0 - ARM for provisioning in SAP R/3 and Enterprise Portal systems.
While using "Model User" access request, I find that UME portal groups are coming as disabled and are not available for selection in tab 'Select Model Access'.
Also only Type "Single Roles" appear for assignment or selection in the "Model User" form. Type "Role" appears disabled.
Request help, thanks.
Regards,
Piyush.

Thanks all for the suggestions but issue persists.
I ran repository object sync in full sync mode for the portal system.
I re-imported the portal groups.
Still as earlier while using "Model User" request, I can see the groups with the reference user but it is grayed out and not available for selection.
The other three scenarios (Access request, Copy Request & Template) work fine. In those request I can select the portal groups as well.

Access request creation - select roles screen - field boxes were not aligned

I'm not sure if this is really the screen of SAP GRC 10.1 access request creation. The field boxes were not aligned. Is there a note to fix this issue? Thank you.
Regards,
Jenilyn

Hi Mohamed,
Even I used Google Chrome, it's the same. Still facing the same issue. Is there any other way to solve this issue?
Thank you.
Regards,
Jenilyn

OIM 9.1.0.2 ORA-0936 encountered when provisioning roles

I've configured an Access Policy that provisions users without requiring approval to a DB through the DB connector. It also provisions them with roles: CONNECT and DBA.
The latter was achieved by making Role provisioning dependent upon User creation completion in the Access Policy. The Access Policy is also where the roles are specified.
The user is created and role provisioning fires OK, but gets rejected.
The relevant section in the log looks like this:
ERROR RMICallHandler-266 XELLERATE.DATABASE - select UD_DB_ORA_P_PRIVILEGE from UD_DB_ORA_P where UD_DB_ORA_P_KEY =
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:138)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
<snip>
     at java.lang.reflect.Method.invoke(Method.java:585)
     at com.evermind.server.rmi.RmiMethodCall.run(RmiMethodCall.java:53)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
ERROR RMICallHandler-266 XELLERATE.DATABASE - Class/Method: tcDataBase/readPartialStatement encounter some problems: ORA-00936: missing expression
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:138)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
     at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:113)
     <snip>
     at com.evermind.server.rmi.RmiMethodCall.run(RmiMethodCall.java:53)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem entered.
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: event - Value: adpDBADDPRIVILEGE
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: New Status - Value: R
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: SchData - Value: Data Access Error
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: Reason - Value: Exception com.thortech.xl.dataaccess.tcDataSetException: Data Access Error was thrown in adapter "DB Add Privilege". The Adapter Response was "Data Access Error"
There is an article about this on Oracle support, which I think is relevant, it states:
CAUSE
The error is caused by the fact that the rule is based on the values of the process form which are not yet commited to the database.
The usage of the process form will be avoided when creating rules for prepopulate adapters.
SOLUTION
Create a rule based on the "Request Target Information" which is reffering attributes of the OIM target user which has to be provisioned.
Suppose an access policy is used and this is based on a specific autogroup membership, the same rule can be used when creating the rule for the prepopulate adapter.
Unfortunately, this is greek to me.
Can anyone explain how I can resolve this problem with the role provisioning?
Many thanks,
2Hugh
Edited by: 2hughg on 08-Mar-2011 09:19

I had a privilege provisioning task set up as well, when I removed that, the error condition went away.
2hugh

HOW TO CONFIGURE MANAGER or APPROVER USER IN ACCESS REQUEST MANAGEMENT TO APPROVE OR REJECT REQUEST

hi sap gurus,
i configured grc 10 system successfully. I created one user: GR_AR_APP001 and assign following roles:
SAP_GRAC_ACCESS_APPROVER
SAP_GRAC_ACCESS_REQUEST_ADMIN
SAP_GRC_FN_BASE
SAP_GRC_FN_NUSINESS_USER
and I maintained GR_AR_APP001 in access control owners as "POINT OF CONTACT", "SECURITY LEAD" and "WORKFLOW ADMINISTRATOR"
but when i am creating access request for new user and defining MANAGER under user details tab as GR_AR_APP001.
the user GR_AR_APP001 is not receiving any request for APPROVE or REJECT in his WORK INBOX.
can u please guide me how to configure APPROVER or MANAGER to approve or reject request.
I will be very much thankful if you guide me successfully.

Hi Colleen,
thanks a lot for your time.
PIC1: I created one user: GR_AR_APP001
and assigned all the GRC ROLES.
PIC2: I assigned owner type to GR_AR_APP001 user : POINT OF CONTACT, SECURITY LEAD and WORKFLOW ADMINISTRATOR in NWBC ACCESS CONTROL OWNERS
PIC3: I created one EUP 980 (copied from default EUP)
PIC4: I maintained default manager as GR_AR_APP001 user in 980 EUP
PIC5: I selected SAP_GRAC_ACCESS_REQUEST process id
PIC6: I created one agent id as ZGRAC_MANAGER11 in which I added approver user id: GR_AR_APP001
PIC7: I saved agent id
PIC8: I added agent id as ZGRAC_MANAGER11 in stage5 in manager stage.
PIC9: I saved
PIC10: I maintained EUP 980 (in which I configured manager as GR_AR_APP001 user) in stage 5 task settings
PIC11: Maintain Route Mapping, I clicked on next
PIC12 and PIC13: I saved and activated.
After this process I created one request for new account and selected the manager as GR_AR_APP001 and one request is created with request no 9000000030.
now I logged into system by user GR_AR_APP001 and checked, there is no request under his work inbox.
please guide me at least one procedure, how to receive request in approver work inbox so that I can learn other procedures to configure approver as per our organization requirement.
thanks for your support Colleen.

GRC10 Access Request give dump when slecting role

Similar Messages

Maybe you are looking for