Newly created users are not able to log in through WEBGUI in SRM system

Hi All,
I have created new roles in the SRM system with the BP tanscation codes Like( BBPSC01
BBPSC02
BBPSC03
BBPSC04)
after that I have created new users and I have assigned these roles to users. Users are able to login throgh SAP GUI but Users are not able to log in WEB GUI.. Once they providing user id and password in web gui. they are facing issue.
For web login do we need to maintain any special settings in SRM system?
Please suggest me.
Thanks in advance.
Regards,
Siva

Hi,
Here is the error when user is giving user id and pwd.
Note
The following error text was processed in the system DN0 : Error message occurred.
The error occurred on the application server dm2serv_DN0_01 and in the work process 0 .
The termination type was: RABAX_STATE
The ABAP call stack was:
SYSTEM-EXIT of program SAPMSYST
Regards,
Siva

Similar Messages

Domain Users are not able to log in to Domain Computers - Administrators are able to do so

I have Primary Domain Controller and Secondary one, The users can log in to both as I have changed the locally Policy to allow Domain users to log in.
But I am having problem with users who can not log in to computers joined the domain. I noticed that ONLY Administrators allowed to log in locally in the Policy and if want to add users, i will not be able to do so as Adding Users or Group is Disabled.
Advise is appreciated.

Hi,
Please follow the below steps for checking whether either "Allow Logon Locally" or "Deny Logon Locally" is enabled in the default policy,
1. Go to start -> run -> tupe GPMC.MSC, to open Group Policy Management Console.
2. In the Group Policy Management Console,right click and edit the default policy and navigate to the node "Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment".
3. In the "User Rights Assignment" node, check whether the options "Deny log on locally" or "Allow Logon Locally" are
defined and groups added to those options to confirm the logon problem of domain users.
NOTE: Also check the local policy, as you have mentioned "I have Primary Domain
Controller and Secondary one, The users can log in to both as I have changed the locally Policy to allow Domain users to log in."
Regards,
Gopi
www.jijitechnologies.com

End users are not able to save interactive pdf form created with designer

I am new to using LiveCycle Designer and have created a pdf form but my end users are not able to save edited form. Does this have something to do with whether the form is static or dynamic. If so, I am not exactly sure how to use the restorestate option to convert it back to static. I also tried to enable the "user rights access in adobe reader" under the advance menu and had no luck.
My end users have acrobat reader 9 - do I need them to download anything else, maybe professional.

Thanks Paul for your reponse
In my Adobe Pro I don't see the option Reader Extend rather I enabled "Enabled Usage Rights in Adobe Reader" amd I figured this was somewhat the same. So if I enabled this option in Adobe Pro already and they are still not able to edit the fillable text slots or save it what other option do I have in figuring this out.

Users are not able to create POs from PRs having Production Order (F)

Hi Gurus
Users are not able to create POs from PRs having Production Order (F) as creation indicator.
Whenever we are trying to convert the PR to PO we are getting the error message "Requisition has different doc. type NB and item cat. >&<" based on the below OSS# 938154 condition for the creation indicator type F.
Would you please investigate and advise what OSS notes are required to be able to use item category L (subcontracting) on a PO for a requisition generated from a network activity via Procurement Type = "Preliminary requisition for WBS element".
Thanks,
Sada.

Hi Ajay & Andra
Whenever we are trying to convert the PR to PO we are getting the error message "Requisition has different doc. type NB and item cat. >&<" based on the below OSS# 938154 condition for the creation indicator type Production order (F).
Our Business requirement as shown below.
1).The problem - we currently have no way to "direct requisition" an item to be procured via subcontracting - only itu2019s possible via MRP.
2).These behaviors are inconsistent as the requisition process should not impact the procurement process. Can we find a way to influence the creation indicator on the requisition so that it does not appear as a production order?
Please suggest any alternate method for achieving this.
Thanks & Regards
Sada

Multibyte users are not able to authenticate using Default Authenticator

Hi,
We are facing an issue with multi-byte user authentication. All chinese and french users are not able to authenticate.
When we try to authenticate with réseau/welcome1, where réseau is a user created in embedded LDAP, authentication fails.
Security log generated is-
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <com.bea.common.security.internal.service.CallbackHandlerWrapper.handle got username from callbacks[0], UserName=rseau>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <LDAP Atn Login username: rseau>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <getConnection return conn:LDAPConnection { ldapVersion:2 bindDN:""}>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <authenticate user:rseau>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <getDNForUser search("ou=people,ou=myrealm,dc=base_domain", "(&(uid=rseau)(objectclass=person))", base DN & below)>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <getDNForUser search("ou=people,ou=myrealm,dc=base_domain", "(&(uid=rseau)(objectclass=person))", base DN & below)>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <returnConnection conn:LDAPConnection { ldapVersion:2 bindDN:""}>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <[Security:090302]Authentication Failed: User rseau denied>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <com.bea.common.security.internal.service.LoginModuleWrapper.commit>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <LDAP Atn Abort>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <com.bea.common.security.internal.service.LoginModuleWrapper.commit delegated, returning false>
####<06-Jan-2009 22:47:49 o'clock PST> <Debug> <SecurityAtn> <jjpeng-lab1> <AdminServer> <[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1231310869374> <BEA-000000> <weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.authenticate authenticate failed for user rseau>
We are using WebLogic Server 10.3 Default Authenticator as Authentication Provider.
I found few change requests related to multi-byte from the link: http://edocs.bea.com/wls/docs103/issues/known_resolved.html
Am I missing some configuration? Has anyone else tried authenticate multibyte username?
Thanks,
Anuj

Can you provide more information on the use case?
1. Is this using Basic or Form authentication?
2. If the user logs on from a web-based client, do you get the same failure with Internet Explorer as with other browsers?
3. On which operating system is the WebLogic AdminServer running?
With WebLogic Server 10.3, I am able to authenticate with multi-byte (French and Japanese) usernames. (My environment: form auth, Firefox 3.0.5, WLS runs on Linux RHEL 4.0.)

Webapplication users are not able to login

Hi
I am having windows 2012 domain controller. One web application running in this domain controller. Users in the domain all have access to web application. After giving the username and password it will allow the user to login to application. But the thing
is some users are not able to login to application, at the same time same users able to login to systems with user id.
Web application is integrated with AD for authentication. Removing the user not able to login, creating again, after that particular user able to login to that application.
Please give me some suggestion...

That might be due to the fact that these users have too many group membership. Read that: http://support.microsoft.com/kb/327825/en-us
You can get more details in the Security logs of the server.
Microsoft made some improvements here by introducing KDC Resource SID Compression: http://social.technet.microsoft.com/wiki/contents/articles/20886.kdc-resource-sid-compression.aspx
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

Users are not able to use Outlook 2010 to view free/busy information and cannot set Out Of Office automatic reply

Hi All,
Please help me.
I have an issue where users are not able to use Outlook 2010 to view free/busy information and cannot set Out Of Office automatic reply. But they are can set Out Of Office automatic reply from OWA. My exchange server is Ms Exchange 2010.
The test E-mail AutoConfiguration failed with this error:
Autodiscover to https://mydomain.com/autodiscover/autodiscover.xml starting
GetLastError=12175; httpStatus=0.
Autodiscover to https://mydomain.com/autodiscover/autodiscover.xml Failed (0x800C8203)
Autodiscover to https://autodiscover.mydomain.com/autodiscover/autodiscover.xml starting
GetLastError=12007; httpStatus=0.
Autodiscover to https://autodiscover.mydomain.com/autodiscover/autodiscover.xml Failed (0x800C8203)
Local autodiscover for mydomain.com starting
Local autodiscover for mydomain.com Failed (0x8004010F)
Redirect check to http://autodiscover.mydomain.com/autodiscover/autodiscover.xml starting
Srv Record lookup for http://autodiscover.mydomain.com/autodiscover/autodiscover.xml Failed (0x80072EE7)
Srv Record lookup for mydomain.com starting
Srv Record lookup for mydomain.com Failed (0x8004010F)
Any idea?
Thanks,
Pieter

OK.
Please follow this step.
1. As you said you are in coexistence step , so for now all endpoint already point to Exchange 2010 right?
2. Check legacy owa redirect that you already configure
3. In Exchange 2010 , Make sure that you already configure "Autodiscoverinternaluri" by this command set-clientaccessserver -identity "servername" -autodiscoverinternaluri
https://autodiscover.domain.com/autodiscover/autodiscover.xml. and don't forget to create autodiscover record in DNS
4. in Exchange 2010 , Make sure that you already configure "EWS" path by this command set-webservicesvertualdirectory -identity "XXX\Default web site name" -internalurl
https://yourinternalurl/EWS/Exchange.asmx -externalurl https://yourexternalurl/EWS/Exchange.asmx
5. don't forget to replicate freebusy from Exchange 2003 to Excahnge 2010 via public folder.
You error look like client cannot get autodiscover process please check it again.

After upgraded 9.2 DB, all users are not able to login (Except Guest).

After completed the DB upgrade from 8.1.7.4 to 9.2.0, all users are not able to login the oraclemypage.home. This is except the Guest account.For example, I use the sysadmin account to login the oraclemypage.home. It shows "Your login is invalid. Please login again."
Moreover, I do the following query.
SQL> select fnd_web_sec.validate_login('SYSADMIN','SYSADMIN') from
dual;
FND_WEB_SEC.VALIDATE_LOGIN('SYSADMIN','SYSADMIN')
N
If I guery the Guest account, the result is "Y".
Also, all users can access via dev60cgi/f60cgi to open E-business 11.5.7 application. Are there any missing script / process I need to do?
Thanks,
Matthew

Hi Arun,
What message u get on the apache logs / jserv logs when u get the error ?
Since the log cumulate a giga byte, I clean up the log and test again. It seems no error message.Whats your platform?
HP-UX 11.11To which version (5 digit) u upgraded DB ?
Oracle9i Enterprise Edition Release 9.2.0.6.0 - 64bit Production
I found a note 225074.1 that talks of a similar issue where users are ablt to login to forms but not php. this is for AIX. review the note.
I had checked this previously. Part of this document already tried which suggested by Oracle Support.what is the end_date for all of these users in fnd_user table ? if all users for some reason is end_dated , then fnd_web_sec will show 'N"
All users are normal. For those I tested without end_dated, I can access via f60cgi too.whats the session_cookie_domain set to in icx_parameters table? Set to NULL and try bouncing apache once.
This set to ".mycompany.com". You mean that I set the session_cookie_domain to NULL and restart Apache, right? Why I need to set it NULL?

Users are not able to query request submitted by other user .

users are not able to query request submitted by some other user using the same responsibility .
applications ver . 12.1.2

I have just upgraded 11.5.10 to 12.1.3. I have followed doc ID 804296.1 so users can see out files within the same responsibility. But users still cannot see out files from other users. I really believe I have followed the doc completely. Any advice?
SQL> select bug_number from ad_bugs where bug_number like '8671003';
BUG_NUMBER
8671003
Also these are the steps I took per the doc:
sysadmin >Functional Developer >Security > Objects
Search on Database Object = FND_CONCURRENT_REQUESTS
Click on Concurrent Requests.
Click on Object Instance Sets tab.
Click on Create Instance Set button.
Name=Allow user to view other requests within same responsibility
Code=XXFND_CONC_REQUESTS_01
Description=Allow user to view other requests within same responsibility
Predicate=
&TABLE_ALIAS.request_id in (select cr.request_id from fnd_concurrent_requests cr where
cr.responsibility_id = fnd_global.resp_id and cr.responsibility_application_id =
fnd_global.resp_appl_id)
Sysadmin >User Management >Roles and Role Inheritance
Click Create Role button
Catagory=Miscellaneous
Role Code=UMX|XX_VIEW_OUTPUT
Display Name=View Output For Same Responsibility
Description=View Output For Same Responsibility
Click Create Grant and "Save and Continue'
Name=XX_VIEW_OUT
Description=View output of other users in same resposibility
Object=Concurrent Requests
Click Next
Data Content Type “Instance Set”
Instance Set=Allow user to view other requests within same responsibility
Click Next
At the bottom
Set=Request Operations
Click Next> Finish
Edited by: 893303 on Oct 26, 2011 6:53 AM

SSRS 2012 some users are not able to edit reports in the server

Hello All,
I am install reporting services SharePoint native mode but some users are not able to edit reports on server error is "Application cannot be started contact your application vendor" but this users edit reports on their client machine
using report builder 3.0.
Please help me

Hi harshad_mule,
Because Report Builder in the Report Manager is a ClickOnce application, the error message means that one or more of the files listed in the application manifest cannot be found on the server, so the application cannot be started. Based on my research, frequently
this means that the application is somehow corrupted, or that the ClickOnce store is corrupted.
To fix this issue, we can try to refer to the following steps:
If Report Builder is corrupted, we can update the Reporting Services to repair this.
Check that the Report Builder application is existing
Open the Report Server folder. By default, the folder is located in: C:\Program Files\Microsoft SQL Server\MSSQL.<X>\Reporting Services\ReportServer\ReportBuilder
Make sure the file "ReportBuilder.application" is existing in the folder mentioned above.
If it is existing, please use the following URL to access the Report Builder directly:
http://<server>/ReportServer/ReportBuilder/ReportBuilder.application
And this issue can also be caused by browser. Because not all report functionality is supported by all browsers in Reporting Services. So please use IE browser to start Report Builder to try it again.
Hope this helps.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Users are not able to save pdfs after editing - Adobe XI. They do not use the Win7 explorer preview pane. If they completely close the Win7 explorer window, they can save - Adobe XI thinks the preview pane is open when it is not.

Users are not able to save pdfs after editing. Product is Adobe XI, OS is Win7 64-bit. When saving, an error pops up that the file cannot be saved, it is in use. If they save as a different name, it works. Found several forums/blogs/etc that suggest the problem can be solved by closing the Window7 explorer preview pane. They don't use the preview pane. I figured out that if they completely close the explorer window, they can save. But this means they have to open and close explorer for each file.

Hi, I would like to chime in and say that this problem has not yet been resolved. It is extremely annoying when all I do is highlight a document in the file explorer and I get 5 errors (evenly spaced out about 20 seconds apart telling me that "Microsoft
Word Cannot Start (24)". These errors persist even after windows explorer and word are closed. And I don't want to start terminating processes just to make them stop every time.
I'm a little frustrated with this problem and the other problems I've encountered with MS Office 2013 with file corruption, crashing, 2010 compatibility issues, and the whole host of errors when trying to actually do WORK with Word.
I do work with long, complex reports in Word because that's the best way available for myself (and my coworkers) to use. However, I sincerely regret upgrading to Office 2013 because of it. I love it, all of its features, and its interface, but I simply cannot
use it without problems.
Submitting an official complaint whenever the phone reps start up again in the morning.

Users are not able to access two different SAP portals at a time

Hi Experts,
Users are not able to access two different SAP portals at a time, if users login the OLD SAP Portal then they are not able to access NEW SAP Production Portal asking user id's & Password while doing ECC & APO transactions.
If user clear the Internet Explorer cache then for time being they can access but its not the permanant solution.
Can any one please help me on this.
Thanks,
Jay

Hello Jay,
here we are facing this problem, this company users not able to access both the portals at at time
If you want to access HTC and Armed at the same time you gotta complete SSO Config or User mapping between these two Portals. You can refer to the below link for more details.
http://help.sap.com/saphelp_nw04/helpdata/en/f8/3b514ca29011d5bdeb006094191908/content.htm
Thanks
SM

Why users are not able to see certain printers even though they are in the Airgroup server table

Q: Why users are not able to see only certain printers even though they are in the Airgroup server table ?
A: In certain scenarios we may notice printers come up under the server /cache entries on the controller.
However when an airgroup user does search for printer, they may not see all the printers, certain printers may be not visible .
This is because the service IDs sent by the user in the MDNS query are not broadcast by these printers
In the below capture the Ipad sends query for service id "_universal_sub_ipp_tcplocal" and "_universal_sub_ipps_tcplocal" and hence the controller will
respond with the printers that broadcasts these service ids.
Non–Visible printer :
_printer._tcp.local PTR IN 7200 10.125.30.223 5820.05 Wed Mar 18 13:24:26 2015
_pdl-datastream._tcp.local PTR IN 7200 10.125.30.223 6112.25 Wed Mar 18 13:24:26 2015
_ipp._tcp.local PTR IN 7200 10.125.30.223 5888.15 Wed Mar 18 13:24:26 2015
_http._tcp.local PTR IN 7200 10.125.30.223 6293.88 Wed Mar 18 13:24:26 2015
NPIED487E.local A IN 240 10.125.30.223 194.43 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._printer._tcp.local SRV/NBSTAT IN 240 10.125.30.223 209.87 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._printer._tcp.local TXT IN 240 10.125.30.223 205.14 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._printer._tcp.local TXT IN 240 10.125.30.223 197.18 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._printer._tcp.local TXT IN 240 10.125.30.223 196.42 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._printer._tcp.local TXT IN 240 10.125.30.223 208.15 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._pdl-datastream._tcp.local SRV/NBSTAT IN 240 10.125.30.223 207.35 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._pdl-datastream._tcp.local TXT IN 240 10.125.30.223 200.64 Wed Mar 18 13:24:26 2015
hp LaserJet 4250 [ED487E]._ipp._tcp.local SRV/NBSTAT IN 240 10.125.30.223 209.44 Wed Mar 18 13:24:26 2015
Visible-printer :
_printer._tcp.local PTR IN 4500 10.125.26.29 3745.82 Wed Mar 18 13:24:51 2015
_universal._sub._ipp._tcp.local PTR IN 4500 10.125.26.29 3694.14 Wed Mar 18 13:24:51 2015
_ipp._tcp.local PTR IN 4500 10.125.26.29 3628.81 Wed Mar 18 13:24:51 2015
_pdl-datastream._tcp.local PTR IN 4500 10.125.26.29 3616.14 Wed Mar 18 13:24:51 2015
_http._tcp.local PTR IN 4500 10.125.26.29 3793.56 Wed Mar 18 13:24:51 2015
XRX9C934E25C52D.local A IN 120 10.125.26.29 355.03 Wed Mar 18 13:24:51 2015
Xerox WorkCentre 3615 (25:C5:2D)._printer._tcp.local SRV/NBSTAT IN 120 10.125.26.29 130.45 Wed Mar 18 13:24:51 2015
Xerox WorkCentre 3615 (25:C5:2D)._printer._tcp.local TXT IN 4500 10.125.26.29 3670.33 Wed Mar 18 13:24:51 2015
Xerox WorkCentre 3615 (25:C5:2D)._ipp._tcp.local SRV/NBSTAT IN 120 10.125.26.29 389.55 Wed Mar 18 13:24:51 2015
Xerox WorkCentre 3615 (25:C5:2D)._ipp._tcp.local TXT IN 4500 10.125.26.29 3640.60 Wed Mar 18 13:24:51 2015
Xerox WorkCentre 3615 (25:C5:2D)._pdl-datastream._tcp.local SRV/NBSTAT IN 120 10.125.26.29 210.97 Wed Mar 18 13:24:51 2015
In order to learn other printers we may need to use specific app provided by printer vendor on the client or configure the printers to send these service IDs.

The net 451 issues made it not work after a while but it affected the entire RWW site not just remote access:
http://blogs.technet.com/b/sbs/archive/2014/01/13/troubleshooting-an-unexpected-error-occurred-message-when-using-remote-web-access-to-connect-to-computers.aspx
Careful if you try and uninstall it, you'll need to put back net 4.0 and reconfigure some stuff.
Did it ever work?
Make sure the users have installed the certificate they need and turn on compatibility mode in IE (also make sure IE isn't locked down and disabling activeX).:
https://technet.microsoft.com/en-us/library/dd701173%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396
-- Al

After system restore ,we are not able to activate the windows,while login to systems getting an error 0x800700B7

after system restore ,we are not able to activate the windows, while login to systems getting an error 0x800700B7
Cont-8096688758

hi Jain,
you may need to check the transfer structures,
right click infosource and 'change', click 'comm.structure'/expand,
click 'transfer', move the 0BASE_UOM from left to right side,
or if you wont use the comm structure anymore, you can right click infosource and 'delete comm structure'
hope this helps.

Users are not able to edit projects even with right permissions

Hello,
We have a weird issue. Your help or inputs is appreciated.
A user is not able to edit projects in SAP PPM 50 unless 1)the project is created by the user and 2)user has access to ACO_SUPER auth object. For the projects, the user is trying to edit, we made sure user has write ACL access in the administration tab of the project.
Obviously, we can't give all users ACO_SUPER access. Please advise how to proceed.
Thanks in advance

Hi Pranith,
You are right..ACO_SUPER is not recommended for all users, it's an super user access.
In PPM-Project management, there are two authorizations
1) General Authorizations
2) Project Specific authorizations
General authorizations:
This is provided to user using a backend PFCG roles like 'SAP_CPR_USER' which contains business partner view access and other similar roles are assigned for project creation, template creation etc.,
Project Specific authorizations:
This authorizations are provided using ACL 'Authorizations' tab within the project and here you have different authorisation activities like admin, write, read & none.
As you said, the user who creates the project will get 'Admin' authorization and after that if you want give access to other users, then you need to add manually users in the project definition-authorisation tab or you can provide default authorization through project role type.
Have you added the users manually in authorisation tab?
Regards,
Ravi

Newly created users are not able to log in through WEBGUI in SRM system

Similar Messages

Maybe you are looking for