Role - User Assignment

I have assigned a New User - the New Role I created. When I logged in the user I do not see any top level Navigation or detailed Navigation folders. I gave the user Super Admin Role and the New Role I created and then when I log in as the New User I am to see even the New Role related folders too.
Where I am going wrong?

Hi,
This can only occur, when the new user has permission problems on Framework Page which is assigned for him.
So open the Framework Page of the current user and assign read permission to  Everyone group and check the EndUser permission also.
http://help.sap.com/saphelp_nw2004s/helpdata/en/f6/2604e505fd11d7b84200047582c9f7/frameset.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/90/0d8da285314067b5a4976219a07dee/frameset.htm
Greetings,
Praveen Gudapati

Similar Messages

  • Is it possible to automate creation of roles,users & assign roles to users

    Respected Guru's,
    Is it possible to automate creation of roles according to our functional requierment with the help of SAP IDM.
    Futher, i would like to know whether creation and deletion of users along with assigning created roles to the user's can be automated.
    Please help me....
    Thank you.

    Hi Dayananadan,
    SAP NW IdM is compatible with your system and uses SAP Java Connector (JCo).
    My colleague Steffen Baumann wrote a blog with three parts, where you get some hints and screenshots how to create similar objects to business roles and automatically assign them. Have a look at the last two parts How To synchronize data from SAP HCM to SAP NetWeaver Identity Center using SAP PI (Part II) and
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/8868. [original link is broken] [original link is broken] [original link is broken] Especially the last topic in the last part shows how to implement dynamic groups. It's not everything covered you will need to automatically create business roles and assign them. To explain this in detail is like writing another blog... If you go through the last two parts of the blog you will know how to modify the jobs my colleage has used for importing HCM data to create business roles similar to org. units.
    You can also have a look at /docs/DOC-8983#section6. There you find "Identity Management for SAP System Landscapes: Configuration Guide" and other documents. They help to get familar with the possibilites of SAP NW IdM, but don't mention how to implement your case in detail.
    Best regards,
    Nils

  • No portal roles are assigned for this user.If this problem persists, contac

    I am trying to access portal first time using j2ee_admin user. It is saying "No portal roles are assigned for this user.If this problem persists, contact your system administrator."
    iam using abap+java enginee how config in abap enginne ,iwant which role to assign  j2ee_admin  user
    i already asiigned sap_j2ee_admin,SAP_BC_JSF_COMMUNICATION,SAP_BC_JSF_COMMUNICATION_RO   but it show same problem
    please help me..
    Edited by: Mugala Balu on Aug 7, 2010 5:53 PM
    Edited by: Mugala Balu on Aug 8, 2010 7:48 AM

    Balu,
    Well this issue has been discussed many a times in forums. You would have to point your data source to ABAP system.
    Check this thread in [here|J2EE Failed to start  , after changing UME datasource;.
    Good Luck!
    Sandeep Tudumu

  • Hide Top level navigation if user assigned only one role

    Hi,
    I would like to hide the top level navigation if user assigned with only one role.
    I can create role based rule to show desktop using Master rule collection, but is it possible by doing to with role count.
    If user has multiple roles show desktop1 else show desktop2

    not sure if this possible ,you may check feasibility of creating  a application which checks user role count and if role count is = 1 load the Portal url (URL alais) which had TLN iview invisible in the same window else do nothing and load the portal with the desktop which has tln.
    Put the application in framewrk page which has TLN visible.
    create a URL alias and create a desktop -framework page which dont have TLN ,assign this desktop to this URL alias in rule collection set its priority before user conditions check in rule collection so that it has high priority before user or group check in rule collection.
    you can create a poc in sandbox and check if it wiorks?

  • Report to see list of roles with no user assignment

    Hi Gurus,
    I need to know the transaction/Report where i can see list of roles which doesnt have any user assignment.
    Pls help me

    HII,
    To search for  roles with no users assignment u can run a report RSUSR070 AFTER EXECUTING TCODE SA38 in the progran field enter the name of the report and click execute button u get roles by complex selection criteria    then scroll down and in the selection according to user assignments  select  without user assignment then cli ck execute button u will get the roles with no user assigments............
                          Thanks and regards

  • Transport roles and analysis authorization with user assigned

    Hi expert,
    I face with this problem transport roles and analysis authorization with user assigned. When I have created a transport request to move the roles and analysis authorization from development system to test system. I couldnu2019t maintain the user assigned, after transport I have to assigned manually all of user or create a program to fill AGR_USER table or there are other way.
    Thanks for your time,
    Luis

    Hi,
    In role administration, you have the following options for transporting roles:
    You can download the roles from one system and upload them into another  
    You can import the role from a remote system using RFC  
    You can transport the roles with the transport function.
    Role upload loads all role data, including authorization data from a file into the SAP system. The user assignments for the role and the generated profiles for the role are exceptions in this case.
    Transporting Roles with the Role Transport Function
           1.      Start the role administration function by choosing Tools ® Administration ® User Maintenance ® Role Administration ® Roles (transaction PFCG).
           2.      Enter the role to be transported and choose Transport Role.
    The Mass Transport of Roles screen appears. You can control the default settings for the options Also transport single roles for composite roles and Also transport generated profiles for roles using Customizing switches (see Role Administration Functions in the section Functions of the Utilities Menu).
    You should not change the authorizations profiles of the role after you have included the role in a transport request. If you need to change the profiles or generate them for the first time, transport the entire role again afterwards.
    For more information go thrpugh the below link
    http://help.sap.com/saphelp_nw70/helpdata/EN/6d/7c8cfd410ea040aadf92e1f78107a4/content.htm
    Regards,
    Marasa.

  • Extraction of roles content and user assignment

    Dear all,
    we want to transfer some CCA-rights to BI into a table, which will be referenced in a role in BI.
    Purpose is to tranfer the authorization concept from ERP to BI.
    I have to write for this some function module, which might be a bit complex but not impossible.
    Has anyone experience with this?
    Regards
    Harald.

    HII,
    To search for  roles with no users assignment u can run a report RSUSR070 AFTER EXECUTING TCODE SA38 in the progran field enter the name of the report and click execute button u get roles by complex selection criteria    then scroll down and in the selection according to user assignments  select  without user assignment then cli ck execute button u will get the roles with no user assigments............
                          Thanks and regards

  • A question about users assigned roles extraction

    Dear all,
    I have a question about users assigned roles list extraction. I need the list of the users who have already been created along with their assigned roles. According to what I found on Google, there is a table named AGR_USERS which provides the roles assigned to each user. Yet, this table provides only the SAP ID of each user along with the assigned roles. What I need more is to have also the first name and second name of each user.
    So, do you know any table providing at least the following information:
    1) First name of each user
    2) Second name of each user
    3) SAP ID of each user
    4) All assigned roles to each user.
    NOTE: I really need to have first name and second name in separate columns
    Thanks in advance,
    Dariyoosh

    >
    Shekar.J wrote:
    > Agr_users for the user ID and role assignments
    > USR02 to check the validity of the User ID
    > and USER_ADDR for the first name and last name
    >
    > You can create a Table join of the above 3 tables to retrieve the data you require
    Thanks to you and others for your attention to my problem
    I don't know anything about ABAP programming, is there any transaction allowing to create this join? As it seems to me the column "UNAME" in the table "AGR_USERS" and the column "BNAME" in the table "USER_ADDR", both refer to the SAP ID of the user. As a result the condition of the join would be "WHERE (UNAME = BNAME)", is there  any transaction/programme allowing to create this join?
    Thanks in advance,
    Dariyoosh

  • User roles un-assigned in CUA but acces in child system is ok

    hi
    i am have a really weird issue. a user who has access in roles in child clients, suddenly his roles disappeared from CUA. it did not effect access in child systems. any suggestions how to investigate this.
    thanks

    Did you click the Naughty Button in SCUL? Check OSS Note 1074552...
    Could also be a cause of failing idocs.
    Regards,
    Trond
    PS: The above note is for cases where users loose their visible role assignments in CUA, although roles remain assigned in the child system(s), not for cases where role assignments from CUA never trickles through to the child systems. The mentioned OSS note is a direct result of a case worked on by yours truly in 2007. I include below a warning I posted on sapfans about the issue:
    Word of warning: RSUSR_CUA_CLEANUP_USZBVSYS is faulty!!!
    The program RSUSR_CUA_CLEANUP_USZBVSYS is available as a standard SAP program from at least version 6.20. It can be run from SE38/SA38 or launched from a pushbutton (far right) on the "results" screen of transaction SCUL.
    The program is intended to delete "obsolete" entries from table USZBVSYS, which contains log entries for assigned child systems in a CUA environment. The program is run in the main CUA system, and supposedly deletes entries for systems where users no longer have access.
    There is a serious problem with the program, as acknowledged and confirmed by SAP in an OSS note I opened a few days ago. Under certain circumstances (more than 500 entries for any child system in the CUA landscape), the program wipes clean the whole table, instead of just the obsolete entries.
    The consequences are dire. Table USZBVSYS is used for several fundamental CUA functions, such as remote password reset from the CUA master system. After the wipe, executing SU01 and attempting to reset a users password in a child system will no longer work. The assigned child systems are no longer visible in the reset password pop-up (nor anywhere else in SU01, including the Roles tab). You'll have to edit the user via SU01, and click on the annoying pop-up showing "new system assigned to user" for each system where the user has access...
    The only way to fix the issue is to re-run SCUG for all systems in the CUA landscape. We had to do this across 6 CUA's, each containing 30+ child systems/clients and 10000+ users, which was very time-consuming and annoying. Also, there seems to be cases where roles have been wiped out from users on the CUA master systems, possibly due to consequences of the empty USZBVSYS table.
    SAP has conceeded the program is faulty, and have proposed a new version (note 1074551). Without applying this correction, the program should NOT be run.
    Note that users can still log in to and work in the child systems, it's just the "visibility" from the CUA master system which is missing. Tables USLA04/USL04 are still intact.
    Just wanted to warn the community; we've spent some considerable time discussing with SAP and rectifying the mess created by RSUSR_CUA_CLEANUP_USZBVSYS...
    Edited by: Trond Stroemme on Aug 5, 2008 3:03 PM

  • SAP user assigned with roles from HR-ORG incorrectly

    Hi All
    I have an issue where a SAP user appears to be receiving role assignments from some HR-ORG object erroneously.
    I have checked the user's HR positions and organisational assignments and they do not have any roles assigned.
    I also checked the job and no roles are assigned there as well.
    Where could these roles be coming from if they are not coming from the position or org unit?
    User currently has direct role assignments in SU01 except for 3 roles which appear as indirect assignments (HR assignments) in SU01.
    Is this is a bug and is there a note to fix it?
    Please could someone let me know why this is happening.
    Thanks
    Ran

    Hi Colleen.... Thanks for your email.
    Please see below screenshot, it is an Org assignment but single roles also belong to composite roles.
    PBS is not meant to be active and PFUD is scheduled as a daily job. CUA is not active here.
    User is assigned to a position and org unit but roles are not provisioned via the Org/position. So there is a 0105 mapping, I have checked those positions and org units but no roles are assigned there.
    Basis release 731 and level 0005, SP - SAPKB73105.

  • User assignment not happening in UME for CC Roles

    Hi Experts,
    We have installed the GRC AC 5.3 RAR Component in one of our server. As a part of post installation activity we have uploaded the cc_ume.txt files in the component and created a AC Administrator user.
    We have assigned the roles VIRSA_CC_ADMINISTRATOR role to the user and it is showing as assigned. But when we checked in the Role - VIRSA_CC_ADMINISTRATOR for the user assignment it is appearing as NO USER ASSIGNED to the role.
    Because of which we are unable to login ino the RAR tool with the administrator id. The same UME login page is appearing when we login with the AC Admin user id & password without giving any error messages.
    Please help us if anybody has faced the same problem and got it solved.
    Thanks and Best Regards,
    Srihari.K

    issue resolved

  • Customizing Message "No portal roles are assigned for this user"?

    Hello,
    we would like to give the user some hint on who to speek with in case he has no portal roles assigned.
    So we would like to customize the messaage "No portal roles are assigned for this user" to some customer spezific text or to redirekt to a customer specific iView.
    I would appreciate any kind of hints.
    Best regards,
    Lutz Rottmann

    Hi,
    Check these threads.
    Customizing message "No portal roles are assigned for this user"
    No portal roles are assigned for this user
    Regards,
    Harini S

  • Cusomize message "No portal roles are assigned for this user"?

    Hello,
    we would like to give the user some hint on who to speek with in case he has no portal roles assigned.
    So we would like to customize the messaage "No portal roles are assigned for this user" to some customer specific text or to redirect to a customer specific iView.
    I would appreciate any kind of hints.
    Best regards,
    Lutz Rottmann

    Hi,
    Check this thread.
    Customizing message "No portal roles are assigned for this user"
    No portal roles are assigned for this user
    Regards,
    Harini S

  • Restrict Moving roles with user assignment

    Hi There,
    Need your help...
    How to restrict to move roles from dev->QA with user assignment. (want to disable the user assignment restirction)
    Thanks and Regards,
    Gnanaprakasam

    Unfortunately this is not the default installation setting, so you need to go into the security settings customizing and change the USER_REL_IMPORT switch to 'NO'.
    This does however NOT make the checkbox disappear in the transport source system. It prevents the import in the target... so you must set it and transport it there first, then it works.
    Cheers,
    Julius

  • Moving roles with user assignment

    Hi There,
    Need your help...
    We have roles and users created in QA for training, now we want to move roles from QA to Production with user assignment.
    Users that are created in QA for training have also been created in Production, is it possible to move the roles from QA to Production with the user assignment.
    Thanks and Regards,
    Azher.

    Table PRGN_CUST does'nt contain any entries, its an empy table in QA.
    USER_REL_TRANSPORT entry with value NO locks system from TR imports with User assignment. So you have to ensure your target system-Production does not has that entry in PRGN_CUST.
    TR is geting created in Local change request which cannot be moved to Production.
    This TR request are created in Local Change request only when you do not specify a target system/group . All you need to do is specify the "Target" while creating the TR in PFCG (subsequent screen after you hit Create request) and release your TR via SE10. Once released, the TR would be added to the import queue of Production. You/your Basis team can import it manually via STMS_IMPORT (Extras>Other requests>Add TR and CTRL+F11 to import). If there are any errors please have Basis team to review the transport logs.
    P.S:  You can only transport direct user assignments of roles via PFCG transport option described in my post. In case of indirect user assignments that were created using Organizational Management (HR-Org), you will have to use transport functionality in Organizational management.
    Thanks
    Sandipan

Maybe you are looking for