Checking user roles in FI Module

Hi,
Please let me know the points to be considered while checking the security and authorization in FI modules based on a user role.
Thanks,
Sridevi

Hi,
While defining the security roles, as a first step Composite roles, Single Roles are created. Transaction codes are attached to Single roles. A group of Single roles are attached to a Composite roles.
Based of Business requirements / Orgnaization structure in the Company in the sense VP. Finance / Controller / Sr.Manager / Manager etc., the composite roles and single roles are assigned to the positions. For example Vice President Finance will have full authorization to all composite roles.
Some of the users require only display authorization, in which case a role is created only incorporating transaction codes which display documents.
Thanks
Murali.

Similar Messages

Authorization object in procurement that checks user role

Hi Experts,
Please let me know if we have any standard authorization objects in the transactions PO or PR that checks the SAP User role. Authorization check can be done by sap role, we are not botherd checking on company code, purchase group and so on, Is there any standard procedure to find out that or any function module available to check that by passing user role. << removed >>
Cheers
Mohan
Edited by: Rob Burbank on Feb 19, 2010 12:24 PM

easiest way to find all authorization objects is to execute SU24.
There you enter the transaction code for which you want find the authorization objects.

Check user role/authorization during Web report run-time?

Hello again,
I ran into a problem. I need to check <b>user's authorization during webtemplate execution (run-time)</b>. I want to have a possibility to allow in one web template extra functionality (through template menu) to key users. Normal users, who are running same report, should not have this extra menu visible.
Is it possible to check user authorizations or roles during web-template run-time?
Thank you!
Vitaliy

Hi Harinam,
From my logic your are right.
The restriction is in two new roles (Requestor and Approver role).
But ->
If I assign my approver role the selection possiblities of the request types during the AR creation is restricted and the AR search function does not work.
If I assign my requestor role the restriction of the request type is not there, but the AR search function works again. :-(
If I assign the original approver role of sap I have the same behavoiur for the AR search.
Both new roles are a 1:1 copy of the SAP standard roles - > Exception, ristriction on request type 'Execption Approval' is not displ.
I have execute ST01 now. If I try to open the log, the system syst "No records that correspond to these search criteria".
But I have found something else.
The problem appears only if I search for Process ID "Access Request Approval Workflow".
If I select other Process ID such as "Control Assignment Approval Workflow" or "Fire Fighter Log Report Review Workflow", everything works fine.
Very strange!
BR
Melanie

How to check user role/profile

Dear all,
I'm finding function module to get a list of profile/role of user. Would you please suggest me on this?
Btw, if you have any other advise please feel free to let me know.
Thanks in advance.
Peersit

I've just found the related threads on this site.
User Profile Details
Re: User Profile Details
User Wise Authorization/profile report needed
User Wise Authorization/profile report needed
Have a good day.

I can Check User log in QM module of QM user..

HI Expert
i can check QM user log in QM moduel.. is there any standard report or any helpful T-code...plz.
regards
kazz

HI SUJIT
But when i Run the T-code (SM20) i gives the (Client 700) and User name,, and give the Date which Date Data ll show me.. and also i did as you said about filter (AUDIT Class) here i select the Dialog Logon..after put all info finally i click the button (Reread Log) then system give like this error (The result set for this selection for Empty) .
please Expert see if i m giveing wrong info in this screen or system have no any Data,, plz tell me furthur procedure
Thanks and Regards
kazz

On the web how can I check the user role to display the form suitable for this role i

Hello
How can I check on the web the use role to display the a form for each role
Example
If the admin login I display admin_form.fmb and if user login I display
user_form.fmb
Thankx
Tamer

In my forms I hide tab pages according the role using something like the following script in the WHEN_NEW_FORM_INSTANCE trigger.
So the user can not navigate to tabs which are vorbiden by his role.
CURSOR users_roles_cur IS SELECT granted_role FROM user_role_privs
WHERE username=(SELECT user FROM dual);
user_roles_rec users_roles_cur%ROWTYPE;
IF users_roles_cur%ISOPEN
THEN
CLOSE users_roles_cur;
END IF;
OPEN users_roles_cur;
LOOP
FETCH users_roles_cur INTO user_roles_rec;
EXIT WHEN users_roles_cur%NOTFOUND;
MESSAGE (user_roles_rec.granted_role);
PAUSE;
IF RTRIM(user_roles_rec.granted_role,' ') = 'BLA-BLA'
THEN
tb_pg_id := FIND_TAB_PAGE('activity');
IF GET_TAB_PAGE_PROPERTY(tb_pg_id, visible) = 'FALSE' THEN
SET_TAB_PAGE_PROPERTY(tb_pg_id, visible, property_true);
END IF;
END IF;
END LOOP;
CLOSE users_roles_cur;
Other solution may be is to use an initial form which only will detect the user role and run the appropriate form.
Other solutions are also possible.
Joseph

How check the user roles in Business Partner edition screen?

Hello Masters,
I'm having a little problem figuring out how to check the user roles to allow modification in some fields.
At the 'Manage Organizational Data' screen ('Manage Business Partners' -> Business Partner Data -> edit). I need to check the user roles to let him change the 'Tax Numbers' values. The values can be changed only if the user is a administrator; otherwise it must only show the value.
I checked the HTML Template and found where I can restrict this edition option, but the problem is that I don't know how to check the user roles here. Maybe there is a function to do this?
Any ideas of how I can do it? Is there any magical BAdI to check this?
Thanks in advance,
José Omar

Hi José Omar,
there is no BADI for this...
You have to change the standard code to display only tax data if the SY-UNAME does not have correct role.
You can retrieve user roles with BAPI_USER_GET_DETAIL, or access directly the activity groups table.
Rgds
Christophe

User role and Authority-check ?

Hello,
Could you please let me know how are the differences between User role and Authority-check. In a program I do not use Authority-check , And The user is not assigned to user role which contain this transaction ( for this program), Can the user execute this transaction OR he must be assigned to user role which contain this transaction to execute it . Supposing that we do not use any Authority-check in then program.
Thanks in advance

Hello Martin,
I think this answers the OP's question about user not being assigned the role which contains the trxn code. As you have explained in this case the default auth. check for S_TCODE will fail & user cannot execute the trxv. (If i remember correctly the tables for this are AGR_USERS & AGR_TCODES)
Anyways just to add to the OP's query. Auth. objects are added to profiles which in turn assigned to roles. So if you implement the auth. object in your program the user must also subscribe to the role containing the auth. obj. profile to be able to execute it.
@OP:
The transactions PFCG & SUIM might interest you. Also the tables dealing with these stuffs begin with AGR*. You can check the tables for better understanding.
BR,
Suhas

Function module to modify the user roles & profiles

Hi All,
I am working on user maintenance and i need a function module to modify the user roles & profiles.
Thanks in Advance.
Phani.

i used the below fms
BAPI_USER_ACTGROUPS_ASSIGN for assigning the roles.
delete the profiles of the user qnd assign the profiles to the user:
BAPI_USER_PROFILES_DELETE
BAPI_USER_PROFILES_ASSIGN
i used the above FMs for my requirement.
Regards,
Phani.

How to hide custom fields in Shopping cart depening on user role

Hi,
We have some custom fields in shopping cart for basic view. Every thing works fine. Now client is asking to hide all the custom fields based on user role.
I found some function module to fund roles. now my main problem is unable to find the cusotm filed screen field name.
When I tryed to find the screen field name using BBPSC02/03, its giving 'GT_DISPLAY_100-FIELD'. If I try to use this field, its not working.
Could you pls tell me how to find custom screen filed name to hide in shopping cart.
Thanks,
Ram

Hi Ram,
As Laurent suggested,to hide the custom fields based on the user role,you need to implement the logic in BADi "BBP_CUF_BADI_2".
You have the importing parameter IV_USER in this BADI.
Pass this parameter to tables AGR_USERS and AGR_USERT to get the user role
OR
Use FM: BAPI_USER_GET_DETAIL
with USERNAME= user id and can retrieve Table: ACTIVITYGROUPS Field:AGR_NAME
if you want the otherway around
you can also use FM: RSRA_USERS_OF_AGR_GET
with I_AGR_NAME= role and you can retieve Table: ACTIVITY_GROUPS_USERS Field: UNAME(usr Id)
Then check the value for the User role as obtained using the above steps and accordingly set the property for the custom fields to hide them.
BR,
Deepti.

Database Error (maybe) while working on User-Role or Assiging a Cloud (Unable to connect to the VMM database because of a general database failure)

Hi,
Suddenly I got this error in SCVMM 2012-R2 Roll-up 1:
When working with User-Roles (create/update) or assigning a Cloud :
"VMM encountered a critical exception and created an exception report....
search user forums for well-known failure root causes for self-help" (how sweet)... (if it's "well known", why not coding the exception handling correctly?)
The relevant part of the report might be this:
"SCVMM Version=3.2.7620.0
SCVMM flavor=C-buddy-RTL-AMD64
Default Assembly Version=3.2.7620.0
Executable Name=vmmservice.exe
Executable Version=3.2.7510.0
Base Exception Target Site=140717670746840
Base Exception Assembly name=System.Data.dll
Base Exception Method Name=System.Data.SqlClient.SqlConnection.OnError
Exception Message=Unable to connect to the VMM database because of a general database failure.
Ensure that the SQL Server is running and configured correctly, then try the operation again."
(side question: what does this mean: "Ensure that the SQL Server is ... configured correctly"?
I can say that :
SQL is configured by the book, that all services are running (did a reboot of VMM server too) and that all other VMM functions work OK. I don't believe that SQL is only used for user-roles...
Acting as Domain admin and VMM admin.
All updates are installed.
Please find the report @the and and a screen shot attached.
Thanks for any help.
Report.txt:
------------------- Error Report -------------------
Error report created 03.04.2014 15:07:56
CLR is not terminating
--------------- Bucketing Parameters ---------------
EventType=VMM20
P1(appName)=vmmservice.exe
P2(appVersion)=3.2.7620.0
P3(assemblyName)=Utils.dll
P4(assemblyVer)=3.2.7620.0
P5(methodName)=Microsoft.VirtualManager.DB.SqlRetryCommand.ExecuteNonQuery
P6(exceptionType)=Microsoft.VirtualManager.DB.CarmineSqlException
P7(callstackHash)=4c11
SCVMM Version=3.2.7620.0
SCVMM flavor=C-buddy-RTL-AMD64
Default Assembly Version=3.2.7620.0
Executable Name=vmmservice.exe
Executable Version=3.2.7510.0
Base Exception Target Site=140717670746840
Base Exception Assembly name=System.Data.dll
Base Exception Method Name=System.Data.SqlClient.SqlConnection.OnError
Exception Message=Unable to connect to the VMM database because of a general database failure.
Ensure that the SQL Server is running and configured correctly, then try the operation again.
EIP=0x00007ffb74c75a88
Build bit-size=64
------------ exceptionObject.ToString() ------------
Microsoft.VirtualManager.DB.CarmineSqlException: Unable to connect to the VMM database because of a general database failure.
Ensure that the SQL Server is running and configured correctly, then try the operation again. ---> System.Data.SqlClient.SqlException: Procedure or function prc_RBS_UserRoleSharedObjectRelation_Insert has too many arguments specified.
   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)
   at System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async, Int32 timeout, Task& task, Boolean asyncWrite, SqlDataReader ds)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, TaskCompletionSource`1 completion, Int32 timeout, Task& task, Boolean asyncWrite)
   at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(TaskCompletionSource`1 completion, String methodName, Boolean sendToPipe, Int32 timeout, Boolean asyncWrite)
   at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
   at Microsoft.VirtualManager.DB.SqlRetryCommand.ExecuteNonQuery()
   --- End of inner exception stack trace ---
   at Microsoft.VirtualManager.DB.SqlRetryCommand.ExecuteNonQuery()
   at Microsoft.VirtualManager.DB.DelegatedAdmin.UserRoleDBHelper.<>c__DisplayClass15.<AddObjectSharingData>b__14()
   at Microsoft.VirtualManager.Engine.DbAccessHelper.<>c__DisplayClass4.<HandleInsertErrors>b__3()
   at Microsoft.VirtualManager.Engine.DbAccessHelper.HandleInsertErrors[_RetTy](DbAccessDelegate`1 func, ErrorInfo duplicateErrorInfo)
   at Microsoft.VirtualManager.DB.DelegatedAdmin.UserRoleDBHelper.AddObjectSharingData(SqlContext ctx, ITaskContext taskCtx, Guid objectId, CarmineObjectType objectType, AccessControlData accessData)
   at Microsoft.VirtualManager.DB.DelegatedAdmin.ResourceSharingHelper.AddSharingData(SqlContext ctx, ITaskContext taskContext, LockableObject resource, AccessControlData data)
   at Microsoft.VirtualManager.DB.DelegatedAdmin.ResourceSharingHelper.AddResourceSharing(SqlContext ctx, ITaskContext taskCtx, LockableObject resource, List`1 destinationRoles, UserOrGroup destinationUser)
   at Microsoft.VirtualManager.Engine.AuthorizationManager.GrantResourceTask.RunSharingSubTask()
   at Microsoft.VirtualManager.Engine.AuthorizationManager.ResourceSharingTaskBase.RunSubtask()
   at Microsoft.VirtualManager.Engine.TaskRepository.SubtaskBase.Run()
   at Microsoft.VirtualManager.Engine.AuthorizationManager.UserRoleTaskHelper.RunNewAndSetUserRoleSubtasks(ITaskContext taskContext, List`1 queuedSubtasks, UserRoleData userRoleData)
   at Microsoft.VirtualManager.Engine.AuthorizationManager.SetUserRoleSubtask.RunSubtask()
   at Microsoft.VirtualManager.Engine.TaskRepository.SubtaskBase.Run()
   at Microsoft.VirtualManager.Engine.TaskRepository.Task`1.SubtaskRun(Object state)
*** Carmine error was: DatabaseFailure (2605); SQLServer; 8144
[s#5cf2] ExecuteNonQuery()
[s#5c38] Task`1.SubtaskRun(this: (Task`1#b), TaskID: (guid) 0e1c3e3d-76de-4d8b-bfc2-cbcc400fadf4)
Full call stack from when the exception was thrown:   at System.Environment.GetStackTrace(Exception e, Boolean needFileInfo)
   at System.Environment.get_StackTrace()
   at Microsoft.VirtualManager.DB.CarmineSqlException..ctor(SqlException sqlException)
   at Microsoft.VirtualManager.DB.SqlRetryCommand.ExecuteNonQuery()
   at Microsoft.VirtualManager.DB.DelegatedAdmin.UserRoleDBHelper.<>c__DisplayClass15.<AddObjectSharingData>b__14()
   at Microsoft.VirtualManager.Engine.DbAccessHelper.<>c__DisplayClass4.<HandleInsertErrors>b__3()
   at Microsoft.VirtualManager.Engine.DbAccessHelper.HandleInsertErrors[_RetTy](DbAccessDelegate`1 func, ErrorInfo duplicateErrorInfo)
   at Microsoft.VirtualManager.DB.DelegatedAdmin.UserRoleDBHelper.AddObjectSharingData(SqlContext ctx, ITaskContext taskCtx, Guid objectId, CarmineObjectType objectType, AccessControlData accessData)
   at Microsoft.VirtualManager.DB.DelegatedAdmin.ResourceSharingHelper.AddSharingData(SqlContext ctx, ITaskContext taskContext, LockableObject resource, AccessControlData data)
   at Microsoft.VirtualManager.DB.DelegatedAdmin.ResourceSharingHelper.AddResourceSharing(SqlContext ctx, ITaskContext taskCtx, LockableObject resource, List`1 destinationRoles, UserOrGroup destinationUser)
   at Microsoft.VirtualManager.Engine.AuthorizationManager.GrantResourceTask.RunSharingSubTask()
   at Microsoft.VirtualManager.Engine.AuthorizationManager.ResourceSharingTaskBase.RunSubtask()
   at Microsoft.VirtualManager.Engine.TaskRepository.SubtaskBase.Run()
   at Microsoft.VirtualManager.Engine.AuthorizationManager.UserRoleTaskHelper.RunNewAndSetUserRoleSubtasks(ITaskContext taskContext, List`1 queuedSubtasks, UserRoleData userRoleData)
   at Microsoft.VirtualManager.Engine.AuthorizationManager.SetUserRoleSubtask.RunSubtask()
   at Microsoft.VirtualManager.Engine.TaskRepository.SubtaskBase.Run()
   at Microsoft.VirtualManager.Engine.TaskRepository.Task`1.SubtaskRun(Object state)
   at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
--- SqlException details -----------------
System.Data.SqlClient.SqlException (0x80131904): Procedure or function prc_RBS_UserRoleSharedObjectRelation_Insert has too many arguments specified.
   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)
   at System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async, Int32 timeout, Task& task, Boolean asyncWrite, SqlDataReader ds)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, TaskCompletionSource`1 completion, Int32 timeout, Task& task, Boolean asyncWrite)
   at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(TaskCompletionSource`1 completion, String methodName, Boolean sendToPipe, Int32 timeout, Boolean asyncWrite)
   at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
   at Microsoft.VirtualManager.DB.SqlRetryCommand.ExecuteNonQuery()
ClientConnectionId:b85c83f3-e87d-4ec4-af12-41b4dd6ad8cb
Error = 8144
Index #0
Source: .Net SqlClient Data Provider
Number: 8144
State: 2
Class: 16
Server: localhost\SCVMM
Message: Procedure or function prc_RBS_UserRoleSharedObjectRelation_Insert has too many arguments specified.
Procedure: prc_RBS_UserRoleSharedObjectRelation_Insert
Line: 0
--- Caller StackTrace -----------------
FileName:; Method:ExecuteNonQuery(); lineNo:0; ilOffset:178.
FileName:; Method:<AddObjectSharingData>b__14(); lineNo:0; ilOffset:12.
FileName:; Method:<HandleInsertErrors>b__3(); lineNo:0; ilOffset:11.
FileName:; Method:HandleInsertErrors(); lineNo:0; ilOffset:6.
FileName:; Method:AddObjectSharingData(); lineNo:0; ilOffset:312.
FileName:; Method:AddSharingData(); lineNo:0; ilOffset:23.
FileName:; Method:AddResourceSharing(); lineNo:0; ilOffset:464.
FileName:; Method:RunSharingSubTask(); lineNo:0; ilOffset:49.
FileName:; Method:RunSubtask(); lineNo:0; ilOffset:23.
FileName:; Method:Run(); lineNo:0; ilOffset:354.
FileName:; Method:RunNewAndSetUserRoleSubtasks(); lineNo:0; ilOffset:166.
FileName:; Method:RunSubtask(); lineNo:0; ilOffset:140.
FileName:; Method:Run(); lineNo:0; ilOffset:354.
FileName:; Method:SubtaskRun(); lineNo:0; ilOffset:221.
FileName:; Method:RunInternal(); lineNo:0; ilOffset:112.
FileName:; Method:Run(); lineNo:0; ilOffset:4.
FileName:; Method:System.Threading.IThreadPoolWorkItem.ExecuteWorkItem(); lineNo:0; ilOffset:0.
FileName:; Method:Dispatch(); lineNo:0; ilOffset:162.
-------- exception.InnerException.ToString() -------
System.Data.SqlClient.SqlException (0x80131904): Procedure or function prc_RBS_UserRoleSharedObjectRelation_Insert has too many arguments specified.
   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)
   at System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async, Int32 timeout, Task& task, Boolean asyncWrite, SqlDataReader ds)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, TaskCompletionSource`1 completion, Int32 timeout, Task& task, Boolean asyncWrite)
   at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(TaskCompletionSource`1 completion, String methodName, Boolean sendToPipe, Int32 timeout, Boolean asyncWrite)
   at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
   at Microsoft.VirtualManager.DB.SqlRetryCommand.ExecuteNonQuery()
ClientConnectionId:b85c83f3-e87d-4ec4-af12-41b4dd6ad8cb
--------------- exception.StackTrace ---------------
at Microsoft.VirtualManager.DB.SqlRetryCommand.ExecuteNonQuery()
   at Microsoft.VirtualManager.DB.DelegatedAdmin.UserRoleDBHelper.<>c__DisplayClass15.<AddObjectSharingData>b__14()
   at Microsoft.VirtualManager.Engine.DbAccessHelper.<>c__DisplayClass4.<HandleInsertErrors>b__3()
   at Microsoft.VirtualManager.Engine.DbAccessHelper.HandleInsertErrors[_RetTy](DbAccessDelegate`1 func, ErrorInfo duplicateErrorInfo)
   at Microsoft.VirtualManager.DB.DelegatedAdmin.UserRoleDBHelper.AddObjectSharingData(SqlContext ctx, ITaskContext taskCtx, Guid objectId, CarmineObjectType objectType, AccessControlData accessData)
   at Microsoft.VirtualManager.DB.DelegatedAdmin.ResourceSharingHelper.AddSharingData(SqlContext ctx, ITaskContext taskContext, LockableObject resource, AccessControlData data)
   at Microsoft.VirtualManager.DB.DelegatedAdmin.ResourceSharingHelper.AddResourceSharing(SqlContext ctx, ITaskContext taskCtx, LockableObject resource, List`1 destinationRoles, UserOrGroup destinationUser)
   at Microsoft.VirtualManager.Engine.AuthorizationManager.GrantResourceTask.RunSharingSubTask()
   at Microsoft.VirtualManager.Engine.AuthorizationManager.ResourceSharingTaskBase.RunSubtask()
   at Microsoft.VirtualManager.Engine.TaskRepository.SubtaskBase.Run()
   at Microsoft.VirtualManager.Engine.AuthorizationManager.UserRoleTaskHelper.RunNewAndSetUserRoleSubtasks(ITaskContext taskContext, List`1 queuedSubtasks, UserRoleData userRoleData)
   at Microsoft.VirtualManager.Engine.AuthorizationManager.SetUserRoleSubtask.RunSubtask()
   at Microsoft.VirtualManager.Engine.TaskRepository.SubtaskBase.Run()
   at Microsoft.VirtualManager.Engine.TaskRepository.Task`1.SubtaskRun(Object state)
------------- StackTrace from handler --------------
This is the call stack from where the exception was caught, not where it was thrown.
at Microsoft.VirtualManager.Utils.Diagnostics.WatsonReport.WriteReportTextFile(TextWriter reportFile)
   at Microsoft.VirtualManager.Utils.Diagnostics.WatsonReport.Send()
   at Microsoft.VirtualManager.Utils.Diagnostics.WatsonExceptionReport.Send()
   at Microsoft.VirtualManager.Utils.Diagnostics.WatsonCenter.ReportException(Exception e, WERReportOptions options, String& localReportPath)
   at Microsoft.VirtualManager.Engine.TaskRepository.Task`1.SubtaskRun(Object state)
   at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
   at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   at System.Threading.ThreadPoolWorkQueue.Dispatch()
-------------------- Assemblies --------------------
mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
    Module=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
    Version=4.0.30319.34011
    BuildType=retail
    Product=Microsoft® .NET Framework
VMMService, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\vmmservice.exe
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\vmmservice.exe
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
System.ServiceProcess, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
    Version=4.0.30319.34003
    BuildType=retail
    Product=Microsoft® .NET Framework
TraceWrapper, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\TraceWrapper.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\TraceWrapper.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Utils, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Utils.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Utils.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
NativeMethods, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\NativeMethods.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\NativeMethods.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.Common, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Common.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Common.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.IndigoAccessLayer, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.IndigoAccessLayer.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.IndigoAccessLayer.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
Skuhelper, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Skuhelper.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Skuhelper.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Errors, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Errors.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Errors.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Remoting, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Remoting.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Remoting.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
System.Runtime.Serialization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
System.Data, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    Version=4.0.30319.33440
    Product=Microsoft® .NET Framework
System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
System.DirectoryServices.AccountManagement, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
Engine.Adhc.Operations, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Adhc.Operations.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Adhc.Operations.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.TaskRepository, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.TaskRepository.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.TaskRepository.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
ImgLibEngine, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\ImgLibEngine.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\ImgLibEngine.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
VmmHelperHost, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\VmmHelperHost.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\VmmHelperHost.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
VirtualizationInterfaces, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\VirtualizationInterfaces.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\VirtualizationInterfaces.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
NetworkServiceInterfaces, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\NetworkServiceInterfaces.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\NetworkServiceInterfaces.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
ClusterUtil, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\ClusterUtil.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\ClusterUtil.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
VMWareImplementation, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\VMWareImplementation.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\VMWareImplementation.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.AuthorizationManager, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.AuthorizationManager.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.AuthorizationManager.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.AuthorizationManagerTasks, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.AuthorizationManagerTasks.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.AuthorizationManagerTasks.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.Backup, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Backup.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Backup.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.BitBos, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.BitBos.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.BitBos.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
System.Management.Automation, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll
    Version=6.3.9600.16394
    BuildType=retail
    Product=Microsoft (R) Windows (R) Operating System
WsManWrappers, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\WsManWrappers.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\WsManWrappers.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
SqmWrapper, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\SqmWrapper.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\SqmWrapper.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.Deployment, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Deployment.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Deployment.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.Placement.ResourceModel, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Placement.ResourceModel.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Placement.ResourceModel.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.ImgLibOperation, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.ImgLibOperation.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.ImgLibOperation.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
Engine.CustomProperties, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.CustomProperties.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.CustomProperties.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.VmOperations, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.VmOperations.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.VmOperations.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.MomDal, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.MomDal.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.MomDal.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
System.Web.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
Engine.PxeServer, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.PxeServer.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.PxeServer.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.Placement, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Placement.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Placement.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.P2VCommon, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.P2VCommon.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.P2VCommon.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
PatchExtractor, Version=0.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\PatchExtractor.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\PatchExtractor.dll
Engine.ConfigurationProviders, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.ConfigurationProviders.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.ConfigurationProviders.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
GatewayInterfaces, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\GatewayInterfaces.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\GatewayInterfaces.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Microsoft.Management.Infrastructure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll
    Version=6.3.9600.16384
    BuildType=retail
    Product=Microsoft (R) Windows (R) Operating System
Microsoft.CapacityManager.Modeling.Store.ModelLibrary, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Microsoft.CapacityManager.Modeling.Store.ModelLibrary.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Microsoft.CapacityManager.Modeling.Store.ModelLibrary.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.CustomPropertyTasks, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.CustomPropertyTasks.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.CustomPropertyTasks.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.UMOperation, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.UMOperation.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.UMOperation.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.Scheduler, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Scheduler.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Scheduler.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.Tasks, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Tasks.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.Tasks.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.ServiceOperations, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.ServiceOperations.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.ServiceOperations.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
GoalState, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\GoalState.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\GoalState.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.CloudService, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.CloudService.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.CloudService.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
WSManAutomation, Version=3.2.7510.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\WSManAutomation.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\WSManAutomation.dll
wmiWrappers, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\WMIWrappers.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\WMIWrappers.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
System.Transactions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    Version=4.0.30319.33440
    Product=Microsoft® .NET Framework
System.EnterpriseServices, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
    Location=C:\Windows\Microsoft.Net\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
SMDiagnostics, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
DB.DelegatedAdmin, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\DB.DelegatedAdmin.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\DB.DelegatedAdmin.dll
    Version=3.2.7620.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
DB.TieredPerfCounters, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\DB.TieredPerfCounters.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\DB.TieredPerfCounters.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.PhysicalMachine, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.PhysicalMachine.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.PhysicalMachine.dll
    Version=3.2.7515.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.UpdateManagement, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.UpdateManagement.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.UpdateManagement.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
Engine.RunAs, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.RunAs.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.RunAs.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
System.Numerics, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
Engine.DB.Scheduler, Version=1.0.523.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.DB.Scheduler.dll
    Module=C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\Bin\Engine.DB.Scheduler.dll
    Version=3.2.7510.0
    BuildType=retail
    Product=System Center Virtual Machine Manager 2012 R2
System.ServiceModel.Internals, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
System.DirectoryServices, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
System.Management, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
    Location=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    Module=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    Version=4.0.30319.33440
    BuildType=retail
    Product=Microsoft® .NET Framework
--------- Extra Data for Watson Report -------------
Error Reporting Enabled=True
*** Extra Data ***
Process ID = 1500 (0x05dc)
Managed Thread ID = 25
Native Thread ID = 1260 (0x04ec)
Thomas.

I (quite honestly) am one of those folks that generally do not read the KB articles associated with a patch or UR or SP - as you don't expect details like have been put into this particular one.
But as Kristian pointed out - within that KB article is the SQL script that modifies / updates this SQL Stored Procedure.
http://blogs.technet.com/b/scvmm/archive/2014/01/29/how-to-update-scvmm-2012-r2-to-update-rollup-1.aspx
Needless to say, the feedback was given to MSFT that folks would overlook that this SQL script needed to be run. So we are just trying to help out.
Brian Ehlert
http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Attempting change is of your own free will.

How can I add a user Role member that is from a different domain

We are currently building out SCOM 2012 R2 to provide monitoring as a service to some of our customers. As of now we have the RMS on our own department's domain (Domain A) which we have full control of and we have a gateway server that is on the company
wide domain (Domain B) so that we can monitor other departments devices as the leverage this system.
Monitoring is working just fine on both domains and we are just working on fine tuning SCOM so that we can roll it out as a service we offer to our customers. One of the next steps we are working on before rolling it out is giving specific users access
to view only their own devices, dashboards, and groups. So I created a Read-Only profile and went to add a user to test it out, but that user is on Domain B and SCOM is unable to resolve this account. I'm seeing Event ID 26319 with Error Code 1332.
How can I get SCOM to discover devices on a different domain so that I can give them different permissions for accessing the Operations Console and/or Web Console? Is this possible?
Here is the Error I'm seeing.
Log Name: Operations Manager
Source: OpsMgr SDK Service
Date: 2/4/2015 1:11:59 PM
Event ID: 26319
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: xxxxx.xxxx.xxxxxxxx.xxx
Description:
An exception was thrown while processing UpsertUserRolesV2 for session ID uuid:f3b4015e-9583-4237-b7a6-406826434553;id=40.
Exception message: The creator of this fault did not specify a Reason.
Full Exception: System.ServiceModel.FaultException`1[Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException]: The creator of this fault did not specify a Reason. (Fault Detail is equal to Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException:
Unable to resolve the user [email protected] associated with the user role. Error code 1332. Check your active directory configuration.).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="OpsMgr SDK Service" />
<EventID Qualifiers="49152">26319</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-02-04T21:11:59.000000000Z" />
<EventRecordID>172748</EventRecordID>
<Channel>Operations Manager</Channel>
<Computer>xxxxx.xxxx.xxxxxxxx.xxx</Computer>
<Security />
</System>
<EventData>
<Data>UpsertUserRolesV2</Data>
<Data>uuid:f3b4015e-9583-4237-b7a6-406826434553;id=40</Data>
<Data>The creator of this fault did not specify a Reason.</Data>
<Data>System.ServiceModel.FaultException`1[Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException]: The creator of this fault did not specify a Reason. (Fault Detail is equal to Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException:
Unable to resolve the user [email protected] associated with the user role. Error code 1332. Check your active directory configuration.).</Data>
</EventData>
</Event>
Thanks for any help I can get in resolving this issue.
Jake

The SCOM Management Server is in Domain A. I've tried it already and it has failed.
So just to clarify the method I used was to go to Administration>Security>User Roles. Then New User Role>Read-Only Operator. In the Create User Role Wizard I then gave the User Role a name, Clicked "Add" under User Role Members.
Then the Select Users or Groups window pops up and I changed the Locations from Domain A to Domain B and searched for the user, which it's able to find, then clicked "OK" to add it to the User Role members which it does just fine. On
the next page which is Group Scope I checked the one group I want this account to have access to and then click next. This brings me to Dashboards and Views where I click the radio button for "Only the dashboards and views selected in each tab are
approved" and chose the folder of dashboards I want this account to access and then click next. This brings me to the Summary and I click "Create". At this point it thinks for a moment then closes out the wizard but the new Read-Only
Operator does not appear. I then look in Event Viewer and see the Event I pasted above.
Am I doing something wrong here? Any guidance on how to get around this issue would be much appreciated.
Thanks,
Jake

Document search error in webshop(Error in authorization check: user unknow)

Hi All
actually we have implemented the document search functionality in webshop to access all the documents in webshop who have created order in the webshop.
actually when i am logging into the portal with userid "skumar" after that there was role called "Document Search" when i click that document search role then the document search will be opened, based on the selections in the selection criteria then the documents will be displayed generally.
actually come to my error when i select in the selection criteria "order acknowledgement" and i select the one more column called "period" after that i click the search button then i am getting the error as follows.
<b>Error in authorization check: user unknown.</b>
Can you please help me where to check the authorizations in the system for accessing the documents.
Regards
Sunil

Hi Sunil generally this kind of error will occur when you choose acknoledgement
for Future Periods,eventhough input is past date if the same problem occurs you should check for Su05 Internet USer authoriasations
Reward if helpful
Venkat

User roles in Integration Repository

Hi everybody,
does anybody have experience with user roles in XI 3.0? We want to limit access to various namespaces in the Integration Repository with use of these roles that can be created in the IR. That way, various XI developers working on the same XI-Repository should not be able to work in the namespaces of other developers.
We created the role in the IR and assigned it to a user in the J2EE Engine. But so far, it doesn't seem to work.
Am I missing something??
Thanks a lot,
Francis Wolf

Hi,
it looks like the integration to the "abap" backend (=IS-Server) is missing.
J2EE-R3 integration regards user management maps R3 roles onto J2EE user groups. Thus, if the term "role" is used in R3 context, it has to be translated to "user group" in J2EE.
Next steps:
1. Create user in "R3", with transaction SU01.
2. In "R3", create a role with transaction PFCG
3. UME Admin WebApp: assign role to user group
4. XI Exchange Profile WebApp: activate data-dependent authorization checks. Put: com.sap.aii.util.server.auth.activation" in section "IntegrationBuilder.Repository" to true
Please check the documentation on Netweaver security and Integration of UME Roles with SAP Roles
Hope that gives an idea!
Good luck
Holger

Trying to understand "User/Role/Profile Synchronization" and Batch Analysis

Hello,
Im trying to understand what exactly and from which tables these jobs are copying to which tables in CC. I have a understanding that these jobs are moving also deleted roles from backend. This is causing unnecessary delay to long lasting job.
I would appreasite if some one could explain the logic behind these jobs. What the fullsync and incremental is reading ? What kind of changes are causing a role/user/profile to be included to the full and incremental jobs?
How the incremental analysis logic is built ?
br Janne

Janne,
In my current implementation we are going for an offline risk analysis due to the heteregoneus system landscape of our client (several SAP and non SAP systems and several SAP systems under 4.6C). Eventhough within our approach we don't perfrom the backend synchronization (we use CC data extractor to pull data from backend into CC) hope the following info could hel you:
The tables such jobs you mention access to, are all the SAP backend system tables related with users, roles, profiles, action and permissions. If you check the data mapping appendix of the "user and configuration guide for 5.2" you will see all the data that CC retrieves. For instance, in order to extract user info (UserID, FName, LName, Email, Phone, Email, Department) tables USR21, USR02, ADRP, ADR6 and ADCP must be accessed.
In terms of CC tables:
VIRSA_CC_SYSUSR >> UserIDs and Systems ID relationship
VIRSA_CC_GENOBJ >> User, Role and Profile master data
VIRSA_CC_GENACT >> User-action, role-action and profile-action data
VIRSA_CC_GENPRM >> User-permission, role-permission and profile-permission
VIRSA_CC_SAPOBJ >> Action-permission
VIRSA_CC_OBJTEXT >> Objects descripcions (ACT, PRM, FLD, VAL, ORG)
Hope this helps.
Regards,
Imanol

Checking user roles in FI Module

Similar Messages

Maybe you are looking for