Duplicate Roles

I have a role showing up twice within the portal when searching for it through user manangement role function. The first one that appears is just the role name, the second show the location in the PCD of the role and it's name. The role is only defined once in the PCD.
My questions are has anyone every seen this before? Does anyone know how this could of happen? How do I correct it? It's almost like a pointer didn't get cleaned up.

Hi William,
You have not uploaded the package (Ex:CRM, BW)correctly because of that you have the issue. Check for OSS.
Lanka

Similar Messages

Stopping of assignment of duplicate role in SU01 and same user in PFCG.

Hello Experts,
I have a requirement, wherein I have to restrict assignment of duplicate roles in the user master (SU01) also I should not be able to assign same users twice in the user tab in PFCG.
Please advise...Thanks in advance.
Best Regds,
Suyog Chakot...

Hi Suyog,
There are two ways to do it:
1 - PRGN_COMPRESS_TIMES
2 - SSM_CUST .
PRGN_COMPRESS_TIMES has its own limitation, it works perfect in Non-CUA landscape while have lot of issues in R/3 CUA landscape.
SSM_CUST is universal and I guess it can be used in al landscape. CUA as well as NON CUA. Let us know if you need any more information on this.
Just search with these two key words and I am sure you will get your reply.
Edited by: sap.sec.akshay on Dec 30, 2009 6:55 PM

Deletion of Invalid and duplicate roles

Hi,
This is regarding some function modules which are used for deleting invalid roles.These function modules are available only in CUA environment that is in Solution Manager environment only, not in ECC or other systems.Can anybody confiem which one of these function modules would be the best to delete roles of one's choice.The idea is we have identified the invalid and duplicate roles , but we need the function modules only to delete them , ie remove them from user's role profile..
The function modules are: 1) BBPU_WAP_USER_ROLE_REMOVE_LIST
                                       2) BBPU_WAP_USER_ROLE_REMOVE
                                       3) BBPU_WAP_USER_ROLE_CHANGE
Thanks & Regards,
Savitha.

I don't know what you're doing.
Try my working SSCCE example.
Just press the Reset Table button and see what happens.
import java.awt.BorderLayout;
import java.awt.event.ActionEvent;
import java.awt.event.ActionListener;
import javax.swing.JButton;
import javax.swing.JDialog;
import javax.swing.JFrame;
import javax.swing.JPanel;
import javax.swing.JScrollPane;
import javax.swing.JTable;
import javax.swing.UIManager;
import javax.swing.table.DefaultTableModel;
public class ResetTableTest {
    public static void main(String[] args) {
        try {
            UIManager.setLookAndFeel(UIManager.getSystemLookAndFeelClassName());
            JFrame frame = new JFrame();
            frame.setDefaultCloseOperation(JDialog.EXIT_ON_CLOSE);
            DefaultTableModel model = new DefaultTableModel(new String[][]{{"1", "2"}, {"3", "4"}}, new String[]{"col1", "col2"});
            model.addRow(new String[] {"5", "6"});
            JPanel panel = new JPanel(new BorderLayout());
            final JTable table = new JTable(model);
            panel.add(new JScrollPane(table), BorderLayout.CENTER);
            JButton button = new JButton("Reset Table");
            button.addActionListener(new ActionListener() {
                public void actionPerformed(ActionEvent e) {
                    table.setModel(new DefaultTableModel(new String[][]{{"1", "2"}, {"3", "4"}}, new String[]{"col1", "col2"}));
            panel.add(button, BorderLayout.SOUTH);
            frame.getContentPane().add(panel);
            frame.pack();
            frame.setVisible(true);
        } catch (Exception e) {e.printStackTrace();}
}

Identifying Duplicate Roles and Traching Composite Role Assigned to the Use

Dear Friends,
I am novice to this website even after browsing for past 3 months. This website is so useful and huge with so many forums. I am lost many times where to post this questions. there is not a single SAP Security Forum or Basis/Security related forum. Can anyone direct me to the right forum or if there is no Security Forums, can anyone direct me how to start new Forum so that all security related discussions and knowledge sharing takes place. I am requesting the Moderators of this website to direct me to the right forums.
we have around 2000 users in Production. We assign Composite roles and single roles to all users. Sometime we use SECATT or LSMW to update User Master Data to Assign some Roles that are ALREADY assigned to the users. I have 2 questions. If there any way to clean up this mess. I mean Identifying all users who have these Duplicate Roles with Different Validity Dates. I am sure SUIM can not help me as I research a lot on this. I appreciate if anyone can direct me with some solution in this cleanup process. I mean some SQL or SAP Query will help me i guess. Any suggestions are greatly appreciated.
My Second Question is Tracking Composite Role/User Assignment Changes. We had assigned some Composite roles to the user 3 months ago and deleted last week. when i check SUIM change documents, It does not show Composite Role history. It is Displaying all single roles that are assigned and deleted later. BUT It never showed any information on Composite Role Additions or Deletions in User Change Documents. I hope SUIM is not going to help. I still need to go to many places or write any Good SQL and execute them.
Is anyone had written this Utility SQL programs for cleanup of roles/users in the SAP. Is there any way to check or debug this issue, going to see any tables that monitor these changes. I appreciate if can one can share this knowledge to resolving this issues.
any ideas and suggestions are welcome.
Thanks
Kumar

Satish,
Please post this in the SAP NetWeaver Administrator Forum and close this thread here.
SAP NetWeaver Administrator
Regards,
Ravi

Duplicate Roles in USMR (provisioning via CUP)

Hello everyone,
We are using GRC CUP 5.3 SP8
How can we avoid or prevent CUP from assigning Roles which already exist for the User master record ?
we have some default Role mappings ( some basic role being tagged to main role)
if the user already has this basic role assigned , by requesting the main role he is getting the basic role again and again
and I see duplicate entries of the same role in USMR I want to prevent this happen.
Any ideas ?
Thanking in advance
Olivier

I agree with Olivier but this is not only the problem with CUP. It is a problem with SU01. Try to add an existing role to an user account and SAP will add a duplicated entry if the role validity dates are different.
When the request is created, CUP just takes the valid from date as current date and no-one is going to check that this role is already assigned to user and someone needs to match the valid from date.
I don't see any resolution to this issue. Can you check with SAP?
Alpesh

Issue while making duplicate roles from standard roles.

Hi Expert,
I have copied ESS and MSS role to a Z_ESS and Z_MSS role and assigned this role in
permission->set this under medium_security .
Portal Links donot get open when i click on it, it shows "page not available or not found".
But if i assign Standard roles(ESS and MSS) then it is working fine.
Please assist what needs to done to make it copy roles as standard roles

Hi rishavsharma,
you are referring with medium_security to the Security Zones, but the roles need to set the PCD Pemission setting correct in the permission area of the PCD itself (Content Admin and in the menu you should see persmissions) and don't forget the enduser flag for the user/group who use the role.
Also ESS/ MSS Role changes need also changes in the backend if Webdynpro ABAP is used.
Regards,
Kai

Assigning a different mask for the same role

Hi All,
I have two users user1 and user2 are created in MDM and each assigned to the same role say role1.
My requirement is user1 should get data of catagory 1 where as user2 should get all the main data in MDM.This catagory 1 is part of the main data.
For this scenario i have created a mask say for example catagory1_mask for catagory1 data and assigned this mask to the role role1 where user1 and user2 are being assigned to this role.
And i have one more mask all_mask for user2 where i have assigned all the records of the main table to this mask. So when user2 logs into the MDM he would get all the data in MDM.
If i assign this all_mask to the role1 user1 cal also access the whole data including user2. But as per the rqmt user1 should not access the whole data but have to access only catgory1 data.
Can anybody advice me how can i assign a different masks to a one role when 2 users have been assigned the same role?
Regards
Sireesha.

Hi Jitesh,
I am getting one issue after creating duplicate role in portal.
As u know i have created 2 duplicate roles for user1 and user2. Before creating the duplicate role i was able to see the user1 and user2 in the SRM MDM UI page of general tab.
After creating the duplicate roles for these users am not getting the user1 and user2 in the User dropdown field of MDM UI screen...
Is this bcoz of creating duplicate role?
How can i get the user1 and user2 here?
Please advice me...
Regards
Sireesha.

Common technical roles in different business roles in BRM & ARM

Hi Gurus ,
Some help please .
We have the following situation with BRM & ARM role provisioning .
In BRM we have for example two business roles setup (B1 & B2). We have in these two business roles a common technical role .
E.g. B1 (has role T1 ,T2 ) , while B2 (has roles T1 & T3) .
in our example an user already has role B1 (with T1 & T2) assigned. The user then needs access to role B2 as well .
Since role T1 is common in both business roles , When an user does an request , ARM then send them a notification saying that an duplicate role exist within the request. (which they have to remove before continuing) . This is confusing the some users .
My question is as follows. Is there a way to for the user to process the request without having the warning displayed & without having the duplicate technical role assigned ?
So essentially , they will get access to business role B1 & B2 (but technical role T1 will not be assigned twice) ?
Your help is greatly appreciated .
Regards,
AJ

Hi AJ,
Could you share the notification message that ARM generates.And what about role T1 assignment.
Is it assigned two time in user profle?
Thanks,
Mamoon

Assignment of same role multiple times

HI Expert,
My requirement is to stop the duplicate role assignment in ECC and BI systems.
Are there any system level settings in SAP to restrict the assignment of duplicate roles to the same user.
we have an option of program PRGN_COMPRESS_TIMES but is there any other work around ?
thank you
Ritu

Hello,
First of all, I'd try to find out the root cause of this
Do you know why this is happening? Is just because of a end-user mistake when assigning roles? If so, I'd point to the Basis people who's assigning the roles. Before assign a role to a user, the Basis guy (or girl) should check if the role is already assigned to the user.
Cheers!
Diego.

RsInvalidPolicyDefinition error whenever I try to create/modify/edit a role in SSRS 2008

Hi All,
I am having trouble creating/editing role assignments on my Report Server.
I should have all administrator rights, but regardless of what I do, I get the same error:
The "<Policies><Policy><GroupUserName>BUILTIN\Administrators</GroupUserName><Roles><Role><Name>Content Manager</Name></Role></Roles></Policy><Policy><GroupUserName>MYDOMAIN\USER01</GroupUserName><Roles><Role><Name>Content
Manager</Name></Role></Roles></Policy><Policy><GroupUserName>MYDOMAIN\USER02</GroupUserName><Roles><Role><Name>Content Manager</Name></Role></Roles></Policy><Policy><GroupUserName>Everyone</GroupUserName><Roles><Role><Name>Standard
Report User</Name></Role></Roles></Policy><Policy><GroupUserName>MYDOMAIN\USER03</GroupUserName><Roles><Role><Name>Content Manager</Name></Role></Roles></Policy><Policy><GroupUserName>MYDOMAIN\USER02</GroupUserName><Roles><Role><Name>Content
Manager</Name></Role></Roles></Policy><Policy><GroupUserName>MYDOMAIN\USER03</GroupUserName><Roles><Role><Name>Content Manager</Name></Role></Roles></Policy><Policy><GroupUserName>MYDOMAIN\USER01</GroupUserName><Roles><Role><Name>Content
Manager</Name></Role></Roles></Policy></Policies>" role assignment is not valid. The role assignment is either empty, specifies a user or group name that is already used in an existing role assignment for the current item,
or specifies duplicate roles for the same user or group. (rsInvalidPolicyDefinition) Get Online Help
This used to work, as I was the one who initially set this up. Now it fails with the above error. I am trying to add a role for a new username. Regardless of whether I try to add, delete, or modify, I get the same error.
What should I look for to trouble shoot this?
Thank you.
--Dan

Hi Dan,
Just as the error message said, the issue can be caused by the role assignment is either empty, specifies a user or group name that is already used in an existing role assignment for the current item, or specifies duplicate roles for the same user or group.
According to your description, it seems that you are trying to assign a same username that already existed in the Security page with System Administrator Role. If in this case, we can delete a duplicate user, then edit another user to add the roles as the
duplicate user.
If there are any misunderstanding, please elaborate the issue for further investigation.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

VIRSA mass creation of roles

Hi All:
        Can anyone tell me how to perform mass creation of roles using VIRSA role expert,also if you could point me to some documentation it will be very helpful.
        Thanks,
          J D

Hi Olivier,
I am afraid, my help is limited to this forum.
However, I can help you with some ABAP logic :
Table AGR_1252 is used to store the ORG values of derived roles.
You can start working with an ABAP'er to get his coding magic started. Though I am not familiar with ABAP, I believe our ABAP'er debugged PFCG and knew what needed to be done. I have no clue what he did
the logic:
Start of Selection
Load information into internal tables for use in creating report
Upload the Organsational Changes Spreadsheet
Ensure Roles exist and there are no duplicates
Ensure Organistional levels exist and there are no duplicates
*Checks if the file exists
Role must exist
Ignore duplicate roles
Authority Check Role for user
IMP Logic checks-
For Add High range of Role must be greater than low range
*...if adding specific ranges - remove existing * or space entry if it
exists
*...if adding * access remove other accesses if they exist
*Process All Org Levels for each role
...submit report to generate profiles
You can start working with your ABAP'er with this logic.
*Disclaimer* - this may need enhancements to meet your requirements. Also, I have just put the logic what I could remember at the top of my head. I may have missed something.
Hope it helps
Abhishek

SCCM 2012 An error has occurred during report processing (rsProcessingAborted)

I have this error on some reports i try to run in my customer
i rebuild all the Database and add the security rule for the report database
i gave the user Logon locally rights ,(and run as a services) also run as sysadmin
here is the error
Microsoft.Reporting.WinForms.ReportServerException
An error has occurred during report processing. (rsProcessingAborted)
Stack Trace:
   at Microsoft.Reporting.WinForms.ServerReport.ServerUrlRequest(Boolean isAbortable, String url, Stream outputStream, String& mimeType, String& fileNameExtension)
   at Microsoft.Reporting.WinForms.ServerReport.InternalRender(Boolean isAbortable, String format, String deviceInfo, NameValueCollection urlAccessParameters, Stream reportStream, String& mimeType, String& fileNameExtension)
   at Microsoft.Reporting.WinForms.AsyncMainStreamRenderingOperation.RenderServerReport(ServerReport report)
   at Microsoft.Reporting.WinForms.AsyncRenderingOperation.PerformOperation()
   at Microsoft.Reporting.WinForms.ReportViewer.AsyncReportOperationWrapper.PerformOperation()
   at Microsoft.Reporting.WinForms.ProcessingThread.ProcessThreadMain(Object arg)
here is a log srsrp.log:
System.Web.Services.Protocols.SoapException: The policy for '#######\IT Department' user or group is not valid. The role assignment is either empty, specifies a user or group name that is already used in an existing role assignment for the current item,
or specifies duplicate roles for the same user or group. ---> Microsoft.ReportingServices.Diagnostics.Utilities.InvalidPolicyDefinitionException: The policy for '#######\IT Department' user or group is not valid. The role assignment is either empty, specifies
a user or group name that is already used in an existing role assignment for the current item, or specifies duplicate roles for the same user or group.~   at Microsoft.ReportingServices.WebServer.ReportingService2005Impl.SetPolicies(String Item,
Policy[] Policies)~   at Microsoft.ReportingServices.WebServer.ReportingService2005.SetPolicies(String Item, Policy[] Policies)

ok . the user name is sccm.admin this user have the assignment to run as a services, he is a domain admin, on the sql server this user have the sysadmin, i create the reporting with the Reporting Services Configuration Manager, and on the Database i use
the sccm.admin to create the new database, on the Service Account i use sccm.admin user, also this user have local administrator on the SCCM server, + i give him the dbreader on All the database on the SCCM server witch it also the SQL server, i add the sccm.admin
on the reporting web the system role and check the all settings give him full permissions
do i make my self clear ? (my English is not so bright )
now from the SCCM 2012 console , some reports run perfectly, and some run and trow this error at me
Microsoft.Reporting.WinForms.ReportServerException
An error has occurred during report processing. (rsProcessingAborted)
Stack Trace:
   at Microsoft.Reporting.WinForms.ServerReport.ServerUrlRequest(Boolean isAbortable, String url, Stream outputStream, String& mimeType, String& fileNameExtension)
   at Microsoft.Reporting.WinForms.ServerReport.InternalRender(Boolean isAbortable, String format, String deviceInfo, NameValueCollection urlAccessParameters, Stream reportStream, String& mimeType, String& fileNameExtension)
   at Microsoft.Reporting.WinForms.AsyncMainStreamRenderingOperation.RenderServerReport(ServerReport report)
   at Microsoft.Reporting.WinForms.AsyncRenderingOperation.PerformOperation()
   at Microsoft.Reporting.WinForms.ReportViewer.AsyncReportOperationWrapper.PerformOperation()
   at Microsoft.Reporting.WinForms.ProcessingThread.ProcessThreadMain(Object arg)
this poor gay have the same problem
An error has occurred during report processing. (rsProcessingAborted)

Oracle ERP Integration with IdM 7

Hi Geeks,
I am integrating Oracle ERP with IdM7 and when I provisiong for a user its working fine, But when I try to modify the users responsibilities its throwing me an error
�AN ERROR OCCURRED MODIFYING USER 'TEST123' ON RESOURCE 'ORA_RESOURCE_ERP'.
ORA-01422: EXACT FETCH RETURNS MORE THAN REQUESTED NUMBER OF ROWS ORA-06512: AT LINE 1 COM.WAVESET.UTIL.WAVESETEXCEPTION: AN ERROR OCCURRED MODIFYING USER 'TEST123' �
Has anyone faced the this issue, Let me know your inputs to over come this err.
Thanx in Advance
Regards
Jeyanth

I suspect, there exist some duplicate roles on Oracle ERP side.. check the APPS.fnd_user table once.
Regards
Phanindra Banda

Some Activities are missing Resource assignments form an imported v7.0 file

Hello,
What could cause missing resources from an activity after importing a v7.0 project?
I received an imported v7.0 file which is found to be missing some resources. The schedule owner provided the exported file along with a Activity Cost-Loading Report. The ACR lists each resource's activity associations. I created the same report only to find missing resources (materials, money, etc.)
Digging into the schedule do not provide any resolution.
Interestingly, 2 resources are being assigned 3 times to the same activity and only one is showing up on the imported file. Again, the schedule owner's program does include.
The file is exported from a server based and imported into a standalone. The schedule owner is not a superuser/admin unlike the standalone.
Thanks for your time!
Best Regards.
Keith
Knowledgebase Solution:
"XER with duplicate Roles/Resources on an activity is not importing all the roles/resources [ID 905700.1]
If the same resource is assigned to an activity multiple times, one of the following fields must be unique for the additional resource assignments to be
imported. The fields are:
- Activity ID
- Project ID
- Cost Account ID
- Resource ID
- Role ID
- Price / Unit
This is by design.
Workaround for importing XER:
Within the Import wizard, on the Update Project Options dialog, select the Modify button. Set the Action for Activity Resource Assignments to Insert
New as shown below.
Please Note: This will only work if you are NOT using timesheets. If using timesheets do not try this or risk losing timesheet data."
Works but be aware that actuals are not updated. Had to provide a unique identifier as stated above in order for actuals to be reported.
Keith
Edited by: Keith on Jul 10, 2010 11:03 AM
Edited by: Keith on Jul 14, 2010 9:56 AM

Hello,
I working for a retail giant company, they bought Adobe LiveCycle and its in their laptop, where am working
I am developing an VISITOR Adobe Interactive Form, i have Designer 8.1 and Reader 9.0 in my Windows 7 Laptop. When i checked the menu EDIT-->form properties --> Compatability, its Adobe XML form File (XDP)
When i opened this VISITOR interactive form in a browser, right clicking and checked form PROPERTIES, then i saw the "PDF Version: 1.6 (Acrobat 7.x)"
I am trying to debug my Java script on a VISITOR interactive form, i found this link in google
http://forums.sdn.sap.com/thread.jspa?threadID=950914
But, when you see my case, i did not see the mentioned MENU-->EDIT-->PREFERENCES-->CONSOLE stuff on my development, pls. see the below screen shots and suggest me how to put the debugger settings in my case,
1_I did not see any MENU here on the LiveCycle Designers in order to set the settings of debugging my Java Script
==============================================================
2_I did not see any MENU either on this tab of PREVIEW of PDF.....in order to set the settings to debug my Java Script
==============================================================
3_I guess.... this is not the EDIT item on MENU your are referencing in your SDN answer, because, i did not see any PREFERENCES option under this EDIT
==============================================================
4_If i open any external (this is Adobe Acrobat Guide downloaded from Google) PDF, there i can see MENU_EDIT_PREFERENCE items_but, in my developement I can not see this stuff in order to put debugger settings
Thank you,

Portal tabs are duplicated

Hi,
I have got most of the roles for portal access and administration, the strange thing I found is when I first login I see all tabs are aligned and unique, when I click on any one of the tab (e.g. Content Administration) I start seeing duplicates (i.e doubling) of most of the tabs. Why is this happening and how do I fix it?
Thanks
Praveen

Hi Praveen, Anja, Sandeep,
My requirement is when ever I assign the merge ID to all sub-roles under parnet role then I am getting single role name and all iViews i Detail Navigation panel.
So I need the Parent Role in TLN and under that -All Sub Roles in Lower level-navigation panel.When I uncheck "can be merge' property I am getting all roles from Parent but if user has duplicate roles then I am getting same sub-role tab in Top LEvel Navigation, that I don't want.
So in brief my requirement is:
whenever user ID has X role as separate role and also having A_ROLE role with X role as child node then on portal there should not be two role tab available for the user.
Regards,
Swapnil

Duplicate Roles

Similar Messages

Maybe you are looking for