End user permission ignored

Hello,
I have a problem with an end user permission that seems to get ignored: I wanted to demonstrate the usage of the end user permission and assigned a role to a User (for simplicity's sake as an entry point, no worksets, pages etc. involved) and enabled end user permission on the role for that particular user.
Now when that user logs in he gets to see the according entry in the navigation bar as expected. However if I disable the end user permission, log out and again log in the user, he stills sees the link. The end user permission setting is simply ignored. Can someone shed light onto this, could there be something wrong with the installation)?
I don't think this is an issue of permission inheritance (the role permissions are set explicitly anyway) or overlapping permissions due to membership in several groups - the user is only member of the single standard group 'authenticated users'.
Regards,
Sebastian
P.S. What's the use of a role assignment to a user without end user permission anyway (I mean why the option)? What happens if you don't add permissions on a Role for a certain user at all (I tried it, but the effect is the same as described above - end user permission seem to be irrelevant)?

Hi Robert,
thanks for your answer and for the link (and I thought I had read everything). I am not so sure however if I really understand the term 'runtime environment' for a user. I thought runtime vs. design-time meant the difference between the content a user sees when he is actually using the portal and the content an administrator has access to in the portal content catalog, i.e. a meta-environment accessible only through certain tools like the permission editor or similar.
I don't understand what you want to express with "It's used to restrict ... end user runtime environment" and why the "Page Personalization" is an example.
I realize that for roles the availability for a user is solely defined by the assignment of that role to the user - end user permissions have no effect on this. Confusing, because I tought this availability (i.e. showing links in the toplevel or detailed navigation) was what was meant by 'runtime environment' but I seem to be wrong here.
The docu says "for roles the end user permission setting does enable you to define which users/groups/roles are able to preview the role content using the portal design-time tools". Again, I am confused, I thought this was exactly the meaning of design-time environment.
Great if you or someone else could comment on this..
Regards,
Sebastian

Similar Messages

How to set End User Permission to an iView?

Hi experts,
can someone tell me how I can set End User Permission to enabled to an iView?

Hi there,
From what I have read you want a user to access an iView without an account. To do this you need to configure the J2EE engine for an anonymous user access and set the iView property for authentication to anonymous.
Because the user has no account you have to assign any roles you want to use for permissions to the anonymous user account configured for anonymous access.
There is documentation on help.sap.com on how to configure anonymous access.
Hope this helps.
Regards
Christiaan

Administrator and End user Permission

Hello Everybody,
How Administrator permission is different from End user permission, i cannot see any major changes if i assign or revoke those.
2. If i have assigned role assigner permission to a user who does not User administrator or any other administrator rights, how he is able to assign role to other user.
I have read on help.sap.com, but unable to understand.
regards
Santosh

Hi Santhosh,
1. The Name itself tells us the Difference .
 "Administrator" ->
 There r 3 types of Admn here
 a) "Content Admn" ( he is the one Who can create Iview / Role ..)
 b) "User Admn" ( he is the one who can Create Users and Assign Roles to the Users)
 c) "System Admn" ( he can change the System Properties ..Like Layout ,sys alias etc )
and End User is the one who doesn't have any of the Admn Roles . A default user may contain Only EU_ROLE
2.
 If u r a developer u must have Content Admn
 and for the basis guys must have User Admn and Sys admn.
Hope it helps .
Regds,
J

Regarding end user permission

Hi Gurus,
I have three iviews (v1,v2,v3)assigned to a role(RoleAll) which will be assigned to user. The requirement is: certain user can only see certain iviews.
my notion is:
another three roles(role1, role2, role3) created, and set the iviews' end user permission enabed to respective role(v1--->role1, v2>role2, v3--->role3), what I expected is : the user with role RoleAll and role1 will see v1.
user with role RoleAll, role1 and rol2 will see v1 and v2.
when I implement like this, the behavior is not as expected.
Can anyone body guide me?
Best regards,
John

>
John Wu wrote:
> I have three iviews (v1,v2,v3)assigned to a role(RoleAll) which will be assigned to user.
>The requirement is: certain user can only see certain iviews.
> my notion is:
> another three roles(role1, role2, role3) created, and set the iviews' end user permission
>enabed to respective role(v1--->role1, v2>role2, v3--->role3), what I expected is :
>the user with role RoleAll and role1 will see v1.
> user with role RoleAll, role1 and rol2 will see v1 and v2.
>
Hello,
Assign iView 1 to Role1, iView2 to Role2 & iView3 to Role3.
Assign RoleAll to those users who should see atleast one of these iViews.
Then Assign Role1 to the users who should see iView1. Similarly assign
Role2 and Role3 to respective users.
Now use Role Merging concept. Give same merge IDs to all the roles. For
the user having two of these roles (for e.g, RoleAll + Role1), will see
only one merged role...and one iView.
refer:
http://help.sap.com/saphelp_nw70/helpdata/EN/53/89503ede925441e10000000a114084/content.htm
May be you could give it a shot.
Regards,
Anagha

FPN - End user permission

Namaste all,
I have followed
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/70191d1e-2bd1-2a10-d9b7-ba19500da527
for setting up FPN. But I didn't understand how to assign end-user permission for a person at the consumer portal. Can somebody guide me how to search for a consumer portal user in the producer portal?
Regards,
Krishna Murthy

You should just be able to navigate to User Administration tab in either portal to see the user. You can assign permissions via the PCD explorer. Locate the PCD object you wish to assign permissions to and right click and choose open --> permissions.
This [help guide|http://help.sap.com/saphelp_nw70/helpdata/EN/f6/2604f005fd11d7b84200047582c9f7/frameset.htm] explains it in more details.
Hope this answers your question.
BRgds,
Simon

Unable to see ESS content with an end user

Hi All,
When I try to see my ESS content with an end user, it is giving me the following error:
com.sap.xss.config.FPMConfigurationException: Read of object with ID portal_content/com.sap.pct/srvconfig/com.sap.pct.erp.srvconfig.ess.employee_self_service/com.sap.pct.erp.srvconfig.skills/com.sap.pct.erp.srvconfig.fpmapplications/com.sap.pct.erp.srvconfig.skillsapplication failed.
Part of the stack trace also says,
Caused by: com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): portal_content/com.sap.pct/srvconfig/com.sap.pct.erp.srvconfig.ess.employee_self_service/com.sap.pct.erp.srvconfig.skills/com.sap.pct.erp.srvconfig.fpmapplications/com.sap.pct.erp.srvconfig.skillsapplication)
It is coming for all the applications in ESS.
I think it is a permission issue, so i gave the end user permission to the user in the PCD as well in the directory where all my ess contents have been kept.But still it doesn't work.
And only when I assign the end user with Admin right, it works which should not be the case.
Kindly suggest a possible solution for this.Your efforts will be appreciated.
Regards.

Hi Friend,
Could please let me know , how you have solved this issue.
I am alos facing the same
" com.sap.xss.config.FPMConfigurationException: Read of object with ID portal_content/com.sap.pct/srvconfig/com.sap.pct.erp.srvconfig.ess.employee_self_service/com.sap.pct.erp.srvconfig.skills/com.sap.pct.erp.srvconfig.fpmapplications/com.sap.pct.erp.srvconfig.skillsapplication failed"
Thanks in advance
Seranjeeve

End User Permissions

Hi all,
can someone please explain to me the meaning or function of the "End-User Flag" in the permission editor of a system which is setup in the portal?
I'm not sure about the effect of this value.
Thanks a lot,
Regards,
Andreas

Hi
End User permissions are available to the user at runtime. This determines what user can see at runtime. To see any object user must have End-user permissions enabled.
End-user permission affects two area:
Detail Navigation - If user have end-user permission for an iView then that iView/Page will be visible to user at runtime in Detail Navigation.
Personalise Option: If user have end-user permission for an iView then that iView is visible to the user in the personalize option available to user through page personalization.
Regards,
Ganesh N

SCSM 2012 SSP Permission for End users

Hello Experts,
I have an issues with SSP - SCSM 2012 SP1.
As an admin user, I can see theOfferings, see the pending requests, can see the requests I have submitted, Approve them etc. But when I am an end user, browsing from my laptop, I see a blank Home page. I dont see the Service offerings in the
homepage..even I dont see the Need Help? text. What is the issue? FYI : Silver light is already installed on my laptop.
Interestingly, I see the Need Help? text with the same end user credential when I am opening the browser inside the server wher SSP is installed.
But, in both the cases, whether I browse in the server or from my laptop, I dont see the service offerings anywhere when i am an end user. I followed the below article..but no success.. :(
http://systemcentertech.com/2012/06/28/scsm-2012-portal-service-catalog-empty-for-end-users/
Please help...
Thanks!
Thanks

Hi,
Did you add the Service Offerings and Request Offerings to the Catalog Group? Here is another good blog on this you can reference:
http://www.concurrency.com/blog/scsmportalpermisions/
My Blog | www.buchatech.com | www.systemcenterportal.com
If you found this post helpful, please give it a "Helpful" vote. If it answered your question, remember to mark it as an "Answer". This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion
in a test environment before implementing!

Is there a way for end users to give their manager access to change their Out of Office, without an admin involved?

Our end users need to be able to give their managers access to enable their out of office.
question 1. Can this be done without giving them full access?
question 2. If they need full access, can the end user themselves give this access? (I've tried giving another user "owner" rights, but the user still can't seem to open my calendar from OWA to adjust my out of office)
question 3. Can this be done without an Sys Admin being involved?

You can create a RBAC role for each manager scoped to each of their employees that lets them run the Set-MailboxAutoReplyConfiguration cmdlet on the exchange server. Otherwise they will need full access to the users mailbox which an admin would have
to grant, the end user can not grant this permission. Then they can open the other users mailbox in OWA and set the OOF
DJ Grijalva | MCITP: EMA 2007/2010 SPA 2010 | www.persistentcerebro.com

Help! ADF default behavior rejected by end users...

Hi,
We have built an ADF 11g application during the past months. Last week we had our first user acceptance test with a small group of users. The users were very satisfied about the nice looks of the screens. But they had quite a lot of issues with the default behavior of ADF. I'll provide a list of the most important issues below. I hope more people here at OTN have experienced these issues and perhaps have some workarounds. And perhaps Oracle can use lists like this to improve the next version of ADF...
<ol><li>Multi record edit We have a lot of multi record edit screens. These are all editable tables. Those tables have the following problems:
<ol type="a"><li>Whenever a partial refresh occurs, the whole table gets reloaded. This takes some time, which is uncomfortable. But the main problem here is that the table does not preserve the scroll bar position. The situation can be improved a little bit by setting the <tt>displayRow</tt> attribute to <tt>"selected"</tt> on the table. This will cause the table to show the selected record at the top of the view port after a refresh. But this still confuses the end users. In their experience the records are randomly jumping around.</li>
<li>Records are not always inserted at the bottom. (In fact, they are inserted above the selected record.) End users simply expect records to be inserted at the bottom of the table, no matter what. And I can't disagree with them. Isn't there a setting to achieve this in ADF?</li>
<li>Whenever the user navigates to another record in the editable table, all validation rules on the record he navigates from are fired. That means he cannot leave a required field empty to fill it later. The end users say this is very annoying. We would like to delay all validation until the user presses the Commit button. But as far as I know this is not possible, is it?</li>
<li>The selected record position is not preserved on a full refresh. Our Commit button forces a full refresh of the page. This sounds like a sensible choice to me. However, users tend to click on Commit quite often. But after a full refresh of the page, the currently selected record in a record set is always reset to the first record in the set. In a large data table, this annoys the users very much. Isn't it possible to preserve the selected record over a full refresh?</ol>
<li>Annoying validation errors Many end users are annoyed by the somewhat "persistent" validation error messages. In a larger form or an editable table, users sometimes want to ignore an error and first enter other data, before correcting the error. This is hardly possible, because ADF sets the input focus to fields with errors and keeps popping up windows with a list of fields that have errors. We would like to make the validation less "aggressive". It is okay to give a field a red border if it contains an error. But leave the input focus where it is. And don't show any popup until the user presses the Commit button. And even then show the popup window only once.</li>
<li>ADF BC caching and business rules in the database We have some business rules in our database that automatically fill some fields with default values. We have e.g. a master-details relation, where a value in the master record is calculated based on the values of the detail records. We have set the calculated field in the master record to "refresh after update" and "refresh after insert". Sometimes the value of the field gets refreshed, but sometimes not. Users know that the field should be calculated by "the system", and are asking if they did something wrong if it doesn't. I know we could do the calculation in ADF, but our policy is to have all business rules in the database and to not repeat ourselves (DRY). Is there another way to guarantee that the calculated value in the master record gets updated after an update or insert of one or more detail records?</li>
<li>Partial refresh loses data If a field causes a partial submit to occur, fields in the same record that were not (partial) submitted before lose their data. This forces us to enable partial submit on all fields. But that causes a delay after moving the focus to the next field and validations to be fired too early.</li>
</ol>
I've numbered the items above, please use these number as a reference if you're posting an answer to a specific question.
Please let me know any solution, even if it is only a partial solution. We've a nasty situation now. Our application is (nearly) finished, but it is blocked for production by the users because of the behavior of the ADF framework, on which we have very little influence. We can't blame the users for that, most of their criticism is fully justified. So we have to come up with a good solution for these issues before we can go to production. So any help would be highly appreciated!
Best regards,
Bart Kummel
PS.
We're using JDeveloper/ADF 11.1.1.1.0, we deploy to a WebLogic 10.3.1 server and we have an Oracle 10g database. We're using the full ADF stack: ADF Business Components, ADF Bindings and ADF Faces.

Hi Bart,
I can answer for few of your questions.
Bart Kummel wrote:
Hi,
We have built an ADF 11g application during the past months. Last week we had our first user acceptance test with a small group of users. The users were very satisfied about the nice looks of the screens. But they had quite a lot of issues with the default behavior of ADF. I'll provide a list of the most important issues below. I hope more people here at OTN have experienced these issues and perhaps have some workarounds. And perhaps Oracle can use lists like this to improve the next version of ADF...
<ol><li>Multi record edit We have a lot of multi record edit screens. These are all editable tables. Those tables have the following problems:
<ol type="a"><li>Whenever a partial refresh occurs, the whole table gets reloaded. This takes some time, which is uncomfortable. But the main problem here is that the table does not preserve the scroll bar position. The situation can be improved a little bit by setting the <tt>displayRow</tt> attribute to <tt>"selected"</tt> on the table. This will cause the table to show the selected record at the top of the view port after a refresh. But this still confuses the end users. In their experience the records are randomly jumping around.</li>You can set the fetchSize in the iterator to a minimum value (Say if you are displaying 20 records in the table at a time, you can set the fetchSize to 20, so that, it will fetch only 20 records at a time, and the remaining records on demand basis, i.e they will be fetched when you scroll in the table).
<li>Records are not always inserted at the bottom. (In fact, they are inserted above the selected record.) End users simply expect records to be inserted at the bottom of the table, no matter what. And I can't disagree with them. Isn't there a setting to achieve this in ADF?</li>I suppose you are using the default createInsert operation. You can write your own method instead of the default createInsert, which would have something like
public void customCreateInsert(){
vo.last();
vo.createInsert();
}You can expose this method as method action and use it in place of default CreateInsert.
<li>Whenever the user navigates to another record in the editable table, all validation rules on the record he navigates from are fired. That means he cannot leave a required field empty to fill it later. The end users say this is very annoying. We would like to delay all validation until the user presses the Commit button. But as far as I know this is not possible, is it?</li>You can set the immediate property to true for the column for which you want to skip the validation. However, the validation will fire when you submit / commit the changes (which is expected).
<li>The selected record position is not preserved on a full refresh. Our Commit button forces a full refresh of the page. This sounds like a sensible choice to me. However, users tend to click on Commit quite often. But after a full refresh of the page, the currently selected record in a record set is always reset to the first record in the set. In a large data table, this annoys the users very much. Isn't it possible to preserve the selected record over a full refresh?</ol>Again, you can have a custom method, which would get the current row, commit the transaction and do a setCurrentRowWithKey to point to the last selected record after commit.
<li>Annoying validation errors Many end users are annoyed by the somewhat "persistent" validation error messages. In a larger form or an editable table, users sometimes want to ignore an error and first enter other data, before correcting the error. This is hardly possible, because ADF sets the input focus to fields with errors and keeps popping up windows with a list of fields that have errors. We would like to make the validation less "aggressive". It is okay to give a field a red border if it contains an error. But leave the input focus where it is. And don't show any popup until the user presses the Commit button. And even then show the popup window only once.</li>You can add a af:messages tag in the top and set globalOnly to true. Also, set the immediate property for the items to skip the validation when they tab out.
<li>ADF BC caching and business rules in the database We have some business rules in our database that automatically fill some fields with default values. We have e.g. a master-details relation, where a value in the master record is calculated based on the values of the detail records. We have set the calculated field in the master record to "refresh after update" and "refresh after insert". Sometimes the value of the field gets refreshed, but sometimes not. Users know that the field should be calculated by "the system", and are asking if they did something wrong if it doesn't. I know we could do the calculation in ADF, but our policy is to have all business rules in the database and to not repeat ourselves (DRY). Is there another way to guarantee that the calculated value in the master record gets updated after an update or insert of one or more detail records?</li>We need some more information. Do you see any "pattern" on which this things occur?
-Arun

SP2013 WF works for admin but not end-users

A simple SP2013 WF calls a SP2010 WF to send email, simple. Works for me (admin) but when a SP user edits an item on the list (which fires the WF), the WF gets to the 2010 call, and fails with this error...
RequestorId: f8c56627-e4e5-5a26-0000-000000000000. Details: An unhandled exception occurred during the execution of the workflow instance. Exception details: System.ApplicationException: HTTP 401 {"Transfer-Encoding":["chunked"],"X-SharePointHealthScore":["0"],"X-SP-SERVERSTATE":["ReadOnly=0"],"SPClientServiceRequestDuration":["61"],"SPRequestGuid":["f8c56627-e4e5-5a26-97ee-ad70ca4d3291"],"request-id":["f8c56627-e4e5-5a26-97ee-ad70ca4d3291"],"X-FRAME-OPTIONS":["SAMEORIGIN"],"MicrosoftSharePointTeamServices":["16.0.0.2930"],"X-Content-Type-Options":["nosniff"],"X-MS-InvokeApp":["1;
RequireReadOnly"],"Cache-Control":["max-age=0, private"],"Date":["Wed, 25 Jun 2014 02:44:54 GMT"],"P3P":["CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT
NAV ONL PHY PRE PUR UNI\""],"Server":["Microsoft-IIS\/7.5"],"WWW-Authenticate":["NTLM"],"X-AspNet-Version":["4.0.30319"],"X-Powered-By":["ASP.NET"]} at System.Activities.Statements.Throw.Execute(CodeActivityContext
context) at System.Activities.CodeActivity.InternalExecute(ActivityInstance instance, ActivityExecutor executor, BookmarkManager bookmarkManager) at System.Activities.Runtime.ActivityExecutor.ExecuteActivityWorkItem.ExecuteBody(ActivityExecutor executor, BookmarkManager
bookmarkManager, Location resultLocation) Exception from activity Throw If Sequence Sequence TryCatch Sequence Microsoft.SharePoint.WorkflowServices.Activities.RetryForDurationPolicy HTTPPost_WorkflowInterop_EnableEvents WorkflowInterop DynamicActivity<Guid>
Then If Working Sequence Flowchart Sequence RCSEmailCst.WorkflowXaml_4f7b53dc_968d_4e22_a812_3178e7b01bad
Spent an hour on phone with M$ support, only to be told it's my fault and I have to re-design my WF...if my WF gets any simpler I'll have to use carrier pigeons to get messages to customers!
I've Googled the error message, results suggest that User Profile Syn is out of whack but M$ support swears up & down our sync is working fine.
Anyone?
Edit to add: we have a hosted implementation of SP2013, NOT on-prem

Hi ,
According to your description, my understanding is that the SharePoint workflow 2013 does not work for end-users in your environment.
For your issue, it can be a permission for the user initiating the workflow. Please make sure site feature Workflows can use app permissions is activated. Go to Site actions > Site Settings >
Site features > Workflows can use app permissions. Make sure the user is one member of a SharePoint Group.
Also please provide more detail information about the error message to determine the exact cause of the error. You can have a look at the blog:
http://ranaictiu-technicalblog.blogspot.com/2013/03/sharepoint-2013-workflow-debugdiagnosis.html
Best Regards,
Eric
Eric Tao
TechNet Community Support

Minimal access for the end users to access a page sharepoint.

I have a list Projects which i have put in a different aspx page by the name ProjectPage.
I have end users accesing that page where i have applied certian styles for dsplaying in a customized way.
However, i need to configure their permissions in such a way that they should be able to access any page other than the project page.
They should not even see the site actions bar and should not be able to access the _layouts/viewlsts.aspx page as well as settings page form the address bar.

Hello,
To restrict application page, either you can hide them from UI (but still be accessible by putting direct url) OR create a custom permission and uncheck "view application page" option. Refer this link for more info:
https://social.technet.microsoft.com/Forums/office/en-US/bc3e9e2e-e606-47a1-ace3-94aadd860e44/is-there-any-way-i-can-disable-site-actions-menu-for-readonly-users?forum=sharepointgeneralprevious
Hemendra:Yesterday is just a memory,Tomorrow we may never see
Please remember to mark the replies as answers if they help and unmark them if they provide no help
(On vacation from 16th Oct to 28th Oct 2014)

End users get blank result from VC model calling an R/3 BAPI.

Hello everyone.
We have build a VC model calling a Z*BAPI that we built in the R/3 backend. Everything works fine through DEV and QAS. However in our production environment when an end user attempts to run the VC application and search for a record they get a blank table result. However if one of our core support team users runs the application it returns the search result successfully.
There are no authorizations on the BAPI itself.
I have tried to trap a security trace (ST01) in PRD but have not been able to capture a security trace for a failed attempt. There is no dump (ST22) and nothing in the sys log to indicate a problem (SM21).
Can someone tell me or point me to where I can determine all the authorizations an end user needs in order to run a VC model using a R/3 BAPI?
We are running on EP 7.0 and ECC 6.0.
Thanks,
-Jon

Hi Shay,
When you ask "Have you tried adding the user to the permission list?". Can you be more specific.
Are you talking about the medium level security zone permissions in System Administration -> Permissions -> Portal Permissions -> sap.com/NetWeaver.Portal/medium_safety
For the following objects in the medium_safety folder, assign End User permissions:
com.sap.vc.mmcompiler
com.sap.visualcomposer
com.sap.visualcomposer.portalconnector
If so we have set the permissions to the Authenticated User Group to be "none" and "end-user".
We have also assigned end user rights to the Everyone group to the following PCD folders...
Assign End User permissions to VC Role for the following content:
pcd:portal_content/templates/pages/portalpagetemplate
pcd:portal_content/templates/pages/wdProxyPage
pcd:portal_content/templates/layouts/fullWidth
pcd:portal_content/templates/iviews/wdProxyiView
It still does not work unless the person has content admin assigned. Is there any other permissions (ACLs, PCDs, security zones, etc.) that a person needs in order to use a VC model?
-Jon

HT3743 Apple end-user agreement and jailbreaking

Hi, im not planning on jailbreaking but just wanted to understand where in the end user agreement does it state that jailbreaking voids the warranty?
Thank you

Not sure what country you are in or which device you have, but it is pretty much the same across the board. From the USA iPhone 5 warranty:
http://www.apple.com/legal/warranty/products/iphone-english.html
This Warranty does not apply: (a) to consumable parts, such as batteries or protective coatings that are designed to diminish over time, unless failure has occurred due to a defect in materials or workmanship; (b) to cosmetic damage, including but not limited to scratches, dents and broken plastic on ports; (c) to damage caused by use with another product; (d) to damage caused by accident, abuse, misuse, liquid contact, fire, earthquake or other external cause; (e) to damage caused by operating the Apple Product outside Apple’s published guidelines; (f) to damage caused by service (including upgrades and expansions) performed by anyone who is not a representative of Apple or an Apple Authorized Service Provider (“AASP”); (g) to an Apple Product that has been modified to alter functionality or capability without the written permission of Apple; (h) to defects caused by normal wear and tear or otherwise due to the normal aging of the Apple Product, or if any serial number has been removed or defaced from the Apple Product.

DPM 2012 Failed to update permissions used in end-user recovery

Hello everyone,
I'm going to try the clearest way possible to describe the problem.
Our test server is Windows Server 2012 with DPM 2012 SP1 CU2 (BKP-SRV01) with a Remote SQL server 2012 (PBASC)
I protected a share folder on a DC on Windows Server 2008 R2 (PAD)
When I activate End-User Recovery I get a warning in the monitor tab that say this
Failed to update permissions used for end-user recovery on pad. Permissions update failed for the following reason: (ID 3123)
DPM is unable to enumerate contents in pad_PartageTest on the protected computer BKP-SRV01. Recycle Bin, System Volume Information folder, non-NTFS volumes, DFS links, CDs, Quorum Disk (for cluster) and other removable media cannot be protected. (ID 38 Details:
the end user recovery is working, but i do not know if it affect other things. I also get that message when i try to browse on the DPM server when creating a protection group
When I go see the DPM Server / File and Storage Services / Shares on Server Manager i get "Failed to retrieve folder permission" in the properties of the Protected server share.
I tried to search for almost 2 days without finding anything about that particular issue.
Is there a way (clean way) to fix the issue?
Thanks in advance for the help!

Closing for housekeeping.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This
posting is provided "AS IS" with no warranties, and confers no rights.
That's not very helpful. I've got the same issue :(
Comes up for servers where a protection group related to it errors out (recovery point failure usually).

End user permission ignored

Similar Messages

Maybe you are looking for