ERM role methodology configuration

Hi
For some reason the stages in the role methodology process in the configuration tab are not in the same order as those showen in the create role screen in the role management tab.
Does anyone have an idea how it can be fixed?
Thank you for your help

Hi...
First Role definition -> Defining Authorization ->Deriving roles -> Performing risk analysis -> approval -> Generating role*
we can use the arrow buttons to move the step up or down.
For creating the methodology
Login to ERM -> Configuration -> Methodology -> Process -> Create
Regards
Gangadhar

Similar Messages

  • ERM Role Methodology Process - Steps

    Hello Gurus,
    I am on SP17 and have uploaded relevant init files. Have also performed background job sync.
    When I create a role in Role Definition stage and save it, the role does not pass or promote to next step i.e. Role Authorization Stage. GRC saves the role properly.
    I have not defined any condition groups or custom fields. It is just plain role definition.
    Request your help on this.
    Thanks,
    SA

    Hi,
    Please, can you give more details for your configuration?
    I´m thinking that you don´t have ERM Workflow in CUP for workflow approval criteria. Do you have workflow configuration for ERM in CUP?
    Good luck!

  • Import Roles methodology @ ERM

    Hello all,
    We are facing some concerns regarding import roles methodology and would like to consult we you.
    The import roles methodology raised a concern since it is done partially by uploading data from an excel file (template by SAP).
    Our customer wants reassurance that this is a safe process and to know about other customers experience and results (how many problems they encounter? How fast is the process? What issues occur while uploading the roles to ERM? Related information etc.
    Could you advice?
    Thanks in advance
    Rothem

    Hello Rothem,
    1. Our customer wants reassurance that this is a safe process and to know about other customers experience and results (how many problems they encounter?
    The process is completely safe and even if you miss out on some of the role updates, you can still do specifically the ones you missed.
    2. How fast is the process?
    This is not generally a very time consuming tasks and provided your machine configuration is as per standards, this would not really be an area for concern at all. I mean, to my knowledge and experience I have not cme accross a situation where it took a lot of time and became a thing to worry about.
    3. What issues occur while uploading the roles to ERM? Related information etc.
    These I guess have already been mentioned by people in the above posts and are mostly of the similar nature, just as they are mentioning. Better to try first with a few of the Roles and then if it happens smoothly, you can upload the rest all in one go.
    Regards,
    Hersh.
    http://www.linkedin.com/in/hersh13
    Edited by: HERSH GUPTA on Jun 4, 2009 1:42 PM

  • Role Methodology Workaround

    Does anyone know a way for admins to get around a BRM methodology configured for business roles? I need to update the long description for hundreds of business roles in production and don’t want to send them all through the methodology / MSMP approval process. Normally I would just download and upload the roles using the template but long description isn’t available through the template.
    Does anyone know of a way to temporarily turn off the methodology make the changes and turn is back on? I know you can activate /deactivate it but that didn’t seem to be the correct solution.
    Any suggestions would be appreciated!

    Hi Kyle,
    role description you can update with Role Mass Maintenance function in GRC. Use Role Update function.
    Alternatively you can try CATT scripting directly in your backend.
    Regards,
    Alessandro

  • ERM - Workflow Approval Configuration in ERM and CUP

    Hi Experts,
    I'm in the midst of configuring the workflow approval for ERM and have some queries.
    I followed the post-installation guide part 1 for ERM on the workflow configuration and have sucessfully done the following:
    1. Verified that the "AE_init_append_data_RE.xml" has been uploaded in CUP with Append option
    2. Verified that request type "RE_ROLE_APPROVAL" with workflow type "RE" exists
    3. Verified that priority "RE_HIGH" with workflow type "RE" exists
    4. Created a workflow initiator for ERM called "ROLE_APPROVAL" in CUP -> Configuration -> Workflow -> Initiator (with the said details as per the post-installation guide)
    5. Created a CAD called "ERM_ROLE_APPROVER" for ERM in CUP -> Configuration -> Workflow -> Custom Approver Determinator (with the said details as per the post installation guide, filling in the necessary URI, uname/pw for admin with UME roles)
    6. Created TWO stages , one stage for the role owner called "ERM_ROLE_APPROV", and one stage for the internal control owner called "ERM_ROLE_APPRO2", both with workflow type "RE" and Approver Determinator "ERM_ROLE_APPROVER" which was created in step 5 earlier.
    7. Created a path for ERM Role Approval Workflow in CUP -> Configuration -> Workflow -> Path, with workflow type "RE", Number of Stages "2", Initiator "ROLE_APPROVER", Active "checked" and I put Stage 1 as "ERM_ROLE_APPROV" and stage 2 as "ERM_ROLE_APPRO2".
    8. Configured the Exit Web Service (followed the details as per the post-installation guide for ERM)
    As my role approval is pretty straight forward (i.e. based on business process attribute defined, with each role owner being responsible for their business process), I did the following:
    1. Create approval criteria "Role Approver for Business Process FI"
    2. For that criteria, I based it on attribute "Business Process"
    3. I clicked on "Assign Approvers" to define who is the approver (i.e. the respective role owner responsible for Process FI)
    4. I defined the condition for this criteria, Condition = AND, Attribute = Business Process, Value = FI
    My queries:
    1. Is the approval criteria which I created in ERM, referring to 1st stage or 2nd stage of the path in CUP?
    2. I'm assuming that for query 1, the approval criteria which I created is for 1st stage (i.e. ERM_ROLE_APPROV), where can I configure the 2nd level approval for the internal control owner (i.e. ERM_ROLE_APPRO2, in the path which I defined in CUP)?
    Thanks!

    Hi Baldwin,
    All workflow paths in CUP are triggered by an Initiator.  Once the request from ERM meets "Initiator" ("ROLE_APPROVAL") requirements in CUP, the request will go to the first stage defined in the respective path. Approvers defined in each stage of the path can approve request. Once the request is approved in CUP, approval information will be sent to ERM and then the role in ERM will be moved to the next stage.
    Best Regards,
    Sirish Gullapalli.

  • Synchronisation problem of  ERM roles with SAP BACKEND

    Hi ,
    In GRC could anyone please let me know what is OPEN bug regarding Sync ERM roles from backend and is it still a issue .
    Anyone experiencing this, I am using GRC ac v5. 3 and sp13 ,
    Thank You

    Hi  Folkvar,
    There might be specific issues but as general there are very few. I recommend you to reply with the exact details on the current setup, i.e., the role setup in your landscape (parent roles, derived roles etc) and other information such as your current setup etc., Incase if you have started sync'ing the roles, post the exact error message so that some expert can guide you towards a resolution.
    Best Regards,
    Raghu

  • ERM Role con't be deleted Automatically after rejecting the request in CUP

    Hi Experts,
    I am involving the GRC implimentation project and ERM component is succefully configured with post-installation activites and also configure the workflow(1-stage) in CUP for role approval.
    After initiating request, the request was sent to appropriate approver for approval process and approved/ Rejected by the approver.For first case(Request approved) everything is looks fine.
    but whenever the request is rejected (second case) by the approver, the role is still present in ERM and ABAP backend as well as.
    please suggest me, if the role is deleted in ABAP/ERM system after rejecting the request by Role Approver in CUP. or still present the role in systems.
    Regards,
    Arjuna.

    Hi Jes,
    We so have a feature called Password Self Service which is used by users to reset their password using CUP. Also if the password is locked by multiple failed attempt, CUP even activate this user.
    However in your case administrator will be locking the user or deactivating the password, so CUP will not allow users to unlock their users as it has been locked by administrator.
    So CUP can only unlock those users which were locked due to failed attempts etc.
    Regards,
    Shweta

  • ERM Role generation gives error

    Hi,
    All the fields are checked and the configuration is meeting the document guidelines for ERM. I am getting error while trying to generate the role from ERM and the message is " Cannot generate role Z:TB_TS_TEST1234567890987_S001  provide valid & 1& 2 in table & 3".
    Please let me know if somebody has faced this problem and has been fixed.
    Thanks,
    Abhimanu

    Hi,
    Do you uploaded the static text and Authorization Objects in GRC from backend system?
    If not then download them from your ECC system using  program /VIRSA/ZCC_DOWNLOAD_DESC and /VIRSA/ZCC_DOWNLOAD_SAPOBJ by executing se38 tcode and upload it in RAR.
    Then try to generate the role.
    Thanks,
    Sudip.

  • Problem in ERM Role Creation in Authorisation Data

    Hi,
    While creating ROLE in ERM, in Authorisation Data - i selected a
    Functions say PR01-Vendor Master Maintanance,next when i click on Trasactions tab no trasactions are displayed to select,
    If i added transaction manually also not adding to the trasactions list.
    We are using java version SP13 with latest patch level.
    I configured 3-background jobs:
    1. Org Value Sync
    2. Transaction/Object/Field Sync
    3. Activity Value Sync
    Please fing Log files attached.
    Please provide your suggestions ASAP.
    Thanks.

    Log file when Transaction sync Backgroud job scheduled:
    System Logs  
         Log Folder : /LogsRE/    
    Log File Name : logger.log
                   2011-04-12 08:06:27,074 [Thread-1628] DEBUG TxnObj List of size 0 completed in 0 milli seconds
    2011-04-12 08:06:30,576 [SAPEngine_Application_Thread[impl:3]_5] ERROR com.virsa.service.messaging.MessageNotFoundException: Code: '4720', Locale: 'en'
    java.lang.Throwable: Code: '4720', Locale: 'en'
         at com.virsa.service.messaging.MessageFormatter.getFormattedMessage(MessageFormatter.java:58)
         at com.virsa.service.messaging.MessageFormatter.getFormattedMessage(MessageFormatter.java:50)
         at com.virsa.re.backgroundjobs.MessageHelper.getFormattedMessage(MessageHelper.java:74)
         at com.virsa.re.configuration.action.SchedulerAction.convertDTOToPO(SchedulerAction.java:1638)
         at com.virsa.re.configuration.action.SchedulerAction.getJobHistory(SchedulerAction.java:1615)
         at com.virsa.re.configuration.action.SchedulerAction.execute(SchedulerAction.java:122)
         at com.virsa.framework.NavigationEngine.execute(NavigationEngine.java:273)
         at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:230)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)
         at com.virsa.comp.history.filter.HistoryFilter.doFilter(HistoryFilter.java:43)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:384)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1060)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(AccessController.java:219)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
    2011-04-12 08:06:30,577 [Thread-1628] DEBUG com.virsa.re.dao.jdbc.AuthTxnObjBkgDAO : saveTrObjAssoc :   : OUT of the method
    2011-04-12 08:06:30,577 [Thread-1628] DEBUG com.virsa.re.service.sap.dao.AuthDataBkgDAO : addTxnObjInfoFromTable :   : OUT of the method
    2011-04-12 08:06:30,577 [SAPEngine_Application_Thread[impl:3]_5] ERROR com.virsa.service.messaging.MessageNotFoundException: Code: '4712', Locale: 'en'
    java.lang.Throwable: Code: '4712', Locale: 'en'
         at com.virsa.service.messaging.MessageFormatter.getFormattedMessage(MessageFormatter.java:58)
         at com.virsa.service.messaging.MessageFormatter.getFormattedMessage(MessageFormatter.java:50)
         at com.virsa.re.backgroundjobs.MessageHelper.getFormattedMessage(MessageHelper.java:74)
         at com.virsa.re.configuration.action.SchedulerAction.convertDTOToPO(SchedulerAction.java:1638)
         at com.virsa.re.configuration.action.SchedulerAction.getJobHistory(SchedulerAction.java:1615)
         at com.virsa.re.configuration.action.SchedulerAction.execute(SchedulerAction.java:122)
         at com.virsa.framework.NavigationEngine.execute(NavigationEngine.java:273)
         at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:230)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)
         at com.virsa.comp.history.filter.HistoryFilter.doFilter(HistoryFilter.java:43)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:384)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1060)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(AccessController.java:219)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
    2011-04-12 08:06:30,577 [Thread-1628] DEBUG com.virsa.re.service.sap.dao.AuthDataBkgDAO : syncTxnObjects :   : OUT of the method
    2011-04-12 08:06:30,582 [Thread-1628] DEBUG com.virsa.re.service.sap.dao.AuthDataBkgDAO : syncTxnObjects :   : OUT of the method []
    2011-04-12 08:06:30,583 [Thread-1628] DEBUG com.virsa.re.service.sap.dao.AuthDataBkgDAO : syncTxnObjects :   : INTO the method
    2011-04-12 08:06:30,583 [SAPEngine_Application_Thread[impl:3]_5] DEBUG  bkgJobsList [[email protected]4a83[jobId=12,lastModifiedDate=Tue Apr 12 07:52:22 PDT 2011,statusId=0,statusDesc=Ready,message=0301], [email protected]6d17[jobId=12,lastModifiedDate=Tue Apr 12 07:53:26 PDT 2011,statusId=1,statusDesc=Running,message=0302], [email protected]6d75[jobId=12,lastModifiedDate=Tue Apr 12 07:53:26 PDT 2011,statusId=1,statusDesc=Running,message=4709#_!CONNECTOR#_!D15#_!LANGUAGE#_!Czech], [email protected]6de7[jobId=12,lastModifiedDate=Tue Apr 12 07:53:32 PDT 2011,statusId=3,statusDesc=Completed,message=4716#_!CONNECTOR#_!D15#_!LANGUAGE#_!Czech], [email protected]6e5b[jobId=12,lastModifiedDate=Tue Apr 12 07:53:32 PDT 2011,statusId=1,statusDesc=Running,message=4709#_!CONNECTOR#_!D15#_!LANGUAGE#_!Danish], [email protected]6ecd[jobId=12,lastModifiedDate=Tue Apr 12 07:53:38 PDT 2011,statusId=3,statusDesc=Completed,message=4716#_!CONNECTOR#_!D15#_!LANGUAGE#_!Danish], [email protected]6f41[jobId=12,lastModifiedDate=Tue Apr 12 07:53:38 PDT 2011,statusId=1,statusDesc=Running,message=4709#_!CONNECTOR#_!D15#_!LANGUAGE#_!German], [email protected]6fb3[jobId=12,lastModifiedDate=Tue Apr 12 07:53:45 PDT 2011,statusId=3,statusDesc=Completed,message=4716#_!CONNECTOR#_!D15#_!LANGUAGE#_!German], [email protected]7027[jobId=12,lastModifiedDate=Tue Apr 12 07:53:45 PDT 2011,statusId=1,statusDesc=Running,message=4709#_!CONNECTOR#_!D15#_!LANGUAGE#_!English], [email protected]7099[jobId=12,lastModifiedDate=Tue Apr 12 07:53:51 PDT 2011,statusId=3,statusDesc=Completed,message=4716#_!CONNECTOR#_!D15#_!LANGUAGE#_!English], [email protected]710d[jobId=12,lastModifiedDate=Tue Apr 12 07:53:51 PDT 2011,statusId=1,statusDesc=Running,message=4709#_!CONNECTOR#_!D15#_!LANGUAGE#_!Spanish], [email protected]7192[jobId=12,lastModifiedDate=Tue Apr 12 07:53:58 PDT 2011,statusId=3,statusDesc=Completed,message=4716#_!CONNECTOR#_!D15#_!LANGUAGE#_!Spanish], [email protected]7206[jobId=12,lastModifiedDate=Tue Apr 12 07:53:58 PDT 2011,statusId=1,statusDesc=Running,message=4709#_!CONNECTOR#_!D15#_!LANGUAGE#_!Finnish], [email protected]7278[jobId=12,lastModifiedDate=Tue Apr 12 07:54:05 PDT 2011,statusId=3,statusDesc=Completed,message=4716#_!CONNECTOR#_!D15#_!LANGUAGE#_!Finnish],

  • Best Practice of using ERM (Role Expert) in Landscape

    Hello,
    Can anyone tell me what is the best practice (choice) of using ERM in the SAP landscape?
    1. Creating a role in DEV system using ERM and using SAP standard transport process to transport role to QAS and PRD systems.
    OR
    2. Creating a role in all systems in ladscape (DEV, QAS and PRD).
    Please share if you have any best practice implementation scenarios.
    Appreciate for the help.
    Thanks
    Harry.

    Harry,
       The best practice is to follow Option 1. You should never directly create a role in Prod system. This is what SAP recommends as well.
    Alpesh

  • ERM: "Role not saved" ?

    Hi All, I've recently imported roles to ERM (SP11) and I've generated the role on the backend successfully. However, if I try to then change the role I'm unable to save the changes for the imported role. Instead a red error message is issued: "X Role not saved."
    This problem appears to only occur on imported roles, but not on new roles created in ERM. Has anyone experienced this problem?  Thanks.
    -Dylan

    Hello Satyabrat,
    Thank for posting the OSS Note. I followed the instructions but still have a problem relating to those specific roles. In the meantime, I've tested the same procedure against another set of uploaded roles from another system, and these roles seem to work well. I'll delete all my roles and reload them once again (we are not yet productive, but nearly there).
    I've also noticed that SP12 is a major SP with many changes, we'll also implement SP12 and the latest RTAs before I re-download and import the roles.
    Best Regards,
    Dylan

  • GRC-AC 5.3sp14, ERM, Role Generation

    We updated our GRC-AC 5.3 from sp12 to sp14 and now we cannot generate roles anymore. When we try to do it, we get the following error: "Failure : Field AGR_1252 not a member of TABLES".
    Does any one know how can we solve it?
    The backends were also updated with sp14 and the post installation procedures (import xml, run sync jobs) were done. Role generation was working well before sp14.
    Thanks,
    Marcelo

    Hi Marcelo,
    I managed to solve the problem.
    Check SNOTE 1352498  and ensure that you have the right levels of SP. For GRC AC 5.3 SP14 you need VIRSANH SP15 and VIRSAHR SP13.
    After the upgrade check in the Daemon Manager that the jobs and webservices are running.
    You will now be able to generate the roles in ERM.
    Regards,
    Pedro.

  • ERM Role Export with multiple languages

    Hi All,
    I have an issues where role download program /VIRSA/RE_DNLDROLES exports the roles with all text languages included (if the role was maintained in multiple languages).
    Then when I mass import the roles into ERM (AC 5.3 SP10), the upload program gives an "unknown error." After several hours of testing I figured out that that eliminating all but one of the multiple role language texts in main role file will allow the roles to be uploaded sucessfully.
    It seems that the function module /VIRSA/RE_BAPI_DOWNLOAD_ROLES should be changed to include a language parameter.
    Anybody ever have this problem?
    Thanks, Dylan

    Hi All,
    I found a workaround for this issue, I'm posting it for posterity then will close this post within a couple of days. I would appreciate to know if anyone has run into this issue too, it can't just be me?!
    First, the download of the main role text file from /VIRSA/RE_DNLDROLES stores the file as ANSI text type. At least that is how my Windows PC opens it. IF the role was maintained in mulitple languages with special language characters like ü, ô, ê, é, è, à, ò, ä, ö, then GRC AC 5.3 SP10 ERM gives me an "unknown error" when trying to do the mass import. To fix this issue, simply save the file as text type "UTF-8" or anything but ANSI. The ANSI seems to work fine for plain english.
    Second, roles with multiple language versions get all the languages squished together in the long description. I had one role with a Japanese, English, German, French and Italian long description BUT each maintained in it's own language. During the upload, all were imported into ERM and grouped together in one ugly text.
    I fixed this (although not ideally) by modifying Function Module /VIRSA/RE_BAPI_DOWNLOAD_ROLES used during the download:
    The code change is as follows:
        SELECT * FROM AGR_TEXTS APPENDING TABLE i_agR_TEXTS WHERE AGR_NAME
                                                            "#EC CI_GENBUFF
    *{   REPLACE        SIDKxxx
          in r_agr_name.
           in r_agr_name
           and spras eq 'E'.   "download only English
    *}   REPLACE
    Then, the 1000+ roles uploaded successfully without issues.
    I realized after that OSS Note 1260773 covers explains this similarly.
    -Dylan

  • ERM role generation

    Hi all,
    i have GRC 5.2 installed. Did the post installation steps. In ERM when i try to create a role without any conflicting tcodes the role is getting generated, but when i include any  2 tcodes risk is showing up, i have mitigated the risk, when generating the role it is giving the below error.  Please help me out as i am a beginner.
    2009-12-22 00:50:59,140 [SAPEngine_Application_Thread[impl:3]_29] ERROR No intenationalized value found for key : FrontPageDesc20
    2009-12-22 00:51:05,250 [SAPEngine_Application_Thread[impl:3]_33] ERROR No intenationalized value found for key : FrontPageDesc20
    2009-12-22 00:53:13,546 [Thread-139] ERROR java.lang.NullPointerException
    2009-12-22 00:54:48,640 [SAPEngine_Application_Thread[impl:3]_28] ERROR com.virsa.re.role.actions.GenerateRoleAction
    java.lang.Throwable:

    Hi Zaheer,
          i am not getting any abap dump in the backend. In ERM the sysltem logs is as follows:
    2009-12-22 18:14:01,875 [SAPEngine_Application_Thread[impl:3]_6] ERROR  User :   not found to get full name
    2009-12-22 18:14:14,656 [SAPEngine_Application_Thread[impl:3]_6] ERROR com.sap.security.api.NoSuchUserAccountException: USER_AUTH_FAILED: User account for logonid "?" not found!
    java.lang.Throwable: com.sap.security.api.NoSuchUserAccountException: USER_AUTH_FAILED: User account for logonid "?" not found!
         at com.virsa.service.umi.ume.UMESearchUser.getUserById(UMESearchUser.java:135)
         at com.virsa.re.bo.impl.SearchUserBO.getUserById(SearchUserBO.java:96)
         at com.virsa.re.cache.RECacheUtil.getUser(RECacheUtil.java:2237)
         at com.virsa.re.cache.RECacheUtil.getUserFullName(RECacheUtil.java:2209)
         at com.virsa.re.cache.RECacheUtil.getUserFullNameWithUserId(RECacheUtil.java:2261)
         at com.virsa.re.role.actions.RoleActionHelper.convertRoleApproverDtoToRoleApproverPo(RoleActionHelper.java:198)
         at com.virsa.re.role.actions.RoleAction.convertDTOToPO(RoleAction.java:1569)
         at com.virsa.re.role.actions.RoleAction.getRoleFromDB(RoleAction.java:1024)
         at com.virsa.re.role.actions.RoleAction.pageLoadForEdit(RoleAction.java:805)
         at com.virsa.re.role.actions.RoleAction.execute(RoleAction.java:107)
         at com.virsa.framework.NavigationEngine.execute(NavigationEngine.java:265)
         at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:230)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)
         at com.virsa.comp.history.filter.HistoryFilter.doFilter(HistoryFilter.java:43)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:373)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
    2009-12-22 18:14:14,671 [SAPEngine_Application_Thread[impl:3]_6] ERROR  User : ?  not found to get full name
    2009-12-22 18:16:34,125 [Thread-120] ERROR java.lang.NullPointerException
    2009-12-22 18:25:19,781 [SAPEngine_Application_Thread[impl:3]_36] ERROR com.virsa.re.role.actions.GenerateRoleAction
    java.lang.Throwable:
         at com.virsa.utils.VLogger.logError(VLogger.java:453)
         at com.virsa.re.bo.impl.GenerateRoleBO.generateRole(GenerateRoleBO.java:109)
         at com.virsa.re.role.actions.GenerateRoleAction.generateRole(GenerateRoleAction.java:224)
         at com.virsa.re.role.actions.GenerateRoleAction.execute(GenerateRoleAction.java:83)
         at com.virsa.framework.NavigationEngine.execute(NavigationEngine.java:265)
         at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:230)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
         at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:286)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
         at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:286)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)
         at com.virsa.comp.history.filter.HistoryFilter.doFilter(HistoryFilter.java:43)
         at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:373)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

  • ERM - Role Data Authorization

    Hello everyone
    Does ERM add authorization objects checked by transactions inserted  during role creation? Whenever I create a role with ERM it is generated in backend but with no authorization data. I presume It should include at least the S_TCODE object.
    Is this a task that should be done manually from ERM for each transaction added to a role?
    Thanks!
    Jaime

    Hi Jaime,
        ERM will offcourse add the authorization data when the transaction code is added to the role. For this to work, you need to make sure that you have run all the necessary background jobs (org value sync, activity value sync, tcode sync) successfully.
    Regards,
    Alpesh

Maybe you are looking for

  • Browsers freeze when i try to use webcam

    For the past week, everytime i try to use my webcam my browser freezes and I need to use task manager to close it.  I have the same problem on FIrefox 5.0 and IE 8.  I am using a dell laptop with windows 7. I use a logitech webcam.  Sometimes i am ab

  • Error saying "There was an error opening this document, the filename, directory name, or volume label syntax is correct"

    At my work we uses Macs to prepare PDF's and the create folders to archive and print them. Other areas of work use PC's to review these PDF. When they go to review these folders there is a small black dot which appears under random characters in the

  • SD Partner Function other than "Sold To, Ship To etc.."

    Hello BI fam, What is the best approach in extracting additional partner funtion in SD (ex: Contacts, External Buyer) with mostly created with "Z" other than your usual suspects (Ship to, Sold To etc.).  We are attempting to query reports with total

  • Display of Hierarchy Nodes in a report

    Hi Guru's, I have a query, after executing a particular hierarcy is displayed as below, Country,   USA        California        Newyork    United Kingdom         London         Manchester I want the Node USA as above, i just want UK to be displayed b

  • How to measure time delayed measurement

    Hi All: I am using TDS3064 scope to measure time delay betwwen two channels (using IVI driver complience package 2.2 for scope IVI driver). I look through drivers, but not able to find delayed measurement function. Is there any alternate way to measu