Error provisioning role

Hi all,
I am getting the following error while provisioning the roles in AE. I checked the configurations and connectors everything is working fine with all other system. Only with this particular system i have the problem in provisioning the things.
I believe the problem is more pertaining to BAPI and not to do with SAP GRC. Please guide me on this.
(Error: P20_100-INSPECT_P20_915-USER CREATE - Function template/VIRSA/BAPI_USER_CREATEcould not be retrieved from P20_100)
Regards,
Suma Devaraj

Hi,
Has the VIRSA RTA been installed on the client you are connecting to?
Regards

Similar Messages

Error while provisioning roles (SetABAPRole&ProfileForUser)

Hi Experts
While provisioning roles in IDM 7.2, I see this error in the Job logs:
Failed running function in string "$FUNCTION.sap_abap_getNameOfAssignedPendingPrivileges(mskey!!repname!!role!!true)$$". Marking entry as failed. Exception was: undefined: "sap_abap_convertToABAPValidFromDate" is not defined.
I am getting this error only if I provision the existing SAP users. Assigning any role to a new user works fine. Went through both the above mentioned scripts, but don't see any Problem there.
What am I missing here?
Best regards
Annapurna

Hi Annapurna,
I was just going through the setup in our landscape and noticed that we have only one script for Assign User Membership to ABAP which is "sap_abap_getNameOfAssignedPendingPrivileges"
As mentioned by Jai earlier, we have the same script as Jai.
Can you try by using the below script for "sap_abap_getNameOfAssignedPendingPrivileges" and delete the other two and try to execute?
Not sure, if this could work, but maybe can give a try.
Script below:
===============================================
// Main function: sap_abap_getNameOfAssignedPendingPrivileges
* Returns a list of all privileges with properties {validfrom, validto} of the
* passed user for the passed repository and the passed privilege type.
* It contains all already assigned privileges plus/minus the delta of the
* current pending added and/or removed privileges.
* Note: Needed by connectors that always send the complete list of privileges
* to the backend, e.g. ABAP, BusinessSuite, JAVA
* @param {Par} Format:
* MSKEY of user!!repository name!!privilege type<!!includeValidityProperty>
* e.g. 172645!!BQQ001!!PROFILE!!TRUE
* @return {String} List of Privilege (backend) names in format:
* if includeValidityProperty is defined as true, then
* {VALIDFROM=<date>!!VALIDTO=<date>}<priv>|{VALIDFROM=<date>!!VALIDTO=<date>}<priv>|{VALIDFROM=<date>!!VALIDTO=<date>}<priv>
* else
* <priv>|<priv>|<priv>
function sap_abap_getNameOfAssignedPendingPrivileges(Par) {
importClass(java.lang.StringBuffer);
// enable this flag (tracingEnabled) only for debugging purposes as this will impact the performance
var tracingEnabled = false;
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: is called with " + Par);
var parameters = Par.split("!!");
var mskey = parameters[0];
var repositoryName = parameters[1];
var privilegeType = parameters[2];
var addValidityProperty = false;
if (parameters.length > 3 && parameters[3] != null && parameters[3].toLowerCase() == "true") {
addValidityProperty = true;
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: mskey: " + mskey);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: repositoryName: " + repositoryName);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: privilegeType: " + privilegeType);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: addValidityProperty: " + addValidityProperty);
var nolock = "";
if("%$ddm.databasetype%" == 1) { //MS-SQL
nolock = "WITH (NOLOCK)";
if (tracingEnabled) {
sap_debug_logUserAssignments(mskey);
* - get only assignments (mcLinkType = 2)
* - get all assignments of current entry X (mcLinkState = 0, mcExecState = 1 & mcDisabled = 0)
* - and with assignments in state "pending add" (mcLinkState = 1 & mcExecState = 512 or 513,
mcDisabled can be 1 e.g. if the user gets reactivated)
* - assignments with mcExecState 2 (Rejected) and 4 (Failed) are not included. If a failed
* assignment gets retried, the state changes immediately to pending.
* - for specfified repository Y
* - and privilege type Z
* - add member task must have been running for the privilege (mcAddAudit IS NOT NULL)
-> no future assignments
-> no assignments for which an approval will be done but approval task is not yet running
* - no privileges for which an approval is needed/running
* mcValidateAddAudit < mcAddAudit <- approval is already done
* or mcValidateAddAudit IS NULL <- if no approval is necessary
* - no duplicate privilege names (-> SELECT DISTINCT) in case of contexts
var sql = "SELECT DISTINCT privilegename.mcMSKEYVALUE, assignment.mcValidFrom, assignment.mcValidTo \
FROM idmv_value_basic_all repositorynames " + nolock + " \
INNER JOIN idmv_value_basic_all privilegetype " + nolock + " ON privilegetype.mskey = repositorynames.mskey \
INNER JOIN idmv_entry_simple privilegename " + nolock + " ON privilegename.mcMSKEY = repositorynames.mskey \
INNER JOIN mxi_link assignment " + nolock + " ON assignment.mcOtherMskey = repositorynames.mskey \
WHERE assignment.mcThisMskey = " + mskey + " \
AND assignment.mcLinkType = 2 \
AND (\
(assignment.mcLinkState = 0 AND assignment.mcExecState = 1 AND assignment.mcDisabled = 0) \
OR (\
assignment.mcLinkState = 1 AND assignment.mcExecState IN (512,513) \
AND ( \
(assignment.mcAddAudit > assignment.mcValidateAddAudit) \
OR \
(assignment.mcAddAudit IS NOT NULL AND assignment.mcValidateAddAudit IS NULL) \
AND repositorynames.attrname = 'MX_REPOSITORYNAME' AND repositorynames.SearchValue = '" + repositoryName + "' \
AND privilegetype.attrname = 'MX_PRIVILEGE_TYPE' AND privilegetype.SearchValue = '" + privilegeType + "'";
//result looks like privMskeyValue!!privMskeyValue!!privMskeyValue
var result = uSelect(sql);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: SQL Query:\n" + sql);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: Result: " + result);
var allPrivsStringBuf = new StringBuffer();
var firstElement = true;
if (result != null && result != "") {
var resultArray = result.split("!!");
for (var i = 0; i < resultArray.length; i++) {
var columns = resultArray[i];
var columnArray = columns.split("|");
//privMskeyValue is like PRIV:<type>:<repository>:<privilegeName>
var privMskeyValue = columnArray[0];
var repTemp = privMskeyValue.split(":");
var repstring = repTemp[0] + ":" + repTemp[1] + ":" + repTemp[2] + ":";
var privName = uReplaceString(privMskeyValue, repstring, "");
if (!firstElement) {
allPrivsStringBuf.append("|");
if (addValidityProperty) {
var validfrom = columnArray[1];
var validto = columnArray[2];
allPrivsStringBuf.append("{VALIDFROM=");
allPrivsStringBuf.append(validfrom);
allPrivsStringBuf.append("!!VALIDTO=");
allPrivsStringBuf.append(validto);
allPrivsStringBuf.append("}");
allPrivsStringBuf.append(privName);
firstElement = false;
var allPrivs = String(allPrivsStringBuf); // must be casted explicitly to String
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: Calculated privileges for " + Par + " are: " + allPrivs);
return allPrivs;
* Prints out all assignments the user has (also all assignments in pending remove state etc.)
function sap_debug_logUserAssignments(mskey) {
var columns = "mcUniqueId, mcThisMSKEY, mcOtherMSKEY, mcAttrName, mcThisOcName, mcOtherOcName, mcThisMSKEYVALUE, mcOtherMSKEYVALUE, mcLinkState, mcAssignedDirect, mcAssignedInheritCount, mcExecState, mcExecStateHierarchy, mcChangeNumber, mcGroupGuid, mcLastAudit, mcAddedTime, mcModifyTime, mcValidateAddAudit, mcAddAudit, mcContextMSKEY, mcContextCategory, mcContextStr1, mcContextStr2, mcOrphan, mcSoDViolation, mcNotAllowedFor, mcUnsupportedContextType, mcMissingConditionalContext, mcDisabled, mcRequestID";
var debugSql = "SELECT " + columns + " FROM idmv_link_ext WHERE mcThisMskey = " + mskey + " ORDER BY mcUniqueId";
var debugResult = uSelect(debugSql);
//format output
debugResult = uReplaceString(debugResult, "!!", "\n");
debugResult = uReplaceString(debugResult, "\|", "\t");
columns = uReplaceString(columns, ", ", "\t");
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: Debug SQL Query:\n" + debugSql);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: Debug Result:\n" + columns + "\n" + debugResult);
Thanks & Regards,
V!

How to change the "Page Flow Error - Unsatisfied Role Restriction" page

When you try to access a page and are denied authorization to it, Weblogic automatically redirects you to a
"Page Flow Error - Unsatisfied Role Restriction" page, on the bottom of which tells you what roles you have to be in in order to access the resource. My question is how can I change this page to match the general look and feel of my application?

I know you asked this almost a month ago, so you may have already figured it out... but you just need to add a handler for com.bea.wlw.netui.pageflow.UnfulfilledRolesException. Something like this:
@jpf:catch type="com.bea.wlw.netui.pageflow.UnfulfilledRolesException" path="roles-error.jsp"
You can put it at the class level of a specific page flow, or at the class level of WEB-INF/src/Global.app, which will apply it to all page flows.
Hope this helps.
Rich

Srm User interface - change settings : Error in role assignment

Hi Gurus,
Users are facing issue when they are changing settings in the SRM user interface site .
Go to SRM user interface SIte --> Change my settings --> change date format or decimal format .
When they save it --> Gets an error - error in role assignment .
What can be the issue. It's same in Dev and qa .
Waiting for your reply.
Points will be rewared .
Thanks
Munish Kumar

Hello Munish,
Laurent Burtaire wrote:
If you do a where-used for message number i gave you, you will find two message calls in methods from /SAPSRM/CL_PDO_MO_USER_ACCOUNT class.
Put a break-point to check if one of them is done. Problem cannot be due to missing authorization as there is no data in SU53 for concerned user.
Regards.
Laurent.

OIM 11.1.1.5 provisioning role based objectclasses and attributes

TL;DR You can't provision some attributes in our LDAP directory without the objectclass and I can't figure out the best way to inject the dynamic objectclasses into the create user process without the user being created already.
Some background:
I have configured our oim 11.1.1.5 instance and LDAP connector to provision ODSEE. At another's recommendation, I put all possible LDAP attributes in a single form regardless of which objectclass was needed for them. In ODSEE, sets of attributes are allowed through objectclasses for each 'Role'. ie. Student, Employee, Guest, etc objectclasses. I have all of the roles identified in OIM and can map them to an objectclass in LDAP
My question is, how can I provision role based objectclasses along with the common ones that are configured in the lookup so that when the associated attributes are provisioned, I don't get objectclass violations?
Can I append objectclasses to the list stored in the Configuration lookup in ldapUserObjectClass?
Should I create a child form containing the objectclasses and try to provision them?
Can/should I create a child form for each set of attributes by role? Common attribs in the LDAP_USR form and role based attribs in UD_LDAP_STU, UD_LDAP_EMP, UD_LDAP_GST, etc. Would prepop and the rest of the main form functions work the same?
Anything else I'm not thinking of? I am still a novice with some of these topics and may be way off base.
Any help will be greatly appreciated and thank you in advance

It is definitely doable if you use a custom LDAP connection implementation and just add objectclass update calls as needed as precursor tasks for the Update tasks.
Here is a small LDAP demo tool that you can adapt to do the update: http://iamreflections.blogspot.com/2010/08/manage-ad-with-jndi-demo-tool.html
There may be a smarter and more out of the box way to do it but this will work.
Martin

GPEngineException: Error filling role when invoking GP from within webdynpr

Hi
I am trying to invoke a guided procedure process (the example Time-Off-process) from within a webdynpro-application. For this, I used the code given here: http://help.sap.com/saphelp_nw2004s/helpdata/en/43/fcdf77fc6510b3e10000000a11466f/frameset.htm. The process can be invoked and starts running if I configure the roles in the design time environment such that the role type is set to "Initiator". However, if I change the role type to "Instantiation defined", I get the following error:
"Error filling role role.overseer of role type 3 during instantiation".
The stack trace shows that a GPEngineException has been thron:
com.sap.caf.eu.gp.exception.api.GPEngineException: Error filling role role.overseer of role type 3 during instantiation
     at com.sap.caf.eu.gp.process.rt.impl.GPRuntimeManager.checkRoleList(GPRuntimeManager.java:307)
     at com.sap.caf.eu.gp.process.rt.impl.GPRuntimeManager.startProcess(GPRuntimeManager.java:125)
In my code, I assign roles to users exactly as described in the above mentioned document. Here's the code snippet:
     //Assign users to each role:
     IGPRuntimeManager rtm = GPProcessFactory.getRuntimeManager();
     IGPProcessRoleInstanceList roles =
     rtm.createProcessRoleInstanceList();
     int rolenum = process.getRoleInfoCount();
     for (int i = 0; i < rolenum; i++) {
          String roleName = process.getRoleInfo(i).getRoleName();
          //create a new role instance by specifying the role's unique name
          IGPProcessRoleInstance roleInstance =
          roles.createProcessRoleInstance(roleName);
          //add the new role to the assignment list
          roles.addProcessRoleInstance(roleInstance);
What could be the problem here? I have searched all over the forum, but didn't find any hint. It might as well be that the error doesn't mean anything. I got a similar problem earlier which was solved by activating the process in the GP-Designtime. It would be great if anybody had an idea as to what I could do here. Anything could be a helpful suggestion!
Thanks very much!
Best regards
Bettina Hepp

This error is thrown if the role configuration in the guided procedure design time doesn't correspond to the role assignment during process instantiation:
1. If role should be assigned at process instantiation, tick "overwritable at runtime", set role to "Initiation defined" and do assign a user to the role when you invoke the process.
2. If role should be the process initiator, set role to "Initiator". In this case it is not possible to assign a user to this role when invoking the process.
3. There is a third role type: "Runtime defined", haven't tried that so far.

Error provisioning workspace

I am getting this error trying to create a new workspace. Unlike other postings this is the 2nd workspace I'm trying provision.
ORA-20001: error 9th ORA-24344: success with compilation error
Error provisioning SUDS UI.
Unlike other postings this is the 2nd workspace I'm trying provision. It's based on an existing schema and we used export/import from the test db to the beta db. The test db, of course was already provisioned in the test ApEx. Could this be the problem?
We want to demo the application tomorrow so I'm in a bit of a bind. Please help.
...elsa

Hi again Scott,
ApEx version is 3.0.1.00.08
DB version is 10.2.0.3.0
I am trying to create a new Workspace on my beta box into which I will import my ApEx application developed on my development box. There is already one Workspace in beta that I created a month ago and which went without a hitch. Here's the info from the Confirm Request screen followed by the results of hitting the Create button...
You have requested to provision a new Workspace.
Workspace Information:
Name      UNIVDB
Security Group ID      System Assigned
Description      State University Database System User Interface...
Administrator Information:
User Name      bog_elsa1_leslie
E-mail      [email protected]
Schema Information:
Reuse Existing Schema      Yes
Schema Name      UNIVDB
ORA-20001: error 9th ORA-24344: success with compilation error
Error provisioning UNIVDB.
Return to application.
>
I don't know what you're saying below:
It's based on an existing schema and we used
export/import from the test db to the beta db.
The test db, of course was already provisioned in
the test ApEx.
What I meant here is that the database structures were built in beta using datapump so tables for the demo application already existed when I first tried to provision the workspace. Since that first attempt I have dropped the demo tables and emptied the Recyclebin but I'm still getting the same error.
Getting desperate,
...elsa

ERM error: Field ROLE not a member of INPUT

Hi Experts,
After upgrade to 11.2 I'm having this error.
It appears at the Define Authorization stage after I chose transactions and clicking continue.
The connectors and JCos are working.
Please assist.
Thx,
Vit V
edit: All XMLs reloaded and system restarted.
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Current Module: |RE| Conversation: |cnvRole| Screen: |scrSearchTransaction|
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Module#RE#Conversation#cnvRole#Screen#scrManageAuthorization#Action#continueTCodeSearch#
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Changing Screen: FROM: scrSearchTransaction TO scrManageAuthorization
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.framework.Context : clearScreenRep :   : 6 entries cleared from screen repositiory
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Handler found:class com.virsa.re.role.actions.AuthAuthorizationDataAction
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG SAPConnectorDAO.java@365:com.virsa.comp.connectors.dao.jdbc.SAPConnectorDAO.findByConnectorName()connectorId: 5; lngId: 1
2010-04-20 11:59:05,590 [SAPEngine_Application_Thread[impl:3]_39] DEBUG SAPConnectorDAO.java@365:com.virsa.comp.connectors.dao.jdbc.SAPConnectorDAO.findByConnectorName()connectorId: 5; lngId: 1
2010-04-20 11:59:05,590 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.service.sap.SAPConnectorHelper : getClientFromSLD :   : INTO the method SapConnectorDTO :com.virsa.service.sap.dto.SapConnectorDTO@3e0a2020[conClass=,system=COD200,appId=COD200,host=consit-sap,systemNo=00,client=200,userId=codcom,SystemLang=EN,sysId=cod,messageServerGrp=default,messageServerHost=consit-sap,password=xxxxx,type=ECC600,userName=,description=COD200,isSLD=true,isActive=true,isHRSystem=false]
2010-04-20 11:59:05,590 [SAPEngine_Application_Thread[impl:3]_39] ERROR Field ROLE not a member of INPUT
java.lang.Throwable: Field ROLE not a member of INPUT
     at com.sap.mw.jco.JCO$MetaData.indexOf(JCO.java:9534)
     at com.sap.mw.jco.JCO$Record.setValue(JCO.java:14923)
Edited by: Vit Vesely on Apr 20, 2010 12:10 PM

Hi guys,
The problem is finally resolved.
1. Implement SNOTE 1441463
2. Implement SNOTE 1443612
3. Register key for object /VIRSA/RE_OBJ_INFO
4. In SE03 >> Administration >> Set System Change Option. Change /VIRSA/ to modifiable
5. In Se11 open data type /VIRSA/RE_OBJ_INFO in change mode with the key from p. 3
6. Edit structure according to Note 1452772. Save and activate.
7. Implement SNOTE 1452772
8. Restart grc~reear (or the server)
...or wait for VIRSANH patch 12
Hopefully it will work for you aswell.
Kind Regards,
Vit

ERROR - NetFx3 role processing with DISM.exe failed, rc = -2146498529_ZTIOSRole

Hello,
when installing the .net framework 3.0 ROLE on Windows 8 Enterprise, the installation stops with error :
ERROR - NetFx3 role processing with DISM.exe failed, rc = -2146498529 ZTIOSRole 16-1-2013 17:17:49 0 (0x0000)
How to fix issue?

Hello Exact same error from me on MDT2012. I add that the connection to the MDT share has been done successfully and that the previous copy on the log seems to succeed, as:
Validating connection to \\x\y\Operating Systems\Windows 8 Enterprise x86   ZTIOSRole   30.01.2013 12:53:09   0 (0x0000)
Already connected to server x as that is where this script is running from.   ZTIOSRole   30.01.2013 12:53:09   0 (0x0000)
Copying source files locally from \\x\Build_Capture_EBUV5$\Operating Systems\Windows 8 Enterprise x86\sources\sxs   ZTIOSRole   30.01.2013 12:53:09   0 (0x0000)
About to execute command: cmd.exe /c C:\windows\system32\DISM.exe /Online /Enable-Feature /FeatureName:"NetFx3" /Source:"C:\MININT\sources\X86" /LimitAccess /All /NoRestart /logpath:C:\MININT\SMSOSD\OSDLOGS\ZTIOSRole_Dism.log >> C:\MININT\SMSOSD\OSDLOGS\ZTIOSRole_DismConsole.log
ZTIOSRole   30.01.2013 12:54:29   0 (0x0000)
ERROR - NetFx3 role processing with DISM.exe failed, rc = -2146498529   ZTIOSRole   30.01.2013 12:55:18   0 (0x0000)
Property InstalledRoles001 is now = NETFX3   ZTIOSRole   30.01.2013 12:55:18   0 (0x0000)

Error Provisioning the Federated roles from CUP to enterprise portal

Hi Gurus,
Need help. I am trying to provision the roles to enterprise portal using GRC CUP. I have created the connectors and field mapping and the connection is successful. We have a enterprise portal with producer consumer relation ship. The Enterprise portal acts as consumer for the BI portal. The BI portal Roles are federated to Enterprise portal and i get an error "noSuchIdentifier" when I try to provision the federated BI Portal role on the Enterprise portal. I can successfully provision the local portal roles and UME roles on the enterprise portal. I get the error only when trying to provision the roles which are from BI portal.
Appreciate any help, in this regards.
Thanks,
Pavan

Hi Alma,
This is one of the security issue.We had faced it sometime back.We searched some CSN's and found a solution.
Go to Service Market palce and download the latest Cryptographic Tool kit (Service Market place---->software downloads)
You will get a sca/sda something like tc/iaik./security(something like this)
Deploy this on to your instance using your SDM.
After that,Restart the Portal patching.It will go fine.
reward points if helpful................

OIM 9.1.0.2 ORA-0936 encountered when provisioning roles

I've configured an Access Policy that provisions users without requiring approval to a DB through the DB connector. It also provisions them with roles: CONNECT and DBA.
The latter was achieved by making Role provisioning dependent upon User creation completion in the Access Policy. The Access Policy is also where the roles are specified.
The user is created and role provisioning fires OK, but gets rejected.
The relevant section in the log looks like this:
ERROR RMICallHandler-266 XELLERATE.DATABASE - select UD_DB_ORA_P_PRIVILEGE from UD_DB_ORA_P where UD_DB_ORA_P_KEY =
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:138)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
<snip>
     at java.lang.reflect.Method.invoke(Method.java:585)
     at com.evermind.server.rmi.RmiMethodCall.run(RmiMethodCall.java:53)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
ERROR RMICallHandler-266 XELLERATE.DATABASE - Class/Method: tcDataBase/readPartialStatement encounter some problems: ORA-00936: missing expression
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:138)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
     at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:113)
     <snip>
     at com.evermind.server.rmi.RmiMethodCall.run(RmiMethodCall.java:53)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem entered.
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: event - Value: adpDBADDPRIVILEGE
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: New Status - Value: R
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: SchData - Value: Data Access Error
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: Reason - Value: Exception com.thortech.xl.dataaccess.tcDataSetException: Data Access Error was thrown in adapter "DB Add Privilege". The Adapter Response was "Data Access Error"
There is an article about this on Oracle support, which I think is relevant, it states:
CAUSE
The error is caused by the fact that the rule is based on the values of the process form which are not yet commited to the database.
The usage of the process form will be avoided when creating rules for prepopulate adapters.
SOLUTION
Create a rule based on the "Request Target Information" which is reffering attributes of the OIM target user which has to be provisioned.
Suppose an access policy is used and this is based on a specific autogroup membership, the same rule can be used when creating the rule for the prepopulate adapter.
Unfortunately, this is greek to me.
Can anyone explain how I can resolve this problem with the role provisioning?
Many thanks,
2Hugh
Edited by: 2hughg on 08-Mar-2011 09:19

I had a privilege provisioning task set up as well, when I removed that, the error condition went away.
2hugh

Problem in provisioning role to a particular system urgen

Hi all,
I am getting the following error while provisioning the roles in AE. I checked the configurations and connectors everything is working fine with all other system. Only with this particular system i have the problem in provisioning the things.
I believe the problem is more pertaining to BAPI and not to do with SAP GRC. Please guide me on this.
Error: Hi all,
I am getting the following error while provisioning the roles in AE. I checked the configurations and connectors everything is working fine with all other system. Only with this particular system i have the problem in provisioning the things.
I believe the problem is more pertaining to BAPI and not to do with SAP GRC. Please guide me on this.
Error: P20_100-INSPECT_P20_915-USER CREATE - Function template/VIRSA/BAPI_USER_CREATEcould not be retrieved from P20_100
Regards,
Suma Devaraj

Hi Suma,
Did you check that VIRSANH/VIRSAHR BAPI are correctly installed on relevant back-ends ? Moreover, if using CUA to provision users, BAPI should be installed not only on the system hosting the CUA, but on every client system (eg. ECC, SRM, BI, ...).
You also may verify in SPAM transaction that you installed correct BAPI depending on your basis install (640, 700, ...) and on your GRC AC version (5.1, 5.2, ...). For example, if you are installing AC 5.2 on a BASIS700 system, corresponding package should be VIRSANH520_700 and/or VIRSAHR520_700. You may find more detailed information in "GRC Access Control ABAP install guide".
Best regards,
JC

ERM ERROR GENERATING ROLE

Hi
I am creating a role and go through all the steps of saving role defination, authorisation, run risk violations, approval and they all turn green but when I run the generate run to have the role created in the backend it ask me for the UME Password and accepts it but instead of generating the role in the backend system it replies with an error message unable to interpret * as a number. In my authorisation I do not have any Star value.
Please help

Hi Bheki ,
Check all these points....
1-Make sure UME userid and SAP Backed userid and Password should be same.
Login into RE with UME userid and password ,before clicking on the genrate button check that same userid and password should be exist in that SAP system in which you are going to provision a new role.
In SAP system this common userid having the role of role creation.
2-Make sure at role defination stage you should not define * (star) character in the Role Name and Profile description field
Please send the screen shots of full scenario to me if its possible at email :- jagat underscore singh @ syntelinc dot com.
Regards,
Jagat

Server Manager error 0x80070422 - Roles and features are not accesible

Hi
I cannot view Roles and Features in Server Manager on my Server 2008 R2 box. The error is:
Unexpected error refreshing Server Manager: The service cannot be started, either because it is disbaled or because it has no enabled devices assicaited with it (Exception from HResult: 0x80070422)
I have looked at my services - but don't know what service to look for, everything seems to be in order.
After some investigation on the net, I understood that I need to setup the win readiness tool, I did and the output in CheckSur file is as follows
=================================
Checking System Update Readiness.
Binary Version 6.1.7601.21645
Package Version 12.0
2011-05-31 19:02
Checking Windows Servicing Packages
Checking Package Manifests and Catalogs
(f) CBS MUM Corrupt 0x00000000 servicing\Packages\Package_for_KB2296199_RTM~31bf3856ad364e35~amd64~~6.1.1.1.mum Expected file name Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7600.16385.mum does not match the actual
file name
(fix) CBS MUM Corrupt CBS File Replaced Package_for_KB2296199_RTM~31bf3856ad364e35~amd64~~6.1.1.1.mum from Cabinet: C:\Windows\CheckSur\v1.0\windows6.1-servicing-x64-apr29.cab.
(fix) CBS Paired File CBS File also Replaced Package_for_KB2296199_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat from Cabinet: C:\Windows\CheckSur\v1.0\windows6.1-servicing-x64-apr29.cab.
Checking Package Watchlist
Checking Component Watchlist
Checking Packages
Checking Component Store
Summary:
Seconds executed: 4058
Found 1 errors
Fixed 1 errors
CBS MUM Corrupt Total count: 1
Fixed: CBS MUM Corrupt. Total count: 1
Fixed: CBS Paired File. Total count: 1
Here again, it seems that everything is fine.
Thanks in advance for your help

Hi,
Please try to install Windows Server 2008 R2 Service Pack 1 directly and check the result. Service Pack 1 for Windows Server 2008 R2 includes all the
previous released Windows Updates and hotfixes.
If it does not work, you will need to copy these files from another working Windows Server 2008 R2 system to replace the corrupt ones.
Otherwise, you will need to perform an In-Place upgrade to repair the system.
Regards,
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Error while Role Upload

Hello,
We have Enterprise Portal connected to the Backend SRM System and while trying to do a Role Upload from SRM to Portal ,I get the following error as below:
com.sap.portal.pcd.rolemigration.RoleMigrationConnectionException: Connection Failed: Nested Exception. Physical connection was not initialized. - message at com.sap.portal.pcd.rolemigration.util.Connector.callFunction(System,en,userid,TWPN_GET_URL,SERVICE_TABLE,{ENABLE_LOGGING= , ROLENAME=<Rolename>OBJECT_ID=00000102}): Connection not available for system ''Connection Failed: Nested Exception. Physical connection was not initialized. at com.sap.portal.pcd.rolemigration.util.Connector.callFunction(Connector.java:114) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1328) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.doDependentObjects(RoleMigrationObject.java:4974) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4734) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4303) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1497) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:686) at com.sap.portal.pcd.rolemigration.RoleMigrationThread.run(RoleMigrationThread.java:525) Original exception: com.sapportals.connector.connection.ConnectionFailedException: Connection Failed: Nested Exception. Physical connection was not initialized. at com.sapportals.connectors.SAPCFConnector.SAPConnectorException.getNewConnectionFailedException(SAPConnectorException.java:107) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnectionFactory.createManagedConnection(SAPCFConnectorManagedConnectionFactory.java:133) at com.sap.engine.services.connector.jca.ConnectionHashSet.match(ConnectionHashSet.java:371) at com.sap.engine.services.connector.jca.ConnectionManagerImpl.allocateConnection(ConnectionManagerImpl.java:262) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorConnectionFactory.getConnectionEx(SAPCFConnectorConnectionFactory.java:156) at com.sap.portal.ivs.internalconnector.ConnectionProvider.getConnection(ConnectionProvider.java:295) at com.sap.portal.ivs.internalconnector.ConnectionProvider.getConnection(ConnectionProvider.java:256) at com.sapportals.portal.ivs.cg.ConnectorService.getConnection(ConnectorService.java:446) at com.sapportals.portal.ivs.cg.ConnectorService.getConnection(ConnectorService.java:84) at com.sap.portal.pcd.rolemigration.util.Connector.callFunction(Connector.java:79) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1328) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.doDependentObjects(RoleMigrationObject.java:4974) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4734) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4303) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1497) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:686) at com.sap.portal.pcd.rolemigration.RoleMigrationThread.run(RoleMigrationThread.java:525) Caused by: com.sapportals.connector.connection.ConnectionFailedException: Connection Failed: Nested Exception. Failed in creating the JCO Connection. at com.sapportals.connectors.SAPCFConnector.SAPConnectorException.getNewConnectionFailedException(SAPConnectorException.java:107) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnection.connectWithJCO(SAPCFConnectorManagedConnection.java:456) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnection.establishInitialConnection(SAPCFConnectorManagedConnection.java:204) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnection.init(SAPCFConnectorManagedConnection.java:183) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnectionFactory.createManagedConnection(SAPCFConnectorManagedConnectionFactory.java:129) ... 15 more Caused by: com.sap.mw.jco.JCO$Exception: (101) RFC_ERROR_PROGRAM: 'user' missing at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:518) at com.sap.mw.jco.MiddlewareJRfc$Client.connect(MiddlewareJRfc.java:1086) at com.sap.mw.jco.JCO$Client.connect(JCO.java:3296) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnection.connectWithJCO(SAPCFConnectorManagedConnection.java:429) ... 18 more
Any help would be highly Appreciated.
Thanks

Hi,
Please check the SRM system object connection in the SAP Portal. GO to system administration > system configuration > system landscape and search for SRM system object and test the connection. If connection test successful then try to upload the roles.
Hope it will helps
Best Regards
Arun Jaiswal

Error provisioning role

Similar Messages

Maybe you are looking for