Issue in user creation

I am trying to create EBP users in my newly installed system.
When I try to create a user using the web, it does not create it and gives an error 'Error creating users'.
When I try to create users using transaction USERS_GEN using option to create users with sequential numbers, I get an error 'Action Cancelled'.
Any ideas?

In USERS_GEN for seq nos hope you are not first creating in SU01 & then assigning.
Also check whether the address is maintained for the org unit you are assigning these users
any dump in ST22
auth check using SU53
BR
Dinesh
Edited by: Dinesh Powale on May 14, 2008 5:34 AM

Similar Messages

Issue with User Creation in AS ABAP

Hi Experts,
We are implementing IDM 7.2 SP8. We have successfully performed initial load from CRM systems and also created Business Roles in CRM containing privelleges from CRM system. We can successfully assign roles from IDM to users in CRM for users loaded in IDM after initial load.
However, we are not able to create users in CRM backend system. Please find below details on the same:
Creating user from IDM UI and also assigning role:
1) We try to create user using the standard SAP Provisioning Task - "Display Identity". We maintain the user details like - first name, last name, validity etc and also the
2) We select the Business Role to be assigned to user and click on save. Workflow is triggered for the same and after approval from role owner, the correspodning tasks get executed.
3) The user gets created in IDM UI and also the desired role is assigned to user. However, no changes occur in backend CRM system.
4) Job logs and found that the job "SETABAPROLES&PROFILESFORUSER"(from standard sap framework) fails with error -
putNextEntry failed storing
Exception from Modify operation:com.sap.idm.ic.ToPassException: User 1 does not exist
Creating User from IDM UI without assigning any role:
1) We create a user using "Create Identity Task", maintain the attribute "ACCOUNT<repository name>" for the user, maintain the validity dates and click on save.
2) User is created in IDM UI but nothing happens in backend CRM system.
I followed thread 3331868 and understand that "Account Privilege PRIV:<Repository>:ONLY" should be assigned to user for creation in backend system. However, i am not able to find the privellege in IDM UI for assignment while user creation.
Kindly help me with steps on how to assign this privelege while creation of new user in IDM UI so that user can be created in backend system.
Thanks and regards,
Nitin

The repository:ONLY privilege should be created when you do the initial load if you use one of the SAP templates. If not, you can manually create it.
On the repository, set the master privilege to be SAP:repository:ONLY (note, it can be anything but changing it would make life hard for anyone following you).
Create a task called 'Assign Master Privilege' which has:
MSKEYVALUE %mskeyvalue%
MXREF_MX_PRIVILEGE PRIV:$rep.$Name:ONLY
Ensure that the repository is set to 'inherited'
Assign your new task as the 'No Master Task' on all repositories.
When a user gets a privilege in a back end system, it will check to see if they have an 'ONLY' priv for that repository. If not, it triggers the 'No Master Task' which assigns it and then it will assign the backend privilege.
Peter

Issues with user creation in Oracle 10g

ear All,
After logon to database with sysdba user i created one user by following query:
CREATE USER BI_USER
IDENTIFIED BY VALUES '0CE8A6E883EE4E19'
DEFAULT TABLESPACE BI_USER
TEMPORARY TABLESPACE TEMP1
PROFILE DEFAULT
ACCOUNT UNLOCK;
After creating this i have given following privledges to it:
GRANT RESOURCE TO BI_USER;
GRANT CONNECT TO BI_USER;
GRANT SCHEDULER_ADMIN TO BI_USER;
GRANT DBA TO BI_USER;
GRANT SELECT_CATALOG_ROLE TO BI_USER;
GRANT GLOBAL QUERY REWRITE TO BI_USER;
GRANT ANALYZE ANY TO BI_USER;
GRANT EXECUTE ANY PROCEDURE TO BI_USER;
GRANT CREATE SEQUENCE TO BI_USER;
GRANT CREATE SYNONYM TO BI_USER;
GRANT EXECUTE ANY PROGRAM TO BI_USER;
GRANT SELECT ANY DICTIONARY TO BI_USER;
GRANT DROP ANY VIEW TO BI_USER;
GRANT CREATE DIMENSION TO BI_USER;
GRANT DROP ANY TYPE TO BI_USER;
GRANT CREATE ANY DIRECTORY TO BI_USER;
GRANT ALTER ANY MATERIALIZED VIEW TO BI_USER;
GRANT CREATE MATERIALIZED VIEW TO BI_USER;
GRANT UNLIMITED TABLESPACE TO BI_USER;
BEGIN
SYS.DBMS_RULE_ADM.GRANT_SYSTEM_PRIVILEGE(
PRIVILEGE => SYS.DBMS_RULE_ADM.EXECUTE_ANY_RULE,
GRANTEE => 'BI_USER',
GRANT_OPTION => FALSE);
END;
GRANT EXECUTE ANY TYPE TO BI_USER;
GRANT CREATE ANY MATERIALIZED VIEW TO BI_USER;
GRANT CREATE TRIGGER TO BI_USER;
GRANT CREATE ANY TABLE TO BI_USER;
GRANT CREATE TABLE TO BI_USER;
BEGIN
SYS.DBMS_RULE_ADM.GRANT_SYSTEM_PRIVILEGE(
PRIVILEGE => SYS.DBMS_RULE_ADM.EXECUTE_ANY_RULE_SET,
GRANTEE => 'BI_USER',
GRANT_OPTION => FALSE);
END;
GRANT CREATE TYPE TO BI_USER;
GRANT DROP ANY INDEX TO BI_USER;
GRANT SELECT ANY TABLE TO BI_USER;
GRANT CREATE JOB TO BI_USER;
GRANT QUERY REWRITE TO BI_USER;
GRANT CREATE VIEW TO BI_USER;
GRANT CREATE SESSION TO BI_USER;
GRANT EXECUTE ANY CLASS TO BI_USER;
BEGIN
SYS.DBMS_RULE_ADM.GRANT_SYSTEM_PRIVILEGE(
PRIVILEGE => SYS.DBMS_RULE_ADM.EXECUTE_ANY_EVALUATION_CONTEXT,
GRANTEE => 'BI_USER',
GRANT_OPTION => FALSE);
END;
GRANT CREATE INDEXTYPE TO BI_USER;
GRANT CREATE DATABASE LINK TO BI_USER;
GRANT ALTER SESSION TO BI_USER;
GRANT DROP ANY DIRECTORY TO BI_USER;
GRANT CREATE PROCEDURE TO BI_USER;
GRANT DROP ANY SYNONYM TO BI_USER;
GRANT DROP ANY TABLE TO BI_USER;
Now following are the issues i am facing:
1). After all this when i logon to this user through toad it is successful but through SQL it says invalid username and password
2). Whenever i create a table it is created in SYS schema not in the user schema for creating it in user schema i have to right username.tablename also in select statement.
Can any body help me in this.

2). Whenever i create a table it is created in SYS schema not in the user schema for creating it in user schema i have to right username.tablename also in select statement.
<code>
sqlplus scott/tiger
Connected.
SQL> desc t
Name Null? Type
TESTCOL VARCHAR2(10)
SQL> select * from t;
TESTCOL
1
2
3 new
SQL> conn / as sysdba
Connected.
SQL> sho user
USER is "SYS"
SQL> select * from scott.t
2 ;
TESTCOL
1
2
3 new
SQL> create table scott.t_copy as select * from scott.t;
Table created.
SQL> conn scott/tiger
Connected.
SQL> select * from t_copy;
TESTCOL
1
2
3 new
<code>
1). After all this when i logon to this user through toad it is successful
but through SQL it says invalid username and password
<code>
$ echo $ORACLE_SID
orcl
$ tnsping orcl
TNS Ping Utility for Linux: Version 10.2.0.2.0 - Production on 27-AUG-2009 14:38:34
Copyright (c) 1997, 2005, Oracle. All rights reserved.
Used parameter files:
/home/oracle/oracle/product/10.2.0/db_1/network/admin/sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = localhost.localdomain)(PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = orcl)))
OK
$ sqlplus scott/tiger
SQL*Plus: Release 10.2.0.2.0 - Production on Thu Aug 27 14:38:42 2009
Copyright (c) 1982, 2005, Oracle. All Rights Reserved.
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production
With the Partitioning, OLAP and Data Mining options
SQL> sho user
USER is "SCOTT"
SQL> select * from t_copy;
TESTCOL
1
2
3 new
<code>
please tell the syntax how you connect through sqlplus

Automating Goods issue during Delivery creation

Hi all,
We have a requirement to automate the Goods issue creation for certain type of orders when the Delivery is getting created. The orders that need to be automatically Goods issued during delivery creation are identified based on certain plants. These plants are linked to certain output type and in the output type routine is the standard program RVADEK01 with one additonal code for automating the Goods Issue creation.
We have a custom table that holds the status of orders and there is a code in user exit userexit_save_document_prepare which changes the status of the order as closed when the goods issue is done.
But when the delivery is saved, in this case when an automatic goods issue needs to happen, when the flow reaches this user exit, the output type code dosenot get executed and the Goods issue is not done and so the custom table will not be updated with the closed status. So we are in need to findout a place where we can update the status of the order in that table.
The output type code is not executed even before the other user exit userexit_save_document. The output type code gets executed and goods issue is done after the this userexit_save_document when the COMMIT statement is executed in the subroutine BELEG_SICHEN_POST in the include FV50XF0B_BELEG_SICHERN.
I need help in finding out if any user exit or badi is called after this commit statement, so that I can add my code to close the status of the order in my custom table. Just after this commit the Goods issue happens and the VBFA table gets updated with the 'R' records for goods issue.
Please let me know if anyone has any idea on this. The ultimate goal is to find some place after the goods issue is done to update the status of the order as closed in the custom table we have.
Thanks,
Packia

Dear Siva,
As informed yesterday I changed the language from DE to EN, to match the other shipping points settings in table V_TVST, this did not bring the solution.
Please let me summarize, I am really desparate here:
This is only IM related, Not WM.
Picking lists are not printed for any Shipping Point from this warehouse, this is just a small subsidiary of my customer in Finland.
Issue is not Aut. PGI.
VP01SHP has not been configured for any shipping points, still there we do get the PR except for the new shipping point.
In the deliveries of correct processed shipping points I do not find any picking output type.
Item category in new shipping is equal to Item category in already existing shipping points, so no need to config here.
There is no picking block active.
PR creation happens once I enter the pick qty in the delivery in VL02N. This is the part that we need to have automated.
Can you please try to help me out?
Tnx & regards,
Chris

Need API for user creation

Dear All,
I need to use bulk user creation through API. Please advice which API i use to resolve this issue.
Thanks
Rehan

I need to use bulk user creation through API. Please advice which API i use to resolve this issue.FND_USER_PKG.CREATEUSER
FND_USER_PKG
https://forums.oracle.com/forums/search.jspa?threadID=&q=FND_USER_PKG&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
PACKAGE: APPS.FND_USER_PKG
http://etrm.oracle.com/pls/et1211d9/etrm_pnav.show_object?c_name=FND_USER_PKG&c_owner=APPS&c_type=PACKAGE
Thanks,
Hussein

Fits attribute on user id during user creation (Cont)

Hi Experts,
A little time ago , we posted some doubt regarding of how can we fits the attribute userID during user creation on User Interface.
The previous discussion was posted here:
"Fits attribute on user id during user creation"
Link abou our issue "scn.sap.com/thread/3532549"
As the Correct Answer:
Alternative 2, add a To IdentityStore pass as part of the task workflow where your logic is implemented in a jscript:
MSKEYVALUE=%MSKEYVALUE%
****AD_USER_ID=$FUNCTION.GENADUSERID(%MX_FIRSTNAME%!!%MX_LASTNAME%)$$
The script is running very well, but when we create a new employee on HR System (No SAP) this this script is not running just for this new user but for all other users already exitents on IDM. The script increase in Mass an not just for new user.
Does anyone know if this can be related with delta configuration, or this kind of validation ( create just for new employe placed on HR) needs to be done inside the script?
THank you very much.
Miguel

Hello Miguel,
is the "Create Identity"-task called by the HR-update-job?
The screenshot in the old thread just shows the three inputs. I guess, there are some more in the used task. Did you check, if the other lines have the dot as a prefix, so that these attributes are only filled (and therefor the script only runs), when the entry is created, but not updated?
If yes and it's missing for those two attributes, just add it.
Regards,
Steffi.

Emails not getting trigerrred in access request- request type = user creation

Hi ,
Can any one help me with solution why emails are not getting triggered in request->request type = user creation. I.e the L1 manager is not getting email when request is submitted.
The checked SU01 regarding WF_BATCH email(email is maintained) and the request can able to identify the manager,but the manager is not getting any emails. In audit log, it shows with whom is request is pending with.And it is showing nothing in SOST and SLG1.
The scenario is : In user creation, for a given user..if position is maintained,im submitting position based request using FM GRAC_IDM_ORG_ASSG_REQ_SERVICES else if position is not maintained, im submitting user based request using FM GRAC_IDM_USR_ACCS_REQ_SERVICES(in user based request, emails are getting triggered).
Thanks
KH

Hi,
Resolved the issue by appyling Note : 1899422
Thanks
KH

User Creation In portal Using NWDS

Hello Experts
Is there any way we can create a job in SAP Netweaver Portal using NWDS for the user creation.
Any pointers will be extremely helpful as I am new to this.
I am using SAP Netweaver 7.3 SP 09.
Thanks
Utsav Mishra

Hi,
You can use the sample code.You can create an Abstract Portal component in NWDS and write the required code inside of it.
Users can be created with the UserFactory newUser() method.
IUserMaint represents a modifiable user object. You must issue
        a commit() in order to actually create the user.
An associated account needs to be created for the User with
        newUserAccount() using the UniqueID of the new User.
Take care to delete the user if an error occurs (catch the
        appropriate exception and handle it).
// Create User
String uid = "testuser01";
IUserMaint newUser = UMFactory.getUserFactory().newUser(uid);
newUser.setFirstName("Test");
newUser.setLastName("User");
newUser.setEmail("[email protected]");
newUser.save();
newUser.commit();
try
// Create User Account
IUserAccount uacc = UMFactory.getUserAccountFactory().
newUserAccount(uid,newUser.getUniqueID());
uacc.setPassword("secret");
uacc.save();
uacc.commit();
// NOTE: productive passwords cannot be set if the
// account is created in a SAP System
// continue process by trying to set password flag…
// Now try to modify password change flag for the new user
try
IUserAccount uacc = UMFactory.getUserAccountFactory().
getMutableUserAccount(uacc.getUniqueID());
uacc.setPasswordChangeRequired(false);
uacc.save();
uacc.commit();
catch (UMException ex)
//trace warning: “Password is not productive and has to
// changed during the first logon”.
catch (UMException umex)
UMFactory.getUserFactory().deleteUser(newUser.getUniqueID());
//trace error: “User cannot be created because of an
// error which occurred during the creation of the
// corresponding account object”
You can refer to the below URL for abstract portal component
Creating an AbstractPortalComponent (SAP Library - Running an Enterprise Portal)
Please reply in case you have any queries.
Regards
Veera

OIM 11g , Ignore User Creation

Folks ,
I am facing a issue , hoping you guys could throw some pointers ..
I have a trusted recon set up via GTC DB connector . There is particular condition when i dont want the user to created in OIM though it will be pulled by GTC (Unfortunately i cant stop that).
So in nutshell, i want to ignore the OIM user creation when a particular reconciled attribute lets say firstName = ABC AND user is not already present in oim, then ignore the user creation ..
Any pointers how to achieve this ..
Thanks
Suren

Thanks Raghav for your response , but how ill this work .
So , when FirstName = ABC record will come , as per your recon rule .., it wont link to any existing user and it will land up in No Match Found status and as its trusted recon it will create the user .., which i dont want ..
I cant delete rest of the action rules , they are required for processing the updates etc ...
Please let me know if you need more info ..
Thanks
Suren

ESS/Mss user creation

Hello,
We are implementing ESS/MSS for our client.
Objects have been finished in Development and Quality.
Now we need to move things to production.
Now there is one doubt in my mind.
As per our client there will be around 100 SAP Users who will get SAP GUI installed on their machine.
But for ESS MSS all the employees of organization will be eligible.
Which will be around 500.
Now my doubt comes with Licensing issue.
How does SAP tackle such situation.
As a implementer of SAP do I have to bring some practice into consideration.
Does SAP charge for every licence they give to client at same cost !
All employees will not require SAP GUI on their machines. They will only access ESS/MSS.
We use same UME database for R/3 and Portal system.
Please clarify on my doubt.
Thank You

Thanks Siddharth..
As an implementer for ESS/MSS.... I have made separate roles in R/3.
For ESS:
Z_SAP_EMPLOYEE_ERP (Copy of Composite role....given by SAP for ESS)
For MSS:
A separate role in Portal.
And one role in R/3 with following authorization objects for ESS and MSS:
B_NOTIF    <OBJ> Follow-Up Functions for General Notifications
I_QMEL     <OBJ> PM/QM: Notification Types
PLOG       <OBJ> Personnel Planning
P_HAP_DOC <OBJ> Appraisal Systems: Appraisal
P_ORGIN    <OBJ> HR: Master Data
P_ORGINCON <OBJ> HR: Master Data with Context
P_PERNR    <OBJ> HR: Master Data - Personnel Number Check
S_BDS_DS   <OBJ> BC-SRV-KPR-BDS: Authorizations for Document Set
S_RFC      <OBJ> Authorization Check for RFC Access
S_SERVICE <OBJ> Check at Start of External Services
S_USER_GRP <OBJ> User Master Maintenance: User Groups
Now when Basis team will create a user for ESS.
They will give Z_SAP_EMPLOYEE_ERP role and Authorization role that we created....
other than this do I need to take care for anything else... in user creation process.....

Multiple user creation in R12 and migration of users

I would like to know how we can automate a process of user creation in R12, or is there a way to create multiple users in Ebiz with respective responsibilities.
Second case is, migration of users from one instance to another. The problem out here is selective users not all?
Regards

Pl search the forums for FND_USER package - you will find several hits that show how this package can be used in a programmatic fashion to bulk create new users and assign responsibilities. Examples are also available on My Oracle Support.
To migrate user, use FNDLOAD. See this doc - you will also find hits in these forums if you search.
376469.1 - Can FNDLOAD Migrate User Accounts Without Forcing Users To Change Their Passwords?
HTH
Srini

No active writeable datasource found for user creation, check your Persiste

HI SAP Guru's
Suddenly when I am login in Portal with J2EE_ADMIN or any user , I am getting error
You are not authorized to access this application; contact your system administrator
and when I am going to create user in identity management I am getting below error
Current user has user creation permissions in the UME, but cannot create users in the back-end system (data source). The original and possibly untranslated message was: "No active writeable datasource found for user creation, check your Persistence Configuration.".
I have searched all related treads in SDN but no success
Please help.
Thanks & Regards
Vinay Patel

Dear all,
I was searching the community because I had this same error and there was no answer of how it was fixed. So I'm sending how I fixed today in a customer environment.
1. Go to portal http://<portal>/webdynpro/dispatcher/sap.com/tcsecumewdumeadmin/UmeAdminApp
- select configuration
- folder "sap system based in abap"
- do the conection test
If the test fails, log on in client 001 and change user SAPJSF:
- assign role SAP_BC_JSF_COMMUNICATION (only this one) and one profile that has permission to RFC logon
- you can change the password too
STOP/START ABAP+JAVA
Go again to the portal above and test connection again. The tests should now be OK.
2. Go to portal http://<portal>/irj
- Log on with administrator user
Now you should be able to create an user.

Issue during automatic Creation of Work Order from Notification

Hi,
I have a issue during automatic Creation of Work Order from Notification.
BADI implemented: NOTIF_EVENT_POST
BAPI called in BADI: BAPI_ALM_ORDER_MAINTAIN
I am able to create Work Order successfully but after that i need to update notification header with created work order number.
But i am unable to update the same (VIQMEL-AUFNR).
Can anybody provide solution for the same!
Thanks,
Kumar.

Hi,
Any inputs on above posted issue!
Thanks in advance.
Thanks,
Kumar.

Issue in PO creation for Direct Material Procurement.

Hi Experts,
I am working with SRM 7.0 Classic Scenario.
I have no issues with SC creation for indirect materials with Account Assignment.
But when I select Order as Direct material in SC for any material with out account assignment on Approval of SC PO is created in SRM system as Extendended Classic Scenario even though I have not activated Extended classic scenario.
Kindly help me out in this issue how can I order as DIRECT MATERIAL WITH Classic scenario.
Regards,
B.N.Karthikeyan.

karthi
it is standard behavior,
but you can do one thing .
BBP_CREATE_BE_PO_NEW BADI - TRY . CLEAR THE ACCOUNT ASSIGNMENT .Thats all . check it up with technical resoucre.
but you have to decide by developemnt what are the materials are PO with account / without account assignment
br
muthu

New sap user creation

Hi All SAP experts,
My company has implemented 2 Systems SAP Landscape with one development and one production server which are running on R/3 Enterprise 4.7 (Kernel Release 6.20) with Microsoft SQL 2000 as database server.
I have the following questions regarding new sap user creation by using user copy function.
1.When I request to create new SAP User by using user copy function ,should I just create the user acct in DEV and transport it to PROD System? If yes, how could I do that?
2.When I request to create new SAP User by using user copy function, can I just create it on PROD System only? If yes, what is the impact?
3.When using User copy function to create new user acct, should I select all parts (like adress ,defaults,reference user, user groups.....) of the existing user to be cloned to new user acct?
Thanks.
Leon

Hi Leon,
Answer to your questions in their respective order:
1. You can create user in DEV and then make remote client copy to PRD system using scc9 t-code. Here you can choose user accounts and authorizations for the copy. ( Rem: Data will be overwritten in target system when copied).
You can also use client export/import(scc8/scc7)
But, When you do the client import from the exported files using STMS,you will have to select only one of the transport requests and then STMS automatically selects the other requests for you.
Then it will show you the different transport requests that you have created during your export, the client copy profile and the target system and client. The customizing and application data is deleted in the target client before copying for all profiles except SAP_USER. This is technically unavoidable (and hence the data will be overwritten).
So if you can afford overwritting of user data in target client , you can go with the above procedure.
2. Using user copy in su01, you can copy one user to another user only in that client and is confined to that system only. So yes, If you want 2 or more users to have same authorizations, profiles ,etc etc.. you can choose this in PROD system.
3. It depends.. If you want user to be in same group, then you can choose user groups. If you want them to have same authorizations , you can choose roles and profiles... If you want them to have same company address and others,... you can select address.. and so on.
Also below link provides required steps in case you choose local/ remote client copy:
http://www.sap-basis-abap.com/bc/client-copy-by-using-scc8-and-scc7.htm
Hope this helps...
Thanks,
Ajith
Edited by: Ajith Kamath on Oct 20, 2009 8:28 AM

Issue in user creation

Similar Messages

Maybe you are looking for