Missing roles in CC 5.2

Hi Experts..!
We have CC 5.2 working... but lately the role sync (incremental) is deleting some roles.. when they actually in the system.
We want to be able to see all the backend's roles, what can we do to make this possible?
could you help us, pls.
Thank in advanced
This is an example of the job's log:
INFO: --- Data Extractor -
com.virsa.cc.dataextractor.bo.DataExtractorSAP@44e336f8
Jan 30, 2008 5:02:54 PM com.virsa.cc.xsys.bg.BatchRiskAnalysis getBAPIRoleData
INFO: -- Last Run Date is 2008-01-30
Jan 30, 2008 5:02:54 PM com.virsa.cc.xsys.bg.BatchRiskAnalysis getBAPIRoleData
INFO: -- Current Date is 2008-01-30
Jan 30, 2008 5:03:44 PM com.virsa.cc.xsys.bg.BatchRiskAnalysis insertBAPIRoleData
INFO: Gen Obj Returned returned from the BAPI 92
Jan 30, 2008 5:03:44 PM com.virsa.cscext.dao.CSCDAO populateGenObjRoleProfile
INFO: Update Z_FIAA_VISUALACTIVO_026 of RPDCLNT800
Jan 30, 2008 5:03:44 PM com.virsa.cscext.dao.CSCDAO populateGenObjRoleProfile
INFO: Update Z_FIAA_VISUALACTIVO_604 of RPDCLNT800
Jan 30, 2008 5:03:45 PM com.virsa.cscext.dao.CSCDAO populateGenObjRoleProfile
INFO: Update Z_FIAA_VISUALACTIVO_707 of RPDCLNT800
Jan 30, 2008 5:03:45 PM com.virsa.cscext.dao.CSCDAO populateGenObjRoleProfile
INFO: Update Z_MMIM_GENERREPORPT_CENT of RPDCLNT800
Jan 30, 2008 5:03:45 PM com.virsa.cscext.dao.CSCDAO populateGenObjRoleProfile
INFO: Delete P of RPDCLNT800
Jan 30, 2008 5:03:45 PM com.virsa.cscext.dao.CSCDAO deleteObjInOtherTables
INFO: Delete P from ALL tables
Jan 30, 2008 5:03:45 PM com.virsa.cscext.dao.CSCDAO populateGenObjRoleProfile
INFO: Delete SAP_BC_BMT_WFM_DEVELOPER of RPDCLNT800
Jan 30, 2008 5:03:45 PM com.virsa.cscext.dao.CSCDAO deleteObjInOtherTables

Lizeth-
You can try a Full Sync and only execute it on the Role level; our numbers are always off when we do the incremental sync, so that is why I always do a full sync...
Ankur

Similar Messages

Forums installation and missing roles

hello,
i've installed a portal with and users are from ABAP Source.
then i've added forums application.
all is fine, i've created my iviews from template.
the problem i'm facing is concerning the forum iview for assigning an initial forums system administrator.
the documentation say that this iviews must be assigned to a role with at leat one user with the following roles :
JiveAdminDefinitionRole
Administrators
but these roles doesn't exists in my portal!
my portal administrator has role SAP_J2EE_ADMIN, that's all
how to create those missing roles?
thanks in advance
best regards

Hi Olivier Ziller,
Appreciate if you can share your findings on the "missing of JiveAdminDefinitionRole" . Can you give me step by step solution.
Thank you.
Regards,
Naimah

Missing Role Grants after datapump

Hello OTN-Community,
I have a problem with datapump. I am using some include filters to get the relevant data exported. One of these filters inlcudes the ROLES of my database which starts with a certain expression.
After the export into another database these roles exists but all of the role grants and the grants to other users misses. The object grants are exported correctly.
What am I doing wrong?
The export script:
declare
/*some declare specification are not copyed*/
cursor curSchema is
select
distinct
t.Mdbn_Name Name
from
ProphetMaster.Dat_MdBn t
where
Upper(t.MDBN_Name) not in ('****', '***');
begin
-- Schemas festlegen
SchemaList := '''****'',''***''';
if ExportAllProphetUsers then
for recSchema in curSchema loop
      SchemaList := SchemaList||','''||recSchema.Name||'''';
end loop;
end if;
-- Dateigröße
FileSizeStr := to_char(MaxFileSize)||'M';
-- Verzeichnis
DirectoryName := 'PHT_PUMP_DIR';
execute immediate 'create or replace directory "'||DirectoryName||'" as '''|| PumpDir||'''';
-- JobName
JobName := 'PHT_EXPORT'||DateStr;
-- Filename
if not FilenameWithDateTime then
DateStr :='';
end if;
Filename := 'PHTDB'||DateStr||'_%U.DMP';
Logfilename := JobName||'.LOG';
-- Job festlegen und Ausführen
h1 := dbms_datapump.open (operation => 'EXPORT', job_mode => 'FULL', job_name => JobName, version => 'COMPATIBLE');
dbms_datapump.set_parallel(handle => h1, degree => ParallelExecutions);
dbms_datapump.add_file(handle => h1, filename => Logfilename, directory => DirectoryName, filetype => 3);
dbms_datapump.set_parameter(handle => h1, name => 'KEEP_MASTER', value => 0);
--10g
--dbms_datapump.add_file(handle => h1, filename => Filename, directory => DirectoryName, filesize => FileSizeStr, filetype => 1);
--11g
dbms_datapump.add_file(handle => h1, filename => Filename, directory => DirectoryName, filesize => FileSizeStr, filetype => 1, reusefile =>OverwriteFiles);
dbms_datapump.set_parameter(handle => h1, name => 'INCLUDE_METADATA', value => 1);
dbms_datapump.set_parameter(handle => h1, name => 'DATA_ACCESS_METHOD', value => 'AUTOMATIC');
-- Include Schemas
--dbms_datapump.metadata_filter(handle => h1, name => 'NAME_EXPR', value => 'IN('||SchemaList||')', object_type => 'DATABASE_EXPORT/SCHEMA');
dbms_datapump.metadata_filter(handle => h1, name => 'NAME_EXPR', value => 'IN('||SchemaList||')', object_type => 'DATABASE_EXPORT/SCHEMA');
dbms_datapump.metadata_filter(handle => h1, name => 'INCLUDE_PATH_EXPR', value => 'IN(''DATABASE_EXPORT/SCHEMA'')');
--Include Profiles
dbms_datapump.metadata_filter(handle => h1, name => 'NAME_EXPR', value => 'like ''PROFILE_%''', object_type => 'PROFILE');
dbms_datapump.metadata_filter(handle => h1, name => 'INCLUDE_PATH_EXPR', value => 'IN(''PROFILE'')');
--Include Roles
dbms_datapump.metadata_filter(handle => h1, name => 'NAME_EXPR', value => 'like ''***%''', object_type => 'ROLE');
dbms_datapump.metadata_filter(handle => h1, name => 'INCLUDE_PATH_EXPR', value => 'IN(''ROLE'')');
-- Größenabschätzung
dbms_datapump.set_parameter(handle => h1, name => 'ESTIMATE', value => 'BLOCKS');
--Start Job
dbms_output.put_line('Import Job started; Logfile: '|| LogFileName);
dbms_datapump.start_job(handle => h1, skip_current => 0, abort_step => 0);
-- Wait for ending and finishing job
dbms_datapump.wait_for_job(handle=>h1,job_state =>job_state);
dbms_output.put_line('Job has completed');
dbms_output.put_line('Final job state = ' || job_state);
dbms_datapump.detach(handle => h1);
The Import Script:
begin
dbms_output.Enable(buffer_size => null);
-- Verzeichnis
DirectoryName := 'PHT_PUMP_DIR';
execute immediate 'create or replace directory "'||DirectoryName||'" as '''|| PumpDir||'''';
-- JobName
JobName := 'PHT_IMPORT'|| to_char(sysdate,'_yyyy-MM-DD-HH24-MI');
--FileNames
Filename    := 'PHTDB'||FileNameDateStr||'_%U.DMP';
LogFilename := JobName||'.LOG';
h1 := dbms_datapump.open (operation => 'IMPORT', job_mode => 'FULL', job_name => JobName, version => 'COMPATIBLE');
--Wenn der Datapumpimport auf einer Standardversion ausgeführt wird, muss diese Aufrufzeizeile genutzt werden
--h1 := dbms_datapump.open (operation => 'IMPORT', job_mode => 'FULL', job_name => JobName, version => '10.2');
dbms_datapump.set_parallel(handle => h1, degree => ParallelExecutions);
dbms_datapump.add_file(handle => h1, filename => Logfilename, directory => DirectoryName, filetype => 3);
dbms_datapump.set_parameter(handle => h1, name => 'KEEP_MASTER', value => 0);
dbms_datapump.add_file(handle => h1, filename => Filename, directory => DirectoryName, filetype => 1);
dbms_datapump.set_parameter(handle => h1, name => 'INCLUDE_METADATA', value => 1);
dbms_datapump.set_parameter(handle => h1, name => 'DATA_ACCESS_METHOD', value => 'AUTOMATIC');
dbms_datapump.set_parameter(handle => h1, name => 'REUSE_DATAFILES', value => 0);
dbms_datapump.set_parameter(handle => h1, name => 'TABLE_EXISTS_ACTION', value => 'REPLACE');
dbms_datapump.set_parameter(handle => h1, name => 'SKIP_UNUSABLE_INDEXES', value => 0);
--Start Job
dbms_output.put_line('Import Job started; Logfile: '|| LogFileName);
dbms_datapump.start_job(handle => h1, skip_current => 0, abort_step => 0);
-- Wait for ending and finishing job
dbms_datapump.wait_for_job(handle=>h1,job_state =>job_state);
dbms_output.put_line('Job has completed');
dbms_output.put_line('Final job state = ' || job_state);
dbms_datapump.detach(handle => h1);

Has no one any idea?

Missing Role when saving CR object in BW

Hi all,
I am trying to save a CR created on BW query. However, using the SAP toolbar save prompts no role in the window to save the report to.
Can someone plz suggest where did I miss something. I have roles created and assigned to this user in content admin WB for content admin. Folder security in BOE is also configured with proper authrozation as per inst guide.
Please advise.
Regards.

Hi all,
I am trying to save a CR created on BW query. However, using the SAP toolbar save prompts no role in the window to save the report to.
Can someone plz suggest where did I miss something. I have roles created and assigned to this user in content admin WB for content admin. Folder security in BOE is also configured with proper authrozation as per inst guide.
Please advise.
Regards.

Identify the missing role or priviledge

Hi, good day.
Anytime you try to create an object or do any operation that outputs "ORA-01031: insufficient privileges", is there a fast thing to do so you can detect which role / priviledge is missing and preventing you from creating or doing the action?
For example, I'm trying to create a materialized view now, but it 's giving me "ORA-01031 error"
Thanks in advance

You might want to check to see what roles and privileges your currently logged on user has using session_roles and session_privs.
Here is a short article that lists the basic views to determine privilege related information:
How do I find out which users have the rights, or privileges, to access a given object ?
http://www.jlcomp.demon.co.uk/faq/privileges.html
HTH -- Mark D Powell --

Missing roles in Shared Services 9.3.1

We are going through an install of 9.3.1 at a clients site. Planning is working correctly with shared services, but Financial Reporting is throwing this error found in SharedServices_security.log:
2008-05-02 11:53:50,718 [ExecuteThread: '13' for queue: 'weblogic.kernel.Default'] WARN com.hyperion.css.spi.impl.nv.NativeProvider.getHierarchicalRoleTree(Ljava.util.Map;Ljava.lang.String;Lcom.hyperion.css.common.CSSRoleNode;Ljava.lang.String;Lcom.hyperion.css.spi.util.jndi.CSSDirContext;Ljava.util.Locale;Ljava.util.ResourceBundle;)V(Optimized Method) - Exception getting Child Roles in hierarchy due to Illegal or invalid id.dflt passed in. Please check the argument.
When attempting to connect from Financial Reporting Studio or Workspace we get an error stating:
"You are not authorized to use this functionality. Contact your administrator."
We are running WebLogic 8.1 service pack 4 on Windows Enterprise server 2003 sp1.
If anyone has seen or worked through this error, please respond.

Got resolution on the error. Look for css-9_3_1.dll in HYPERION_HOME\common\css\9.3.1\bin on the server where Financial Reporting is installed. This dll enables FR to communicate with NTLM. Oracle support stated that "This dll is not included in the PATH by default because nobody uses NTLM anymore." When I asked them why it was not documented despite the fact that NTLM continues to be listed prominently as a supported authentication repository, they had no reply. Watch for this one to bite you!!!

Missing role "business_explorer_showcase" in EP7 NW2004s

I cannot find the role "business_explorer_showcase" in EP7 which is necessary for integration with BI 7.0. Per an earlier thread (Not find the 'business_explorer_showcase' role in EP7.0), I searched for "bi_showcase" but with no luck.
Based on documentation, my hunch is that you need KM installed to have this role available. Can anyone shed any light?
Thanks,
Matt

Hi Matt
You need to install BI-Java and KM, this will solve your problem.
Regards,
Morten

Missing Role&Policy defined in DD during migration WL8.5 to WL9.2

I'm in the midst of migrating our application to WL9.2. We are using roles and policy defined in the Deployment Descriptors (working fine under WL8.5).
In WL9.2 I've configured the Security Realm with "DD Only" option, so the role & policy will get loaded during the startup.
However, I'm getting the following warnings:
<4-May-2007 1:46:59 o'clock PM EDT> <Warning> <Security> <BEA-090669> <Ignored deployment of policy for resource "type=<ejb>, application=ARIS, module=CommonApp_wl.jar, ejb=PartyService, method=viewParty, methodInterface=Remote, signature={long,long}">
<4-May-2007 1:46:59 o'clock PM EDT> <Warning> <Security> <BEA-090669> <Ignored deployment of policy for resource "type=<ejb>, application=ARIS, module=CommonApp_wl.jar, ejb=PartyService, method=addParty, methodInterface=Remote, signature={long,ca.on.gov.mto.rus.clientManagement.business.service.PartyValue,ca.on.gov.mto.rus.clientManagement.business.service.PartyRelationshipValue}">
<4-May-2007 1:46:59 o'clock PM EDT> <Warning> <Security> <BEA-090669> <Ignored deployment of policy for resource "type=<ejb>, application=ARIS, module=CommonApp_wl.jar, ejb=PartyService, method=updateParty, methodInterface=Remote, signature={long,ca.on.gov.mto.rus.clientManagement.business.service.PartyValue}">
<4-May-2007 1:46:59 o'clock PM EDT> <Warning> <Security> <BEA-090668> <Ignored deployment of role "createParty" for resource "type=<ejb>, application=ARIS, module=CommonApp_wl.jar">
<4-May-2007 1:46:59 o'clock PM EDT> <Warning> <Security> <BEA-090668> <Ignored deployment of role "viewParty" for resource "type=<ejb>, application=ARIS, module=CommonApp_wl.jar">
<4-May-2007 1:46:59 o'clock PM EDT> <Warning> <Security> <BEA-090668> <Ignored deployment of role "viewAddress" for resource "type=<ejb>, application=ARIS, module=CommonApp_wl.jar">

Does the account get provisioned when you try to provision the same resource manually (via 'Add/Provision Resource') ? ?
If your role is getting assigned correctly then their is atleast no problem with the membership rules. Is the role tied to the Access Policy correctly. This is a basic and clean configuration which should work. Verify your system configurations again.
- Access Policy should have ResObj1 in the Resources to be provisioned by this access policy section
- Access policy should also have BasicRole in the Roles for this access policy section

Missing Roles in workbook

The basis team installed the Enchancement Package on BW Sandbox last month. When I tried to open the workbook, it only show only one role, but it should be showing others roles. Also, when I tried to save a workbook and assign to a role, I do see the complete list of the roles.
On the SAP menu (backend tools), I do see complete list of the roles on the user menu. I did check the user setting and its roles, and the roles are active (not expired).
I am wondering how to fix the problem, and I am wondering will the latest support pack for frontend will solve it or what other thing we need to do?

Hi Glenn,
Please check the following:
The settings in SSM_CUST defines a compress mechanism for the user menu
known as "Redundancy avoidance" and described in notes 357877 and 357693
Redundancy avoidance deletes easy access menu entries for doubled
transaction codes whenever SSM_CUST contains
1. an entry CONDENSE_MENU with PATH = 'YES' and
2. either an entry DELETE_DOUBLE_TCODE with PATH = 'YES' or no entry
DELETE_DOUBLE_TCODES, at all.
If you don't want doubled transaction codes to be deleted, then simply
add an entry DELETE_DOUBLE_TCODES with PATH = 'NO' into table SSM_CUST.
Please enter
DELETE_DOUBLE_TCODES with PATH = 'NO' into table SSM_CUST
and retest this issue...
many thanks
Orla.

User Missing Roles

Hi. We have some problem with user roles, all the existing portal users have 'lost' their roles. we have created 1 new role, RoleA, and assign to all the users. but now, all the users only have portal_user role. we got the following error on the log file:
Apr 25, 2005 11:05:17 AM # Client_Thread_45     Fatal           ADAPTER: Corporate Authentication Server: JNDI Exception in Search. Search Filter: (&(objectclass=PortalRole)(|(MemberAssignment=V0000100115))) System Msg: javax.naming.NamingException: [LDAP: error code 80 - NDS error: no additional information available (-6029)]; remaining name '' METHOD: readRoleContextForPrincipal #
Apr 25, 2005 11:05:17 AM # Client_Thread_45     Fatal           Cannot populateData for userWPUser default_namespace: corporateLDAP
WPPrincipal:
uniqueId ... V0000100115
locked    ... false
populated ... false
trusted ... false
Role      ...
     portal_user
Group     ...
Namespace ...
     corporateLDAP
          lastname
               ABC Company
WPUser: (V0000100115)[com.sapportals.portal.security.usermanagement.WPUser@-138387590]
AuthorizationFlags: {}
transient data: [java.util.Hashtable@-328562808]
Error getting Roles for V0000100115 METHOD: n.a. #
Please help. Thank you.

hi. thanks for your reply. all roles have been checked as entry point. but still i don't see it on top level navigation.
i tried something just now. i opened 2 browsers, one login as super admin, and one login as userid A. as super admin, i assigned Role A to userid A, save it. Then as userid A, i refresh the browser and i can see Role A page. I open a 3rd browser now, login as another userid A. in the 3rd browser, i can't see the Role A page. On previous browser login as userid A, after refresh, now i can't see the Role A page. and i checked back the super admin, now userid A doesn't have Role A assigned.
what goes wrong? appreciate any help.

ELM - Contact person is missing role

Hi Experts,
Actually we are using ELM to import prospects with contact person. But Contact persons are not created with role Contact person.
How do I change this behavior? Do I have to use badi CRM_MKTLIST_BADI, or is there a standard option?
Best regards,
Cristina

yes, once I have meet the same situation, I add the custimze code in ELM BADI, to add a role when create BP.
You can realize the BADI to replace the standard one and input your code.

ESS missing roles

Hi,
I have deployed the following packages:
- ESS14_0-10002965.sca
- PCUIGP014_0-20000568.sca
- MSS14_0-10002964.sca
I´ve deployed them with SDM with no problems.
After the deployment I went to the portal and starting looking for the roles and they are not there so I went to webdynpro console to see if the jco were there to be created and they were there and the packages too.
If I log into the SDM i can find in the repository the packages and it do not let me install it again because it shows that i have it already installed.
Any idea about this? How do I find the XSS roles?
Thanks,
Edu
Message was edited by:
Eduardo Fagundes

Hi James,
My e-mail is [email protected]
While i´m waiting the docs, i´ll try the steps you described.
But i think this is not the problem because the roles there i´m talking about is the portal roles and one doc that i have says to me that after i deploy with SDM i should be able to see the files in the portal content -> Content Provided by SAP -> End user, and there is no package there only "Standard Portal Users".
Any idea?
Thanks in advance!
Edu

Missing Role display in BI7 Analyser

Hi
We are trying to remove sap_all from all our users in BI7.
We have generally completed the admin tasks but we have an issue with Analyser Role display.
We have created workbooks and assigned them to roles and if the user has sap_all they can see the workbooks in the role menu. If they don't have sap_all they don't have any roles displayed in the 'open' window when using analyser also they don't have an infoarea icon displayed under the role icon.
I think this is probably something quite simple but I can't spot it. By the way we have created the roles manually using our BW3.x knowledge.
Thanks
Jerry

Hi Jerry,
In the role given to the user's (other than SAP_ALL). Just include the Two authorization objects:
S_RS_COMP and S_RS_COMP1.
Please provide these values for the 2 authorization objects for display and execute purpose for the users as bwloe:
ACTVT: Display, Execute (03,16)
RSINFOAREA: *
RSINFOCUBE: *
RSZCOMPID: *
RSZCOMPTP: *
Don't give any write/edit activities.
Then they can see all the queries, workbooks and infoareas.
With Regards,
Ravi Kanth
Edited by: Ravi kanth on Mar 24, 2009 9:50 AM
Edited by: Ravi kanth on Mar 24, 2009 9:53 AM

Missing Master and Derived Roles

Hello All,
I have got an odd scenario and I am hoping some of you might have run into the same issue or might point me to the right direction.
Back ground
We are on ECC 5.0 and have Master Derived Concept, and then Derived Roles are grouped in Composites
We recently( Last week ) created some ( say 34 ) Derived roles and some (10) composites using a combinition of the newly created derived and some Old derived roles.
Transported The derived seperatly and Composites seperately. Transports went successfully into QA and PRD.
This week we noticed that all of the 34 derived roles are missing in DEV ONLY along with 28 Master of the 34 Child Roles. All the Childs and master still exist in QA and PRD.
We have tried to look up the change Doc of the missing roles or the profiles or the authorizations of the missing roles and there is no change log under suim. Change Log shows when the role was created but nothing after that. According to Basis transports does not have any unusual log
Since its a DEV system so no delete transports have come into DEV, therefore delete transport could not be an option.
I have also uploaded one of the missing master roles from the PRD to DEV and it is succfully established the relation with the childs. I was hoping it might shake up the Change History regarding missing role but it did not, It now shows when the role was created earlier( 2006 ) and This week agian but no Delete History
Any Ideas on how to explain this behavior

Another possible and imaginable human error worth looking into is that at some stage in the past a transport request was created for the master and child roles -- okay.
Then the child roles were "broken" by changing org. levels and other fields in the authorization maintenance, so the roles themselves were deleted with the intention of creating them again from one of the "template" child-roles --> okay, seems reasonable to have happened.
Then (here is the problem!) someone released the transport before the new child roles were created. This is interpreted by the system to be a deletion transport of roles.
Additionally the sequence of the transports might have added additional obscurity to the issue and now, much later on, someone imported the transport into production which deleted the roles.
<conspiracy_theory>
The person then deleted the transport request from the queues and archived the change documents in SU83.
</conspiracy_theory>
Cheers,
Julius

Roles missing in available role list at import role option

We have sap boxi 3.1 and sap integration kit both with SP2.
we configure sap authentication in the CMC.
The entitlement system is configured with a user that has no restriction in sap (SAP ALL user).
We have approximately 1400 roles in our BW client
In the available roles list at the import role tab we can see only 220-230 roles.
The list is randomly.
When we configure another bw client as a different entitlement system,
we receive approximately 280 roles out of 1380.
It looks like we are missing some buffer size configuration.
Any ideas ??
thanks.

Hi Ingo,
Thanks a lot.
Yes, the user in the CMC has SAP ALL credential, and is allowed to see all BW roles.
The missing roles are indeed those that are not assigned to any user.

Missing roles in CC 5.2

Similar Messages

Maybe you are looking for