No Portal Roles assigned issue

Hi Experts ,
We had recently integrated CRM with portal , but some users inspite of having the portal roles assigned to their id were getting an Access Denied page (we had customized the "no portal roles assigned " error page ) . Knowing the dependency of portal on IE and browser settings , this issue is sometimes resolved by clearing cache , cookies , and changing a few browser settings etc on IE 6.0 . If this doesn't work then upgrading to IE 7.0 definetly helps . Since this is just a workaround , I would like to know if anyone has experienced such a thing before and has a solution for this . Your inputs will be highly appreciated .
Regards
Mayank

Hi Mayank,
This is an error which happens when there is No roles assigned to the user. I am not sure how your systems are designed for User Management. Say for example in some cases LDAP is used to maintain Group to User Relationships and Portal Roles are connected to Groups therfore all users in the group is assigned to the Role. In some cases UME is used.
Having said that you can disable the cache for the browser. You have to compromise with the performance however, this will ensure that everytime the user logs in, the request will always go to the server.
Regards
Avik

Similar Messages

  • Automating Portal Role Assignment

    Hi Everyone,
    At my project we are looking to automate the process of Portal Role assignment.
    With our current design, a user initially logs into the ISA and ICSS Portal as an anonymous Portal user.  To view all content the user will be required to register himself on the portal. Once the user registers himself, a user record is created on the backend CRM system. Now when he tries to log into the portal with his new username and password he gets a blank screen because he has no Portal Roles assigned to him.
    We need need to create Portal Roles for each CRM user. The new Portal Role will be based on user type in the CRM system. Since we have several users logging in and creating new accounts, we need to automate this process of mapping a CRM user to an appropriate Portal Role and then actually creating the Portal Role on the Portal.
    Has some one does this before or has an idea how to do this?
    Any help will be really appreciated...
    Thanks!
    Muhammad Osman Yousuf

    Hi Michael,
    Thanks for the help so far. Do you think the following mappings would work with the solution you recommended?
    On the CRM side we have CRM_ROLE_A, CRM_ROLE_B, and CRM_ROLE_C and on the Portal sider we have PORTAL_ROLE_A and PORTAL_ROLE_B.
    All mappings given are possible...
    CRM_ROLE_A = PORTAL_ROLE_A
    CRM_ROLE_B = PORTAL_ROLE_A and PORTAL_ROLE_B
    CRM_ROLE_C = PORTAL_ROLE_B
    Thanks!
    Muhammad Osman Yousuf

  • Can portal role assignment be transported to another portal?

    Hi, Gurus:
    i need to transport portent, role, uses, etc from one portal (EP6 on NW04 )to another (EP7 on NW04s).
    can you tell me that if portal role assignment can also be transported?
    same question to ume role.
    very confused at this area.
    hope i can get your advice
    Thank you
    Br,
    Nikko

    Strictly speaking the user/group/role assignment is not part of the normal transport process in that it will not make those mappings when you transport the content to the next system in your architecture.
    However - you can export users / groups which includes the mappings details.  This can be used in your downstream systems.
    Subsequent transports of objects do not "break" existing mappings.
    Haydn

  • Massive portal role assign to users

    Hello, im trying to assign a portal role to almost 5000 users, as extra information, the portal has ABAP UME. How can i achieve this in a more practical way than doing it handly?
    Regards.

    Hi,
    Since UME is ABAP ,map the portal role with backend role in portal and then write some cat scripts in backend to assign the role to massive users
    Thanks
    Bala Duvvuri

  • Role Mapping For Portal Role Assignment and ABAP Role Assignment

    Summary:
    - Under the GRC configuration of Roles> Role Mapping we are trying to utilize the  role mapping feature in GRC for associating a dependent role to a main role.
    - We want to use this role mapping feature for the purposes of adding an Enterprise Portal role for every ABAP role that gets approved for the user in an ABAP component system (i.e. ECC, BW, CRM etc). We will have a 1:1 mapping of Enterprise Portal role to ABAP role defined in the role mapping section in GRC.
    - We want to set up the workflow in such a way that the main role (ABAP role) is the only role that needs to be approved. The dependent role (Enterprise Portal role) should be added or not added based on the approval or denial of the main role (ABAP role). In other words if the role owner for the abap role approves the abap role, then both the abap and EP role will be provisioned by GRC and if the role owner rejects/denies the role, then neither the abap or EP role will be provisioned by GRC.
    Problem Description:
    Our Scenarios we tested:
    Scenario 1:
    Main Role:  Attached to Initiator A & workflow A (routes to single approver based on role)
    Dependent Role:  Attached to Initiator B & workflow B (routes to auto approval or no approval)
    *Problem with the Scenario 1setup above, the dependent role will always get approved & provisioned regardless of the approval or denial of the main role. 
    Scenario 2:
    Main Role:  Attached to Initiator A & workflow A (routes to single approver based on role)
    Dependent Role:  Attached to Initiator A & workflow A(routes to single approver (same as main approver) based on role)
    *Problem with the Scenario 2 setup above, the dependent role will always also need to get approved by the same approver as main role and it opens the possibility that the approver may accidently approve the main role and deny the dependent role, which is not the ideal setup as we inherit the risk of human error.
    Questions:
    1. Does the dependent role need to be defined in an initiator at all since it will never directly be requested directly?
    2.  If the dependent role does need to be in the initiator file, please describe how to properly setup the initiator and workflow stage & path so that we can maintain the desired relationship with the main role approval dependency? (if the role owner for the main role approves the main role, then both the main role and dependent role will be provisioned by GRC and if the role owner rejects/denies the main role, then neither the main role or depedent role will be provisioned by GRC
    Edited by: Rene Griffith on Feb 26, 2010 10:22 PM

    I tested this set up.
    1.  Defined ABAP role as Manin role
    2.  Defined Non-ABAP role as dependednt role
    3. ABAP role  is set up in initiator requiring business approval.
    4.  Non-ABAP role is set up in initiator with no approval required.
    Results Where Business Approver approves the ABAP Role
    1. Only the ABAP role is displayed in approver view which is desirable.
    2.  ABAP role is approved and Non-ABAP role and ABAP role is provisioned.
    Results Where Business Approver rejects the ABAP Role
    1. Only the ABAP role is displayed in approver view which is desirable.
    2.  ABAP role is rejected but  Non-ABAP role is provisioned which is not what we want.  We want the Non-ABAP role not to provision if the ABAP role is rejected by the business approval.
    Thanks again for your help.

  • SAP IDM 7.1 Role assignment issue

    Hello IDM Experts,
    I am facing one critical issue here. We have connected SAP GRC with SAP IDM for risk analysis and CUP approvals and then once the approvers have approved the requests, IDM assigns these approved roles to users in backend SAP Systems.
    We are now facing issue here past 1-month. Before we never faced this issue.
    The issue is when the Roles are approved from GRC-CUP AC 5.3, post the approvals, the IDM is pulling the data and some of the roles are not getting assigned in SAP Backend systems. In the 1st and 2nd attempt it is not getting assigned however sometimes in the 3rd attempt it is getting assigned. This kind of weird behavior we have come across first time.  Has anyone come across such issues before?
    What could be the possible reason for the roles not getting assigned in SAP Backend system from IDM?
    We checked everything right from dispatchers, connectors, workflow, SQL Logs, Job logs but we are unable to figure out the reason for this issue.
    Do we need to restart the dispatcher or is there any issue with cache memory? 
    Can anyone help here to resolve this High Priority issue?
    Thanks in advance!

    IDM Experts,
    Can I get response on this topic from the experts?
    Will restarting the dispatchers help in this situation? Is this related to housekeeping issue of dispatcher.
    Why are some roles from IDM are not getting assigned in SAP Backend system? Also it is getting rejected 1st and 2nd time and during 3rd time it is getting approved. Please advise
    Regards
    Malini Rao

  • Portal role assignment

    We are facing problem of Roles getting automatically de-assigned to users in EP. We would like to know the following:
    1)       If this is a known issue with EP 6.0?
    2)       If yes how to correct it.?
    3)       How to find when this role got deassigned?

    Hi...
    which Eportal you are using kindly confirm about it.
    if it is EP 6 then atleast SP12 should be install on your system.
    if all this are already there then check system configuration on your EPORTAL
    goto system administration -> system configuration -> UM configuration --> check for Data sources and LDAP server settings.
    in LDAP server settings check for "Unique Attribute for UME Unique ID" the value should be the samaccount.
    Note : after using this setting all user will loss there roles assigment. so please confirm with your IT head team before doing this.

  • Customizing Message "No portal roles are assigned for this user"?

    Hello,
    we would like to give the user some hint on who to speek with in case he has no portal roles assigned.
    So we would like to customize the messaage "No portal roles are assigned for this user" to some customer spezific text or to redirekt to a customer specific iView.
    I would appreciate any kind of hints.
    Best regards,
    Lutz Rottmann

    Hi,
    Check these threads.
    Customizing message "No portal roles are assigned for this user"
    No portal roles are assigned for this user
    Regards,
    Harini S

  • Cusomize message "No portal roles are assigned for this user"?

    Hello,
    we would like to give the user some hint on who to speek with in case he has no portal roles assigned.
    So we would like to customize the messaage "No portal roles are assigned for this user" to some customer specific text or to redirect to a customer specific iView.
    I would appreciate any kind of hints.
    Best regards,
    Lutz Rottmann

    Hi,
    Check this thread.
    Customizing message "No portal roles are assigned for this user"
    No portal roles are assigned for this user
    Regards,
    Harini S

  • Is there a way to automatically map CRM Roles to Portal Roles

    <b>Scenario:</b>
    When a new user registers on our portal he is assigned a CRM Role, however, he still needs to be assigned a Portal Role. Since we will have many users registering through our portal we do not want to assign roles to users manually. We want this to be an automated process, which requires almost no administration after the initial configuration.
    <b>Solution we are looking for:</b>
    Ideally we would like to do some configuration on the Portal side that would some how pull roles from CRM user store and map them on to appropriate Portal roles. In our case the reverse would also be ok as well, i.e. we do some configuration on the CRM side that would push the appropriate role to the Portal and do the Portal Role assignment.
    Does anyone know how to do this? I am very new to portals so a detailed explanation would be very helpful.
    Thanks for all the help!
    Muhammad Osman Yousuf

    No, the portal role will not be the same for the same CRM Role.
    So for example...
    On the CRM side we have CRM_ROLE_A, CRM_ROLE_B, and CRM_ROLE_C and on the Portal sider we have PORTAL_ROLE_A and PORTAL_ROLE_B.
    All mappings given are possible...
    CRM_ROLE_A = PORTAL_ROLE_A
    CRM_ROLE_B = PORTAL_ROLE_A and PORTAL_ROLE_B
    CRM_ROLE_C = PORTAL_ROLE_B
    The solution you mentioned, will it work with the above mappings?
    Thanks for all the help!
    Muhammad Osman Yousuf

  • How to remove default "Home" portal role from every portal user

    Hi
    My Portal system is configured on our BW UME.
    When ever I create a Used ID in BW,A portal account is created for the same user id.
    With out any portal roles (navigational) assigned to the user.
    Ex:
    Lets say I created a user u201CTesteru201D in BW and assigned him the relevant BW Roles (ABAP).
    When I logon to Portal using u201CTesteru201D, I can see a TAB u201Chomeu201D under which worksets Company,Work,Teams,Documents and Portal Information
    I checked the user account in Portal for tester there are no portal roles assigned to himu2026u2026.
    My requirement is not to display Home (tab)u2026.how can is that Home is assigned to all portal users and how can I remove it so that the users will be displayed with only navigational role that I assigned.
    Thanks

    Hi,
    In User Admin of Portal  search for eu_role and see check assigned users and assigned groups tab and see if this is added to the users or group.
    If you find it assigned to any users or any group delete the assignment and it should be gone.
    Hope this helps.
    Cheers-
    Pramod

  • No portal roles are assigned for this user.If this problem persists, contac

    I am trying to access portal first time using j2ee_admin user. It is saying "No portal roles are assigned for this user.If this problem persists, contact your system administrator."
    iam using abap+java enginee how config in abap enginne ,iwant which role to assign  j2ee_admin  user
    i already asiigned sap_j2ee_admin,SAP_BC_JSF_COMMUNICATION,SAP_BC_JSF_COMMUNICATION_RO   but it show same problem
    please help me..
    Edited by: Mugala Balu on Aug 7, 2010 5:53 PM
    Edited by: Mugala Balu on Aug 8, 2010 7:48 AM

    Balu,
    Well this issue has been discussed many a times in forums. You would have to point your data source to ABAP system.
    Check this thread in [here|J2EE Failed to start  , after changing UME datasource;.
    Good Luck!
    Sandeep Tudumu

  • Regarding Enterprise Portal Role issue

    Hi,
    The system administrator  has assgined a role called "k-role"  to a user. The K-role has some  3 pages inside it. When the user view the portal with his id, he can see the role called "K-role" and the pages. But when he clicks a page to access the documents with in it, it says "ACCESS DENIED". There is no restriction kept at the document level. Restriction is only at the role level.
    What could the error be? How can i resolve this issue? How can the user access the document?
    Regards,
    Divya

    Hi Divya,
    the portal users assigned to super admin role (usually via group Administrators) do have full permissions on every document. You HAVE to add read permissions for group Everyone in order to make the documents accessible by every portal user.
    1.      Open the Details dialog box for the item (for example, for the folder).
    2.      Choose Settings ® Permissions.
    3.      Enter one or more users, groups, or roles.
    4.      Choose Add.
    5.      Select one of the following permissions: Read, Write, Read/Write, Delete, Full Control
    Best regards,
    Martin

  • Role Assignment Migration Issue

    Hi All,
    We migrated from EP6.0 to NW04 and encountered an issue with role assignment.  We currently have two LDAPs (1 for external customers and 1 for internal customers), when we did the migration, what we noticed is that for the external users, all their roles were not attached and for internal users, some of the roles were not attached.  Has anyone encountered this issue?
    Thanks

    Hi Reyna,
       I did some research on this.  I was unable to find anyone who migrated from a portal with two ldaps configured.  I was aware of some issues if people changed ldaps or migrated the uses from one ldap to another.  Or if they didn't use the migration tools.  Since you used the tools and used the same ldap, I'm not sure what is going on.
    If you haven't already, I suggest you open a message with SAP.  Let us know here if you make any progress.  If I find out more, I'll post here too.
    Thanks,
    John

  • Assigning Portal Roles

    Hi All,
    We have installed EP 7.0. The problem we are facing is : The "Portal Content" folder is not displayed under the "Browse Category" of content administration & system administration.
    Why is it so? Do we need to add some other portal Roles to the user? If so.., which role we should add?
    Also we are trying to add the portal role ID
    " com.sap.pct.pdk.JavaDeveloper". But when we search for this role , we could not found this role. Whether the role has been renamed?
    Kindly provide your suggestion on the above queries.
    Regards,
    Eben.

    Hi,
    Re: How to create and assign role
    Portal:How to assign a Folder to a Role in Protal
    I hope the above links will help you,
    Regards,
    Harish

Maybe you are looking for