Participant 'userx' does not have role assignments in process '/ProcessP

I am using Oracle BPM 10.3 MP2 Enterprise Edition
Version: 10.3.2
Build: #100486
Have a process ProcessP and role RoleR.
User 'userx' is assigned to role 'RoleR', when he tries logging into the workspace,
getting exception message in page as below:
"Participant 'userx' does not have role assignments in process '/ProcessP#Default-1.0'. This error usually takes place when the Process Execution Engine has not re-synchronized with the Directory Service. Try re-logging and executing the task again. If the problem persists, contact your Administrator"
Tried deleting the user 'userx' from process admin and re-creating the user and gave role 'RoleR' but still the issue persists.
This is working for other user 'usera', 'userb', 'userc' etc.
Any suggestions.
Thanks in Advance.

Is restart of the engine server on which ProcessP deployed is the only solution since the error messages shows up as 'Process Execution Engine has not re-synchronized with the Directory Service. '

Similar Messages

Participant 'weblogic' does not have permissions to execute the operation ?

Hello,
We have modelize our Business process, this process can start with
An Automtaic task based on an event recevied from a web services or via a start event with an iniator task.
The deployment of this process was ok.
But when we try to run this process in the "Business Process Workspace" we get the folowing message : "Participant 'weblogic' does not have permissions to execute the operation. "
The users has the corresponding role of the lane so it should be right ?
Thanks
Grégoire.

Hi Heidi,
The Application list does contain the process link.
However, in the admin role association's page, the roles of the process are not present, and as such cannot be assigned. I've tried adding a role according to the naming convention but I assume they must be associated explicitly to the process by the deployment process...
We have loads of roles related to processses that have since been undeployed.
So what do you advise? Should we try to undeploy and redeploy the process? This was already been done and, as far as I know, with the same result.
Thanks
Miguel

"Server either does not have a virtual switch configured or none of the configured virtual switches have an IP address assigned" error driving me nuts!

OK; have been trying to setup a test VM based RDS deployment for a few days now with no luck.
this error mentioned above:
"Server <server name> either does not have a virtual switch configured or none of the configured virtual switches have an IP address assigned" error is driving me nuts!
I have removed and re-added the RD Virtualization Host role numerous times, each time having the "create a virtual switch" checkbox selected, but it did NOT create any virtual switch.
I created the external virtual switch manually and tried to create the desktop collection again, no luck with the same error.
a few questions:
1. you don't assign IP to a switch! you assign IP to Network Interfaces. why does the error puts it like this?! it is technically wrong.(yeah yeah I know all about how you'd assign IP to managed switches in real world to telnet into them and manage them.
you know better than me that it is not the case here!)
2.the RDS Virtualization hosts are using their wifi card as the card for the virtual switch. could that be the reason? I even disabled their unplugged wired NIC just to make sure that the wifi is the only available option for the RDS wizard to use for the
virtual switch creation; but it didn't use it and it didn't create any virtual switch automatically.
3.if WIFI nic is indeed the reason, is it your suspension or an official documents is there somewhere stating so (that the WIFI NICS on a Virtualization hosts are not supported as the hub for a virtual switch).
4.what are the properties of the virtual switch the RDS requires? does it have to be external? why can't it work even with my manually created external switch?
5.how would I fix it?
P.S: the environment is made up of 2 laptops, having windows 2012 R2 trial installed on them, using their wifi to connect to the out world. no cable is plugged into their wired NIC card.

Hi,
Thank you for posting in Windows Server Forum.
The simplest short term solution was to connect each computer to a small switch that had no other connectivity. This brought up the link light on the external NIC and allowed the creation of the collection to complete. You need to use an external switch. You
can create one external switch which might fix the problem.
Please check below article for information.
VDI Deployment Error About Virtual Switch
In addition please referthis article for information regarding virtual switch.
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

Hr_maintain_masterdata showing an infotype that the user does not have auth

subject: hr_maintain_masterdata showing an infotype that the user does not have authorisation for
Hi all,
I've a user account that's meant to perform staffing, based on the actual HR role. The system is also set up with an infogroup that contains infotypes 0000, 0001, 0006, 0185, XYZ and other infotypes; XYZ representing an actual infotype. The HR role is not supposed to have this infotype XYZ.
When PA40 is used, infotype XYZ will be skipped, as the user account do not have authorisation for it. I could then proceed to create the record.
When the fm: hr_maintain_masterdata is used, I was prompted that I do not have authorisation for infotype XYZ.
I have setup my fm with the mininum amount of values, as indicated below.
I did not populate a table for "proposed_values" so the infotypes called were due to the actions of the infogroup.
fm: hr_maintain_masterdata
pernr = 01234567
massn = 01          (new staff)
actio = INS          (insert record)
tclas = A          (master record)
begda = 01.09.2010
endda = 31.12.9999
werks = myCompanyPlant
dialog_mode = 2     (online)
luw_mode = 1          (commit, if no errors encountered)
no_existance_check = X
Q. Is there any way to let the function module call the infotypes, with authorisation checks, as what PA40 is doing?
Your guidance would be appreciated.
Thank you,
James Wong

A behaviour that has been observed was that, after infotype 0185 was saved, the function module throws me back to infotype 0000, citing, "No authorization to maintain XYZ exists". Data that I had populated to the screen, either via the FM or by manual input were cleared. If I skip the next 4 screens, I'll arrive at the Infotype after XYZ, with the data populated. Subsequent infotypes also have their data filled in.
Once I complete the sequence, the personnel record will be created. Upon examination, the frist 4 screens that were skipped in the 2nd pass contains data that were entered in the 1st pass.
My question, as posted in the original post, is why infotype XYZ is triggered by the function module, as the staffing account does not hae access for it. If I repeat the process using PA40, the infotype is skipped accordingly.
Any help would be appreciated.
Thank you,
James Wong,

ARQ: Role Import does not show roles in the preview

Dear All,
Recently I upgraded our system to SP#14. Now when I try to import roles from NWBC->AM->Role Mass Maintenance->Role Import, it does not show roles in preview. Also, it does not import the roles specified. (either a range or full name of the role). It does not even give any error message.
I implemented SAP note#1897975 Role import does not show roles in the preview.
Still facing the same problem. Has any one faced this problem? Please suggest.
Regards,
Faisal

HI Faisal,
This note(1897975) you have to implement in Plug-in System, try to check the same once and let me know if it resolves our issue.
Regards,
Neeraj Agarwal

SCSFileDownloadServlet fails: User 'guest' does not have sufficient priv.

Hi,
We have an ADF application that is using SCSFileDownloadServlet to get documents from UCM. We added the servlet in web.xml and we are using this link to download the documents: /getfile?adapterName=our_adapter_name&dDocName=document12345&dID=12345
The issue is that sometimes it works but sometimes it fails throwing this message in the logs:
Event generated by user 'guest' at host 'CIS'. Unable to download 'COR-ER-421722'. User 'guest' does not have sufficient privileges. [ Details ]
An error has occurred. The stack trace below shows more information.
!csUserEventMessage,guest,CIS!$!csUnableToDownload,COR-ER-421722!csUserInsufficientAccess,guest
intradoc.common.ServiceException: !csUnableToDownload,COR-ER-421722!csUserInsufficientAccess,guest
*ScriptStack GET_FILE
3:checkSecurity,dID=421317,dDocName=COR-ER-421722
at intradoc.server.ServiceRequestImplementor.buildServiceException(ServiceRequestImplementor.java:2115)
at intradoc.server.Service.buildServiceException(Service.java:2260)
at intradoc.server.Service.createServiceExceptionEx(Service.java:2254)
at intradoc.server.ServiceSecurityImplementor.validateSecurityPrivilegeLevel(ServiceSecurityImplementor.java:813)
at intradoc.server.DocumentAccessSecurity.checkSecurity(DocumentAccessSecurity.java:170)
at intradoc.server.DocumentAccessSecurity.checkSecurity(DocumentAccessSecurity.java:121)
at intradoc.server.ServiceSecurityImplementor.checkSecurity(ServiceSecurityImplementor.java:371)
at intradoc.server.Service.checkSecurity(Service.java:2829)
at intradoc.server.FileService.checkSecurity(FileService.java:337)
at intradoc.server.Service.checkSecurity(Service.java:2807)
at sun.reflect.GeneratedMethodAccessor456.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
Is it possible to set a user/password to this servlet so it is able to download the documents everytime?
Thanks,
Josue

Hi go9189,
According to your description, you come across the error that User 'guest' does not have permission to run DBCC checkprimaryfile. This issue could happen when the login account doesn't have CREATE DATABASE, CREATE ANY DATABASE,
or ALTER ANY DATABASE permission in SQL Server instance, or that the login account has no access to the mdf and ldf files when attaching database, so SQL Server recognize the login account as a "Guest".
To solve the issue, you could pay attention to the points below.
1. Ensure that the login account has at least CREATE DATABASE, CREATE ANY DATABASE, or ALTER ANY DATABASE permission. You could grant the fixed server role 'dbcreator' or 'sysadmin' to the login account following the steps below.
a. Connect to SQL Server instance with the login account which has sysadmin fix server role.
b. Expand the folder 'Security', right click the login, and select Properties.
c. In the Server Roles tab, check the checkbox for 'dbcreator' or 'sysadmin'.
2. Make sure that the the login account has full control permission on the mdf and ldf files. For how to grant the login account with full control permission on the mdf and ldf files, please refer to the steps in the following article:
http://msdn.microsoft.com/en-us/library/bb727008.aspx
There is a similar thread for your reference:
https://social.technet.microsoft.com/Forums/en-US/e463df4c-8d26-46cf-aa2e-bddd97c7a9b8/user-guest-does-not-have-permission-to-run-dbcc-checkprimaryfile?forum=sqlgetstarted
Regards,
Michelle Li

Package does not have sufficient use access

Hi,
I am trying to generate a client proxy(using SPROXY, enetered Package name, Prefix, Request number-> and click on Complete) but while activating client proxy i am getting this exception:
"Package ZBI_FI does not have sufficient use access"
Note: ZBI_FI is a package name under which i am generating my proxy. Infact if i choose someother package(like ZBI_PI etc) even then also i ma getting the same error.
This is a package related issue or some roles need to be assigned on my userId???
Please help.
Thanks
Amit

Amit,
check tcode su53 as soon as you execute sproxy to see if there is any authorisation issue
check this thread
Re: PACKAGE ZCRMFSBP does not have sufficient use access.
Thanks
Bala Duvvuri

Cannot delegate Reporting Services Web access to domain user / group, User does not have required permissions

Hi
I have an SCCM 2012 SP1 CU3 installation on a Server 2008 R2 + SQL 2008 R2.
I'm having trouble delegating Reporting Services Web Access to a standard domain user.
I have followed the instructions from these blogs:
http://blog.coretech.dk/kea/creating-the-reporting-user-role-in-configmgr-2012/
http://www.wolffhaven45.com/blog/sccm/assigning-users-to-configmgr-reportusers-group-in-sccm-2012/
No matter how I try, I cannot get the reports to show for a standard domain user. In the console no reports are showing and in the web access I get
"User domain\user does not have required permissions........"
The only thing that is consistenly working when I test is to put the AD Group on the Security Role "Full Administrator".
Then everything will show up.
Any ideas on how to troubleshoot this?

Thanks everyone for helping me with tips. I have now solved the problem. It was the permissions from SCCM that did not replicate to the Reporting Server.
In srsrp.log I got these error messages:
Could not retrieve the reporting service name for instance 'MSSQLSERVER'
Invalid class
Could not stop the reporting serviceAfter googling a litte I found these 2 sites with similiar problems:http://social.technet.microsoft.com/Forums/en-US/d4a7f93a-506f-4e3f-b5fc-bd2b087277da/ssrs-permissions-do-not-add?forum=configmanagergeneral
http://www.microtom.net/microsoft-system-center/software-distribution/sccm-2012-reporting-services-do-not-install
So I ran the command for SQL 2008 R2: mofcomp.exe C:\Program Files (x86)\Microsoft SQL Server\100\Shared\sqlmgmproviderxpsp2up.mof
and BAAM, everything started to work =)
/ALX

Run As Account does not exist on the target system or does not have enough permissions

We are getting below alerts,
Run As Account does not exist on the target system or does not have enough permissions.
I know we can create a Run As account with low Privilege can fix this issue ,
http://blogs.technet.com/b/kevinholman/archive/2010/09/08/configuring-run-as-accounts-and-profiles-in-r2-a-sql-management-pack-example.aspx
My question here is there is any other way to fix it. I tried giving below permission for scom_act account (we used for agent installation and has local admin rights) but still same issue and
also i tried with sysadmin access for scom_act as well but no luck still having same issue , any solution would be welcome
The min. Privilege for monitor SQL server
DB Server Level
a. VIEW ANY DEFINITION
b. VIEW SERVER STATE
c. VIEW ANY DATABASE
Each DB
a. SQLAgentReaderRole database role.
b. PolicyAdministratorRole database role

Check below link
http://blog.coretech.dk/msk/run-as-account-does-not-exist-on-the-target-system-or-does-not-have-enough-permissions/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

The logged in user does not have permissions to perform this operation

OIM 11.1.2.0.4
Connector: Microsoft Active Directory User Management 11.1.1.5.0
Action: revoke a provisioned AD account (logged in user is XELSYSADM member of SYSTEM ADMINISTRATIONS role)
Error message: IAM-2050243 : Orchestration process with id 5756, failed with error message IAM-4065011 : An error occurred in oracle.iam.provisioning.spi.DOBProvisioningMechanism/revoke(Account) while revoking account with id 1 for the user with key 43 and the cause of error is The logged in user does not have permissions to perform this operation..

The problem is missing entries into table AAD, Provisioning API uses table AAD to check administrator's scope on the user's organization.
TEST: following SQL statement should return at least a value
select aad_write, aad_delete
from aad aad
, usr usr
where aad.act_key = usr.act_key
and usr.usr_key = <user_key_of_user_you_wanto_to_revoke>
and aad.ugp_key in (
select ugp.ugp_key
from ugp ugp
, usg usg
where ugp.ugp_key = usg.ugp_key
and usg.usr_key = <user_key_of_xelsysadm>
BUG (in my case): if you create an Organization using a OIM user that does not have any Role (except default ALL USERS Role) the system does NOT add right entries into AAD table, so you can revoke account of users that are members of this Organization
WORKAROUND: manually insert entries for all Organizations (ACT_KEYs) for the user XELSYSADM into AAD table
FIX: always create an Organization using a OIM users with at least one Role except ALL USERS role

User XIRWBUSER does not have authorization for message monitoring

Hi All,
In the Runtime WorkBench, when I choose the Message Monitoring, display Messages from Component Adapter Engine from Database, when I click on the start button, it shows me a error "User XIRWBUSER does not have authorization for message monitoring", how can I configure my xi to get the authorization for message monitoring of Adapter Engine? Thanks!
Regards,
Nick

Hi Nick,
Transaction PFCG. Enter the role you wish to check (SAP_XI_RWB_SERV_USER) and click on the display button.
Check that the Authorizations tab is green. If it is not, then you might need to generate the auth profile. Also check the User tab. If it is not green, then you should do a User Comparison as well (just click on the button inside the tab).
SAP Help URL:
http://help.sap.com/saphelp_nw04s/helpdata/en/52/67151e439b11d1896f0000e8322d00/frameset.htm
Cheers
Manish

System Identity User does not have privileges in ACS

Hello Everyone!!
We have CiscoWorks integrated with ACS, the authentication works but the authorization does not. I check and we have the role System Administration for this user in ACS for every applications like; Common Services, RME, DFM, IPM, Campus Manager, etc.
However in the Common Services < Home < Security< ACS appears the integration in red color and means that the System Identity User does not have all the privileges in ACS.
Any idea??
Kathy

Login as the same user, use the same responsibility and then try to do the exact same update (item/field/value) using the screen.
Then use the api.
Make sure you add a line to set the context properly before calling ego_item_pub.
I did not see that in your code.
something like
fnd_client_info.setup_client_info(&appl_id, &resp_id, &user_id) -- replace the variables with the appropriate value
Hope this helps,
Sandeep Gandhi

User does not have authorization for InfoProvider

Hi,
We are in BI 7.0 and want to display the data in the cube that I created and loaded data to. In RSA1, I am do a right click on the cube and select "display data". I am getting to selection screen and after selecting the output fields and executing, I am getting the following error:
User XXX does not have authorization for InfoProvider ZFREDC
The long text is like this:
You do not have sufficient authorization
Message no. EYE007
Diagnosis
You do not have sufficient authorization for the requested data records.
Procedure
Either select other data or get the required authorizations from your administrator.
I did a authorization check in SU53 after I got the error and it says the last authorization check was successful.
Can somebody suggest me what to do. If there are any authorization objects that I need to have in my role?
Thanks.

Hi,
Be sure to have authorisation object S_RS_ICUBE assigned with at least activity 03 (execute) and subobject data and agregate for the respective cube(s) or infoarea(s).
Regards, Patrick Rieken.
Message was edited by:
Patrick Rieken - BI-Formance B.V.

CREATE USER, User does not have permission to perform this action.

-- first, connect to the master database
CREATE LOGIN login1 WITH password='Qwerty12345';
CREATE USER login1User FROM LOGIN login1;
EXEC sp_addrolemember 'dbmanager', 'login1User';
EXEC sp_addrolemember 'loginmanager', 'login1User';After, I connect to database 'master' with 'login1User' and execute:CREATE LOGIN login2 WITH password='Qwerty12345'; - okCREATE USER login2User FROM LOGIN login2; - User does not have permission to perform this action.

Hi Vit007,
Please check the two database role: 'dbmanager' and 'loginmanager'.
CREATE USER Requires ALTER ANY USER permission on the database.
Iric Wen
TechNet Community Support
select rm.*, dp2.name AS 'User', dp1.name AS 'Role' from sys.database_role_members rm LEFT JOIN sys.database_principals dp1 ON rm.role_principal_id = dp1.principal_id LEFT JOIN sys.database_principals dp2 ON rm.member_principal_id = dp2.principal_id
role_principal_id
member_principal_id
User Role
6 8
login1 dbmanager
7 8
login1 loginmanager

User does not have sufficient permission(failed to execute submit operation)

Users are facing this error in my environment.Please tel why this error creeps up and how do i resolve it?
Please find error code below:-
Date:
Application:
Application
Version: 7.5.1561.116
Severity:
Error
Message:
Microsoft.EnterpriseManagement.Common.UnauthorizedAccessEnterpriseManagementException:
The user domain-name\user does not have sufficient permission to perform the
operation.
   at
Microsoft.EnterpriseManagement.Common.Internal.ServiceProxy.HandleFault(String
methodName, Message message)
   at
Microsoft.EnterpriseManagement.Common.Internal.ConnectorFrameworkConfigurationServiceProxy.ProcessDiscoveryData(Guid
discoverySourceId, IList`1 entityInstances, IDictionary`2 streams,
ObjectChangelist`1 extensions)
   at
Microsoft.EnterpriseManagement.ConnectorFramework.IncrementalDiscoveryData.CommitInternal(EnterpriseManagementGroup
managementGroup, Guid discoverySourceId, Boolean
useOptimisticConcurrency)
   at
Microsoft.EnterpriseManagement.ConnectorFramework.IncrementalDiscoveryData.Commit(EnterpriseManagementGroup
managementGroup)
   at
Microsoft.EnterpriseManagement.UI.SdkDataAccess.DataAdapters.EnterpriseManagementObjectProjectionWriteAdapter.WriteSdkObject(EnterpriseManagementGroup
managementGroup, IList`1 sdkObjects, IDictionary`2 parameters)
   at
Microsoft.EnterpriseManagement.UI.SdkDataAccess.DataAdapters.SdkWriteAdapter`1.DoAction(DataQueryBase
query, IList`1 dataSources, IDictionary`2 parameters, IList`1 inputs, String
outputCollectionName)
   at
Microsoft.EnterpriseManagement.UI.ViewFramework.SingleItemSupportAdapter.DoAction(DataQueryBase
query, IList`1 dataSources, IDictionary`2 parameters, IList`1 inputs, String
outputCollectionName)
   at
Microsoft.EnterpriseManagement.UI.DataModel.QueryQueue.StartExecuteQuery(Object
sender, ConsoleJobEventArgs e)
   at
Microsoft.EnterpriseManagement.ServiceManager.UI.Console.ConsoleJobExceptionHandler.ExecuteJob(IComponent
component, EventHandler`1 job, Object sender, ConsoleJobEventArgs args)

Hi,
Adding more questions...
Is the user submitting a form?
Which form?
Which scsm roles are the user member of?
Any data model customizations related to the process?
I've seen something like this before at one of my clients where a custom relationship was used. The problem only arose when the user tried to relate an incident to another object
using the custom relationship. Normally this shouldn’t be a problem but in their case it was.
Patrik Sundqvist Solutions Architect @ Gridpro AB Blog: http://blogs.litware.se

Participant 'userx' does not have role assignments in process '/ProcessP

Similar Messages

Maybe you are looking for