PFCG, user comparison

Hi,
in PFCG trx there is a tab named user and a button "user comparison".
I cannot understand what is the function of that button.
After clicked it I can see that the warning icon on the abova tab becomes green.
Thanks
Best regards

Hi,
This tab does similier job as PFUD for reconcilation of profiles to users.
Yello tab of User Comparison indicates , though role is assigned to user , it is not up to date and needs to reconsile.
Green tab indicates , profiles assigned to user is up to date and have all required authorization granted.
Read Help guidelines :
Comparing user master records
o   The user master record comparison that is run automatically by
     report PFCG_TIME_DEPENDENCY can also be executed manually for a
     single role. To do this, choose Compare users on the Users tab. The
     status display on this pushbutton indicates whether or not you need
     to execute the comparison again.
     -   If you make changes to the users assigned to the role or
         generate a corresponding authorization profile, then you need to
         compare the user master records again.
     -   This compares the authorization profiles with the user master
         records, that is, profiles that are no longer current are
         removed from the user master records, and the current profiles
         are entered.
Regards,
Edited by: Rupali B on Mar 6, 2012 2:36 PM

Similar Messages

User comparison?

Hi all!!!
I am relatively new to SAP authorisation concept, ad i think i dont completely understand the idea of user comparison.
Am i correct:
- if i use SU01 to assign a role to a user there's no need to perform a user comparison
- if i assign user to a role i have to run user comparison. Before comparison,if you look into user master record the role is already there, but it is uncompared, and user dont have authorisations yet, though he can log on and see role menu.
What is the point of user comparison? what does it do apart from assigning profiles? if nothing, why is it so that user dont have roles authorisation immeadiately after assignin him to a role in pfcg?? What is the point? First i thought that it removes all profiles which are not connected to the assigned role..but i try to attach some profiles manually and did user comparison, wich didn't remove manually entered profiles...so..
Can anybody describe it using simple language?
Tanks!

Hi Stanislaw,
>
Stanislaw Adamski wrote:
> - if i use SU01 to assign a role to a user there's no need to perform a user comparison
Yes, that is correct. When saved through SU01, SU10, a UMR reconcilation is done for the user(s).
>
Stanislaw Adamski wrote:
> - if i assign user to a role i have to run user comparison. Before comparison,if you look into user master record the role is already there, but it is uncompared, and user dont have authorisations yet, though he can log on and see role menu.
>
Thats a very good observation. Even I didnt know that the role menu would be displayed. However, (technically) since its actually the profiles and not the assignment of roles that give authorization, a user or role compare is required. The assignment of profiles to users can be viewed in table UST04. SU01/SU10 updates the UMR to reflect the appropriate profile(s) of the role in UST04. PFCG does not do this, unless manually done. If not compared via PFCG, this compare is rectified on the next run of PFCG_TIME_DEPENDENCY.
>
Stanislaw Adamski wrote:
> What is the point of user comparison? what does it do apart from assigning profiles? if nothing, why is it so that user dont have roles authorisation immeadiately after assignin him to a role in pfcg?? What is the point?
User Comparison updates the profiles in the UMR, table UST04 ...and maybe many others! . I hope you are clear on assigning through PFCG now
>
Stanislaw Adamski wrote:
First i thought that it removes all profiles which are not connected to the assigned role..but i try to attach some profiles manually and did user comparison, wich didn't remove manually entered profiles...so..
Generated profiles should not be assigned via the profiles tab. It does not allow to do this, maybe on earlier versions, still does allow this. However, if you still do assign this, PFCG_TIME_DEPENDENCY will remove this assignment!
A standard SAP profile, or a manually created profile(through SU02) will not get affected.
Hope this clarifies
Abhishek

CUP Auto Provisioning Error 260: User Comparison

I am in the process of configuring the CUP 5.3 module within our ECC and SRM environments. I believe the path and associated stages are established properly. I have tested the auto provisioning functionality within both SRM and ECC. As it relates to SRM, the auto provisioning functionality works without a hitch. However, when I attempt to auto provision a user into our ECC environment, I receive the following error:
Auto provisioned for request on 04/07/2010 13:41
   New User: T00522 created on 04/07/2010 13:42 in System(s): DR4-300.
   User attributes changed for User : T00522 in System(s) :DR4-300.
   Role Provisioning failed for System(s) : DR4-300. Error Message : 260:User master comparison incomplete; see long text
Speaking with out security team, the only time they have seen this issue was when they attempted to map a user, using PFCG, to a role. However, I informed them that CUP uses SU01. They have not experienced such an issue using SU01 and clicking on the user comparison button.
Interesting point: The user record is created and roles assigned to user but have a red light indicator by the role within SU01. However, when the next day rolls around the role has been changed to a Green light, profile assigned and everything is looking good. Unfortunately, CUP can't seem to register this and when the Role Owner attempts to approve the role / user request again. The same error occurs and until I can get around this error, the workflow is not closed out nor is the requester notifiied.
Questions:
(1) How can I fix this issue, I assume it will require a security change to be made within the ECC environment?
(2) If this issue can't be fixed, can I get around this issue with a detour or other CUP error processing step?

Denoted below is the log that corresponds to the 260 comparison error. Does anyone know what access I am missing within the UME. I have tested this provisioning process, manually, and do not run into a Comparison error within the SU01 screens:
2010-04-27 13:44:54,748 [SAPEngine_Application_Thread[impl:3]_31] ERROR com.virsa.ae.service.ServiceException: 260:User master comparison incomplete; see long text
com.virsa.ae.service.ServiceException: 260:User master comparison incomplete; see long text
     at com.virsa.ae.service.sap.SAPProvisionDAO.executeRoleOperation(SAPProvisionDAO.java:1706)
     at com.virsa.ae.service.sap.SAPProvisionDAO.assignRoles(SAPProvisionDAO.java:1458)
     at com.virsa.ae.service.sap.ProvisionSAPUserDAO.provisionInNonCUA(ProvisionSAPUserDAO.java:1232)
     at com.virsa.ae.service.sap.ProvisionSAPUserDAO.provisionRole(ProvisionSAPUserDAO.java:932)
     at com.virsa.ae.service.sap.ProvisionSAPUserDAO.provisionUser(ProvisionSAPUserDAO.java:118)
     at com.virsa.ae.accessrequests.bo.ProvisioningBO.autoProvision(ProvisioningBO.java:216)
     at com.virsa.ae.accessrequests.bo.RequestBO.autoProvisioningForApprove(RequestBO.java:4572)
     at com.virsa.ae.accessrequests.bo.RequestBO.callAEExitService(RequestBO.java:5565)
     at com.virsa.ae.accessrequests.bo.RequestBO.callExitService(RequestBO.java:5339)
     at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:5191)
     at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:4984)
     at com.virsa.ae.accessrequests.actions.RequestViewAction.confirmRequestApproval(RequestViewAction.java:941)
     at com.virsa.ae.accessrequests.actions.RequestViewAction.execute(RequestViewAction.java:103)
     at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:271)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(AccessController.java:219)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
2010-04-27 13:44:54,927 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.accessrequests.bo.RequestAuditHelper : logMajorAction() :   : intHstId : 3068
2010-04-27 13:44:54,972 [SAPEngine_Application_Thread[impl:3]_31] ERROR no dtos exist which are in the same state as the passing dto
com.virsa.ae.core.ObjectNotFoundException: no dtos exist which are in the same state as the passing dto
     at com.virsa.ae.workflow.bo.WorkFlowBOHelper.getIfUnapprovedPathExists(WorkFlowBOHelper.java:2662)
     at com.virsa.ae.workflow.bo.WorkFlowBOHelper.handleWFForNewPathStage(WorkFlowBOHelper.java:2516)
     at com.virsa.ae.workflow.bo.WorkFlowRequestRerouteHelper.rerouteRequest(WorkFlowRequestRerouteHelper.java:68)
     at com.virsa.ae.workflow.bo.WorkFlowBO.rerouteRequest(WorkFlowBO.java:614)
     at com.virsa.ae.accessrequests.bo.RequestBO.rerouteRequestForAutoProvisioningFailure(RequestBO.java:6897)
     at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:5239)
     at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:4984)
     at com.virsa.ae.accessrequests.actions.RequestViewAction.confirmRequestApproval(RequestViewAction.java:941)
     at com.virsa.ae.accessrequests.actions.RequestViewAction.execute(RequestViewAction.java:103)
     at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:271)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(AccessController.java:219)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
2010-04-27 13:44:55,394 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.accessrequests.actions.RequestViewAction : confirmRequestApproval() :   : setting context to true, ending context
2010-04-27 13:44:55,414 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.dao.sqlj.RequestDataForwardDAO : findTransactions() :   : sbQuery : SELECT REQNO, REQPATHID, STAGE_NAME, FWDED_BY, APRVRID, ITERATION, FORWARD_TYPE, STATUS FROM VIRSA_AE_RQD_WPFWD WHERE REQNO = ?
2010-04-27 13:44:55,486 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.dao.sqlj.SAPConnectorDAO : findAllActiveSAPConnectors :   : going to return no of records= 3
2010-04-27 13:44:55,495 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.dao.sqlj.OracleAppsConnectorDAO : findAllActiveORACLEConnectors :   : going to return ImmutableList(empty)
2010-04-27 13:44:55,498 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.dao.sqlj.PACSConnectorDAO : findAllActivePACSConnectors :   : going to return ImmutableList(empty)
2010-04-27 13:44:55,502 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.dao.sqlj.WSConnectorDAO : findAllActive :   : going to return ImmutableList(empty)
2010-04-27 13:44:55,505 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.dao.sqlj.ApplicationDAO : findAllForContext :   : going to return ImmutableList(empty)
2010-04-27 13:44:55,532 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.dao.sqlj.RequestDataSODConflictDAO : findAllForContext(SqljContext ctx) :   : going to return ImmutableList(empty)
2010-04-27 13:44:55,535 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.dao.sqlj.RequestDataSODConflictDAO : findAllForContext(SqljContext ctx) :   : going to return ImmutableList(empty)
2010-04-27 13:44:55,540 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.dao.sqlj.RequestDataMitigationDAO : findAllForContext(SqljContext ctx) :   : going to return ImmutableList(empty)
2010-04-27 13:44:55,579 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.accessrequests.actions.RequestViewAction : pageLoad() :   : INTO the method
2010-04-27 13:44:55,580 [SAPEngine_Application_Thread[impl:3]_31] INFO com.virsa.ae.accessrequests.actions.RequestViewAction : pageLoad() :   : request number : 154
2010-04-27 13:45:14,055 [SAPEngine_Application_Thread[impl:3]_18] INFO com.virsa.ae.dao.sqlj.RequestTypeDAO : findAll :   : going to return no of records= 20

ABAP Program: User comparison

Hi all,
I would like to know the name of ABAP report that can enable me to perform user comparison after I have created a new role and added to user.
thanks

Hi,
You can use the program RHAUTUPD_NEW or goto the transaction PFCG->Utilities-> Mass Comparison.
Hope it helps.
Regards,
Gaurav

User Comparison - Job showing output deleted users in Sol.man

Hi All,
I scheduled the User Comparison job for every 4 hrs with respective of the program RHAUTUPD_NEW. In the output it is showing me the list of deleted users as well. like "User EAMANITR does not exist" in Sol.man.
I am sure it is not a problem, but want to knwo what the job output showing this list as well.
let me know if any one come up with this issue.
SV

Hi,
Have you checked OSS note 1280891?
Cheers

User Comparison made easy?

Hello all --
Sorry if this is an old and already answered question, I did some searching but nothing came up.
Is it possible to do a "User Comparison" in bulk, or to schedule that as a background job? I find myself go through many roles and check the user comparison manually, but it seems like there should be a way to automate that. I am not that clear on what it actually does, although I believe it applies changes made somewhere.
Thanks in advance...
MMPP

Thanks Raghu for your reply, and sorry for posting in the wrong forum.
May I ask you for further details regarding your comment?
Raghu wrote:
This can play havoc with authorizations if you do not use it properly.
How is this different from running the user master comparison from within the role? How would you avoid using it "improperly"?

PFCG User Compare log display window aftter EHP5 upgrade.

The Implementation partner's basis team applied EHP5 to our systems just recently.
While I click on PFCG User compare button, there is log disaply window shows up aftter the user compare is completed.
Any suggestions how can I deactivate, this window to pop up after user Compare is completed
Thanks,
Praveen

What have you tried so far?
E.g.: Did you read the release notes relating to this and search SAP notes? In ABAP you can almost always look at the code to see your options and the cause of program behaviour (together with an ABAPer if need be).
Cheers,
Julius

User Comparison - Roles contantly going to 'red' inactive

Hi,
Can someone shed some light on this issue i'm having here.
I noticed today while working with a user in SU01 that the role assigned to the user switch from green 'active' to 'red' inactive. There were updates made to the master role and then passed to the child (derived) roles. I manually ran user comparison and then verified in SU01 that the roles were still green. Couple hours later I noticed the child role went to 'red' inactive. Why is this happening. This happened and I took at as one time incident but this happening more frequently.
-Wes

Could be...
According to Wes's Business Card he (?) is from the US and for some reason (probably the training documentation in ADM940...!) I have more often than not noticed that US based systems tried to allign the profile names to the "activity group" names when building little single roles - sometimes one role per transaction - as "building blocks" for activities clubbed together into composites.
@ David: I also hate composites...
Unless Wes clarifies, I would however still place my bets on a profile name collision as a result of the DEV, QAS and PROD having the same first and third characters in the SID name, or a client disorder in DEV from which the roles are being transported (e.g. "golden security client" implemented later than the productive client transport routes, or a customizing client was used to make the changes).
AGR_NUM_2 has MANDT as a key field and with derived roles and small singles the limit can be reached with ease, particularly if these were download / uploaded in the past to avoid transport request sequence confusion - which is reasonable in my opinion.
Cheers,
Julius

PFCG - Users Tab - Red color

Hi Team,
we are facing a problem where in for a specific role in PFCG - the users tab is in red color and we had done a user compare and the result is user master record for the role was adjusted but still the color fpr the role is in RED COLOR.
Could you pls let know how exactly we can change the color to green.
Regds,
Satyanarayana N.

Please try following:
1.      Start transaction PFUD.
2.      Specify the roles that you want to use for the comparison.
3.    Schedule or check job for the full comparison
Here you can start report PFCG_TIME_DEPENDENCY by specifying the time when the job is to start. The overview displays the status of background jobs that have already been scheduled.
If you schedule the report PFCG_TIME_DEPENDENCY daily before the start of business as a total comparison and it runs error-free, the authorization profiles in the user master are up-to-date every morning.
If you choose this action, all four processes types are always included, regardless of your selection under Processing Type. To execute only certain processing types of the comparison as a background program (for example, with the aim of improving runtime behavior), choose Perform User Master Comparison and the desired processing types. Then choose Save, to schedule a variant of the program RHAUTUPD_NEW.
○       Performing the User Master Comparison
With this action, you start the user master comparison in dialog for individual roles.
regards,
Rajan

PFCG & User Profile

Hello everyone,
I'm writing to ask information about "business roles" and "PFCG".
It's my first experience with SAP CRM, and i've some problem to understand how can modify a PFCG for a business role.
Now I explain my problem :
i have an organizationa unit with 3 level, and each level have a different user associated..so my problem is that, in wich way can I assign different authorization for each 3 differen users? in my case, I use SAP_CRM_UIU_SALES and i don't undestand the way to for example, block last level to see the datas of upper level..
Thank You

You can use the same business role for all 3 levels, because with business role yu just define what users see on graphical interface.
But with pfcg role you acctuly define which data users can see. And for that purpose you will have to define 3 different pfcg roles. You define what each level will be able to se in the following authorization objects: CRM_ORD_LP, CRM_ORD_OE, CRM_ORD_LP.
Regards.

User Comparison Error

Hi TEAM,
When I assign the role to a particular user, after assign the authoraization into that role then I am trying to compare the user from list and select the complete user comparrison - It's not get get assiging...It gives the info like - Information for user master comparrison - "User master record not yet been compared completely" and
Also gives that info box stating that user is locked by administrator. But I chked the user id is not at all locked any open object also by administrator.
Any one plz clarify this error --
SYSTEM INFO : R3 ENT 4.7.0 IDES
DB : SAPDB
Regards,
KAM

Hi TEAM,
When I assign the role to a particular user, after assign the authoraization into that role then I am trying to compare the user from list and select the complete user comparrison - It's not get get assiging...It gives the info like - Information for user master comparrison - "User master record not yet been compared completely" and
Also gives that info box stating that user is locked by administrator. But I chked the user id is not at all locked any open object also by administrator.
Any one plz clarify this error --
SYSTEM INFO : R3 ENT 4.7.0 IDES
DB : SAPDB
Regards,
KAM

BDC for PFCG for deletion of user roles

I need to create a BDC for deleting users from roles in PFCG transaction and after deletion you have to click on User comparison in User tab.
Any idea how to compare and delete theusers from role.
It comes in Table control.
1)delete from table control .
I have not been able to see delete from Table programs.
George

Hi
U should consider PFCG trx is enjoy trx so it's not suitable for BDC, what doesn't mean you can't do a BDC program for that trx but it won't be easy.
Anyway you can know the users assigned to certain profile reading table AGR_USERS. I believe PFCG shows them sorted alphabetical, so you can know the position where an user should be, after u should use PAGE UP and PAGE DOWN command to scroll the table control.
Max

PFCG - Add users

Hi,
my requirement is to add users for a role in PFCG transaction and then do the user comparison. Can any one tell whether a FM or BAPI exist to do this.
In PFCG Transaction.
enter ROLE -> press change button -> go to users tab -> Add user IDs here -> then save and press 'user comparison' button.
thank you very much for your reply
Sree

Hi,
could you please check BAPI_USER_PROFILES_ASSIGN. & BAPI_JOBROLE_CLONE copy it & it will creates a User Role in other system.
Thanks,
Abhijit

PFCG U ser Comparison

We recently changed authorization to our existing users, we took out tcode PFCG to the user that assigns roles. However, gave them access to tcode SU01 to assign roles, but when he goes to do user comparison he gets a message that reads "No Authorization to PFCG" I tried giving him access to authrzation object S_USER_GRP but it did not work.
I stehre a way to do such authorzation without giving autjorization to PFCG? or restrict the access to PFCG to just be able to di user comparison?
Regards,
Frank

Hello,
check also the SAP library under Identity management, at this link you shoul find explanations regarding the set up of administrators with different tasks in user, profile and roles administration:
http://help.sap.com/erp2005_ehp_02/helpdata/en/52/671595439b11d1896f0000e8322d00/frameset.htm
"Identity management --> User and Role administration of AS ABAP --> Configuration of user and role administration --> First installation procedure --> Setting up user and authorization administrator".
Best regards,
Andrea
Edited by: abrusa on Feb 22, 2010 5:08 PM
Edited by: abrusa on Feb 22, 2010 5:11 PM

Error : User master comparison incomplete

Dear All,
I am working on a CUA system. I have modified an existing role(it was a requirement to change Material Mvt typ) and transported to QA system. then run PFCG_TIME_DEPENDENCY.
But when I check user -> and roles using SU01, I see the role I transported is in RED color. but then when I try to do a user comparison I got new error user "Maximum profile exceeded for user ABCXX" , because of this error I cannot complete user comparison.
I also tried PFUD -> Cleanups first, then Profile matching unfortunately it still gives User master comparison incomplete.
Is there a alternative way to compare users except "ABCXX" which has "Maximum profile exceeded for user" or how do I skip this message and complete user comparison ?

Souyee,
If user needs access,then remove unimportant tcodes from the user menu.
or
If you have similar user id , without profile issues,then you can copy that id .(i.e if it is happening for only one user id)
NOTE:
even if you are able to do the user comparsion,Some of our users are not able to execute some transaction codes, even though the required roles are granted. these type of problems will occur.
Other option is:
you need to identify the profiles assigned and ensure that they are below 312, as you canu2019t assign more than 312 profiles to a SAP User ID.
If the issue happens even with very few profiles, verify the Number of authorizations in User Buffers value in the Instance profile. The value for Auth/authnum ber_in_userbuffer parameter can be increased_. The size of the buffer must always exceed the maximum number of authorizations as authorization checks are made only against those in the buffer. The default value is 800, but this can be set to a value which is between 1u20132000.
What happens when an instance profile parameter is set outside it's range ?
Note: Take the help of basis guys,if at all you need to change the Instance value.
Thanks,
Sri

PFCG, user comparison

Similar Messages

Maybe you are looking for