Problem in assigning users to groups.

Hello,
After upgrading to EP 6.0 when try to add users to the groups we are getting the following error
#1#com.sapportals.portal.prt.runtime.PortalRuntimeException: Access is denied: com.sap.portal.heartbeats.PortalHeartbeat - user: Guest,
Caused by: com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): com.sap.portal.system/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.heartbeats/components/PortalHeartbeat)
#1.#82A8E000B002007300000035001A50D400048912426E7075#1276611423793#com.sap.portal.prt.runtime#sap.com/irj#com.sap.portal.prt.runtime#philippe.lerch#1376##n/a##e1de2253788511df80f482a8e000b002#SAPEngine_Application_Thread[impl:3]_22##0#0#Error##Java###04:17_15/06/10_0052_27056650
[EXCEPTION]
#1#com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): com.sap.portal.system/security/sap.com/NetWeaver.UserManagement/high_safety/com.sap.portal.usermanagement.admin/components/UserAdmin)
Regards,
Vamshi

Vamshi,
It is a permissions issue, your guest user does not have the necessary permissions to do the task that you are trying to accomplish.
1. Navigate to the path shown in the error com.sap.portal.system/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.heartbeats/components/PortalHeartbeart and add the permissions
for the guest user here.
or
2. Try assigning the groups with a user administrator role.
Good Luck!
Sandeep Tudumu

Similar Messages

Unable to see assign users or groups option under a groupin Shared services

I have a bizzare issue related to Shared services.
In Application 1 (on PROD env), after I select the group, right-click and go to properties, under "group members" and "user members" tabs, I do not see the options to assign access to any of the existings groups (we have about 50+ groups). I can only view the existing users/groups, even though I have been given admin/proviosioning rights, while the other admin can assign access to the same application.
While for Application 2 (on DEV) I am able to see all these options and I am able to assign users and groups to any of the groups. I do not see them as a browser issue, as I have opened both these links on the same IE window, but on different tabs.
Unfortunately, I can't test App1 on TEST/DEV, as we do not have its copy on here, it is all on PROD and App2 is only on DEV.
Any ideas?
Thanks,
Paul

I would of thought it was provision related, can you try setting up another user as a test with the correct provisioning such as provisioning manager of the different product areas and see if the new user works.
If it does then it points an issue with your account or the way it has been provisioned.
Cheers
John
http://john-goodwin.blogspot.com/

Define and assign user authorization groups in FI

Hi All,
In order to allow some specific group of users to post in AUGR allowed periods, how do I define and assign user authorization groups in FI?
Thanks,
Teo

Hi Teo,
Here i am giving some authorisations in fi
F_AVIK_BUK FI Payment Advice: Authorization for Company Codes
F_BKPF_BED FI Accounting Document: Account Authorization for Customers
F_BKPF_BEK FI Accounting Document: Account Authorization for Vendors
F_BKPF_BES FI Accounting Document: Account Authorization for G/L Accounts
F_BKPF_BLA FI Accounting Document: Authorization for Document Types
F_BKPF_BUK FI Accounting Document: Authorization for Company Codes
F_BKPF_BUP FI Accounting Document: Authorization for Posting Periods
F_BKPF_GSB FI Accounting Document: Authorization for Business Areas
F_BKPF_KOA FI Accounting Document: Authorization for Account Types
F_BKPF_VW FI Acc. Document: Change/Display Default Vals for Doc.Type/PKey
F_BL_BANK FI Authorization for House Banks and Payment Methods
F_BNKA_BUK FI Banks: Authorization for Company Codes
I hope it will help.
BR,
Satya

Wat is assign/user tolerance groups

hi
can some one explain wat is "assing user/tolerance goups in img.how it works.and wat i should i consider when assing this tab to users

Hi Iqbal,
Tolerance group mean user level i mean Clerical leval
For Exam:1. Accountant level 2.Financial manager level like that. Accountant level some cash discount or some big amount can't able to give to vendor. But Financial manager level can possible.
the configuration path
IMG > Financial Accounting > Financial Accounting Global setting > Document > Line Item > Define Tolerance Group for Employees > then after configuration Assign User/Tolerance Groups.
Bharathi

Assign users to groups

How do i assign user groups. Like in defining numbering series or query it has to be specified that which groupwill be assigned to that paticular series or query. Now my question is where do we define that group 1= set of users.

Hi debraj bhattacharyya,
To set user group, please try the following:
1. Define Series:
- Go to Administration -> System Initialization -> Document Numbering.
- Double-click on the row number of the document type for which you want
to define the numbering. The Serials window opens. Here you can assign
number ranges to a group.
- Up to ten different groups can be defined.
- Only super users can create and maintain number ranges.
- A user who is not defined as a super user can only change the
definition of his or her own default number range, assuming he or
she is authorized to maintain number ranges at all.
2. Define Authorization:
In Administration -> System Initialization -> Authorization -> General
Authorization window, you select the user in the left and define his
authorization under Administration
->System Initialization -> Series - Group.
After the two steps above, a specific user can only view and add the
documents within the series which has been assigned to a specific group
that he has been fully authorized.
Hope it is helpful!
Regards,
Ivy

Assigning Users to Groups on LDAP thru EP

Hi,
I have configured EP6 SP7 with multiple LDAP(MS-ADS)servers. I can read/write the groups and users to LDAP through EP. But i cannot assign the users to groups through Enterprise Portal. Also if i assign users to a group in LDAP on LDAP server itself, these assignments does not show up in the portal. do i have to configure my dataSourceConfiguration_multiLDAP_db.xml file? if so then which parameter?
Please advise.
regards,
Hassan

Dear Hassan,
Need a clarification. If users are assigned to a group in LDAP, Can you see the same thing reflecting in portal?
I have configured LDAP as UME and I am able to see a group of LDAP appearing in Portal. But when I see the list of users assigned to this group, its empty.
Any clues or suggestions.
Regards,
Sreeram

How to use UME API to assign user to group ?

Hi all:
    I would like to write one jsp/ webservice to assign user to one group . Is there some example code ?
    the function can have 2 import parameter, userid, groupid, after the function is executed, the user and group is assigned
    Thanks a lot.

Hi,
Code is IGroupFactory     grpfact               = UMFactory.getGroupFactory();
          IUserFactory     userfact          = UMFactory.getUserFactory();
          IGroup               group               = grpfact.getGroup("GRUP.PRIVATE_DATASOURCE.un:Leave Pilot");
          IGroupFactory     grpFact               = UMFactory.getGroupFactory();
          int                nUserListSize     = strUsersList.length;
          for(int i=0;i<nUserListSize;i++)
                 IUser objUser = userfact.getUserByLogonID(strUsersList<i>);
                 grpFact.addUserToGroup(objUser.getUniqueID(),group.getUniqueID());

MAJOR Open Directory issue: Can't assign Users and Groups that DO exist!

Just noticed the following today:
When doing Get Info -> Permsissions on files/folders located on my File Server share, Owner and Group show as (unknown).
When I go into WGM -> Sharing, and look at files/folders on File Server share this way, the Owner and Group fields are blank.
When I attempt to (re)assign an Owner or Group by dragging them from Users and Groups section of WGM, error tells me User or Group no longer exists. These Users and Groups clearly do exist in WGM -> Accounts.
When I look at files on File Server share via CLI, instead of actual names for Users and Groups, I see their uid and gid's. Chowning via CLI fails as well.
I've noticed all Users and Groups with this issue are OD.
Server is xServe G4 DP 1.0 GNz/1 GB RAM/Mac OS X Server 10.4.7 Unlimited. This servers been running fine as an OD Master for months now. ACL's are enabled on this File Server share point. I've always had weird permissions issues, but NEVER the inability to assign OD Users and Groups to files/folders.
I'm at a loss here, not to mention my wits end.
Did my OD become corrupted?
Any and all help would greatly appreciated.
PowerMac G4 733 MHz Mac OS X (10.4.6) 512 MB RAM

When doing Get Info -> Permsissions on files/folders located on my File Server share, Owner and Group show as (unknown).
This means that the Finder can't find a match in the accounts/groups database for the numeric UID assigned to those files. Either the records associated to those accounts have been deleted, or the database is corrupt. In either case, you should restore a copy of it from backup.
(15686)

OBIEE+ Where do I assign user and group mappings to the repository objects?

Hi
I'm using the Oracle BI Administration Tool and I'm creating users and groups. Where do I map my users and groups to the repository objects?.
Regards,
Néstor Boscán

Hi,
I was reading your reply for this post. Could you please tell me in which tool you set the User security. I couldn't find Repository Admin in BI Administration tool.
Repository Admin > Manage > Security.
Any help would be appreciated.
Thanks in advance,
Ravi

Problems with assigning user to Purchase Group

Hi all!
I'm trying to set-up standard workflow WS 20000397 - Handling invoices blocked due to price.
Somehow I left something out as nothing is sent to my inbox when a invoice is blocked.
It starts fine but it can't find and agent when I check the log.
I've created an org. structure with a company, that has one organizational unit under it.
To this I've assigned a position and thereafter a user to this with my user ID.
Then I've created an assignment in PFOM whera I assigned SO T024 001 (Purch. Group 1) to my newly created Position.
I have found Purch group 001 using F4 so no mispellings could be the case.
In the container I can see that it has found the correct purchasing group (001) with my created position (the S-code for the position is even shown as an agent in the container)
Any suggestions would be appreciated.
Regards,
//Roland
Edited by: Roland Persson-Aglert on Dec 4, 2008 5:03 PM

Hi!
I'll paste the message below, I although found out that I had checked wrong TS, so I checked TS20000661 in PFTC and is set to "General forwarding allowed".
No agents found for this task -> long text
Message no. WO590
Diagnosis
The system could not establish any agents for the task underlying this work item.
The key of the task is: TS20000661
The key of the work item is: 000000404120
System Response
The system cannot assign work item 000000404120 to any agents - the work item does not appear in anyone's Business Workplace.
Procedure
Assign possible agents to task TS20000661 or declare the task as a general task.
Refer to your workflow system administrator.
//Roland

Problem while assigning user dynamically!!

Hi ALL,
I am doing a process for my understanding, I have a problem while dynamically assigning a user to a action. These are the steps that I followed.
I have created a process with one seq block.
-sec block
--Action 1(WD Form containing 3 Input/output fields)
--Action 2(WD form with some text,1 input-User Name)
--Action 3(wD form with some text, 1 input-User name)
--Action 4(wD form with some text, 1 input-User name)
I have mapped the output of the first form to the respective inputs of the actions.
I have also set the "Fill from context" with the input for the respective action.
When I run the process I give the unique user id as input. I get a error "Cannot complete action: The activity could not be read." I did this thinking that the user given as input will be assigned to the processor of the respective action. Correct me if I am wrong.
Kindly help me in solving this issue.

Hi,
Your main requirement is to assign the user to actions dynamically. But your way is not correct. Using sequencial block you can not do it. You need to use Parallel dynamic block and dynamic user assignment. Here is the clear step by step doc. Please open and go through it.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/fe43ced1-0c01-0010-10ae-bc49598b18f6
I think your requirement will be solved.
Thanks
Chandan

How to assign users to group during upload ?

Hi all,
we have to upload a lot of users into our EP6.
according to the documentation it is possible to assign those users to roles during the upload, but we want to use Group-Assignments instead of directly assigning roles to users.
Is there any possibility to assign groups instead of roles during a user-upload ?
The doc shows in the Standard-File-Format" the parameters <namespace>:<name> , may those be used for this purpose, when yes, then how ?
Thanx for any hints...
Stefan

Hi,
do you mean uploading role-group assignments or user-group assignments?
User-group assignments can be uploaded using the following format (extraxt from UME documentation - section: Standard Format):
[Group]
gid=HappyBuyers
gdesc=This is a group of all satisfied buyers
user=MarcPeters;JackSmith;Alan_Fox
Make sure that you upload the groups in a second step after you have already uploaded the users. The userIds you name in the property "user" must exist.
For uploading role-group assignments I don't know a way but usually you so not have that many ...
Best regards,
Oliver

Assign user external dir to group using MaxL

Hi
I have my essbase security sync with Shared services.
Now i want to assign user to groups using Maxl
Groups exist as Essbase native Groups
Users exist as corporate directory and are NOT native users
Now when i try to execute the following statement i get error saying 'user does not exist'
Alter user 'username@corporatedir' add to group 'nativegroup';
Is it not possible to assign users from external directory to native groups using Maxl?

Not specifed your version.
For 9.3.1 refer to page 103 for details. http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/hyp_security_guide.pdf
The file looks like
#group_children
id,user_id,user_provider
myNativeGroup,User1,myProvider
myNativeGroup,USer2,myProvider
myNativeGroup,nativeUser3,Native Directory
For better understanding, add one external user to a native group manually in shared services and then export using the utility.
Then the exported file format can be used for your import.
Hope it helps.

Reg:Assigning users to roles dynamically

Hi all,
i've different set of users for whom i can assign the roles based on their functionality. But the thing is that i can create them and add delta links in the portal. But i don't want to do this as manually .. and let me know in detail UME...
Can we assign roles to users based on some logic or conditions.If yes ...Please direct me how to do it..
Reply awaited....
Regards,
sitara
Edited by: sitara kola on Mar 8, 2008 2:47 PM

I do not know if this works for you but you can use virtual groups to automatically assign users to groups. Say you want to group users by department. Create virtual groups for the department attribute. Then assign the roles you want to assign to the marketing virtual group and the sales virtual group. When you create a new user and assign them to the marketing department, the user is automatically assigned to the marketing group as recieves the required roles.
See the documentation: http://help.sap.com/saphelp_nw04s/helpdata/en/43/fcfa2942ed7067e10000000a1553f6/frameset.htm
-Michael

How to reset users and groups in Server.app?

Recently after change settings in the Server.app (like turn off/on open directory, delete/add certificates), I got a strange problem:
In the users and groups list, it display all local users and groups (looks like system users and groups, about 100 users and groups, but this is a new server)
I tried reset the server.app by following
howto reinstall/reinitialize os x server
http://support.apple.com/kb/HT200271?viewlocale=en_US
These users and groups still showing there.
Have you seen this before and how can I completely reset the server.app to factory default so that I can start over the set up?

In theory, that should restore the users. You can do some surgery if you are really brave. But the reinstall generally should be enough.
These accounts are in the DSLocal data store. Basically, this is very similar to the any OS X machine. Apple keeps a default copy of the Local Database here:
/System/Library/DirectoryServices/DefaultLocalDB/Default
Should you need to reset a machine to the default local database, you can remove the current database (/var/db/dslocal/nodes/Default) and then copy the default one to the same location. I would not go this far unless the reinstall was unsuccessful.
To check, you can run this command:
dscl . list /Users
That will list all the Users in the local DB. To get a count, pipe to wc
dscl . list /Users | wc -l
On a Server that I just jumped on, I see 79 users and 111 groups (dscl . list /Groups | wc -l) But this is a system will man SACL groups so I likely have more than the default.
Hope this continues to help. Probably more info that you want.
Reid
Apple Consultants Network
Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store
Author "Mavericks Server – Control and Collaboration" :: Exclusively available in Apple's iBooks Store

Problem in assigning users to groups.

Similar Messages

Maybe you are looking for