Regarding BI Role Import in CMC

Hi all,
I have a problem while importing BI role in BOBJ. I am configuring BI with bobj using test user. After creating Entitled system in bobj, when I click on role import option it display the following error NO_AUTH . What could be a problem. My thought is the user does not have a proper user rights. What are the user authorization need to be assign for a user. Any input will be appreciated.
Thanks and Regards,
Senthil Kumar K

Hi,
the user entered there with password needs a well defined set of authorizations on the SAP system. You can find the details in the installation guide for the SAP Integration Kit.
Ingo

Similar Messages

GRC AC 5.3 SP5 - ERM mass role import error

Dear Gurus
I am customising ERM 5.3 SP5 and encountering the following error.
I have tried to search and find the forum for an analogous message, but unsuccessfully.
Thanks in advance for your assistance / support
Best regards
RONAN
Role Import Failed for SAP_CO_OM_XXXXX_XXXXXX_X :
2010-01-15 09:07:47,065 [Thread-315] ERROR com.sap.engine.services.dbpool.exceptions.BaseSQLException: ResourceException in method ConnectionFactoryImpl.getConnection(): com.sap.engine.services.connector.exceptions.BaseResourceException: Cannot get connection for 120 seconds. Possible reasons: 1) Connections are cached within SystemThread(can be any server service or any code invoked within SystemThread in the SAP J2EE Engine), 2) The pool size of adapter "SAPxxxDB" is not enough according to the current load of the system or 3) The specified time to wait for connection is not enough according to the pool size and current load of the system. In case 1) the solution is to check for cached connections using the Connector Service list-conns command, in case 2) to increase the size of the pool and in case 3) to increase the time to wait for connection property. In case of application thread, there is an automatic mechanism which detects unclosed connections and unfinished transactions.

Hello Ronan,
This is a connection error and can be rectified by your basis team (as mentioned by Alpesh) which need to increase the wait time. If you are just dealing with the configuration part, then I would say it is not an error resulting from Functional Config but Basis Configuration.
regards,
hersh.
Edited by: HERSH GUPTA on Jan 17, 2010 3:28 PM

CMC Authentication SAP - Role import Error

Dear All
I installed BOBJ Edge and Integration Kit SP5.
I am able to logon to the CMC Console . In the authentication I am able to see SAP.
I provided the Entitlement System detail and upon selecting the 'role import' tab i am getting following error.
OWN_LOGICAL_SYSTEM_NOT_DEFINED RAISED
can some one help me please
Regards,
Venkat

Dear All
I am getting exactly this error.
/jsp/auth/sapsec_import_role.jsp:22 19: 20: <% 21: String context=secSAPR3ImportRoleBean.getContextPath(); 22: secSAPR3ImportRoleBean.init(request); 23: response.setHeader("Expires", "0"); 24: %> 25: Stacktrace: )
Regards,
Venkat

Error on role import for SAP integration with BO in CMC (3.1)

Hello,
We are trying to integrate existing BO environment in our company with existing BW installation.
BO Environment - 3.1
BW/ECC Environment - (BW - BI 7.0 SP20, ECC 6.0)
So got the pre-requisites completed and the transports imported into both BW and ECC environments. Upon these steps we went ahead and installed the integration kit for 3.1 system.
There were no error messages, after we completed the installation went into infoview and in the authentication drop down checked to see if I can get "SAP" in there....which it did. So, I am assuming there were no issues till this point which we might have missed out.
Upon this, when I went into SAP authentication in CMC and double clicked on SAP and in the next screen clicked on "NEW" and added in the application server, system number, id and password and updated it...this automatically updated the logical system.
But when I go into the role import, it gives me the following error message....
Exception in JSP: /jsp/auth/sapsec_import_role.jsp:22:19:20: <%21:string context::secSAPR3ImportRoleBean.getContextPath():22: secSAPR3ImportRoleBean.init(request):23:response.setHeader("Expires","0"):24: 5> Stacktrace:
The only thing is we have not assigned the CRYSTAL_ENTITLEMENT role to it as we are at this point only trying to see if we can log into webi...
So, is it required to assign this role to an existing user id role in order for me to import the roles into BO CMC screen in order to be assigned to a group.
Can you please help me out on this.
Thanks
Dharma.

Hello Ingo,
Thanks a lot for looking into the question.
Yes, we are taking about the SAP Authentication part where I am trying to import roles in SAP into BO after I provide the login information in the Entitlement systems tab.
I confirmed that all parts of Java Connector configuration were taken care of as mentioned in the installation manual and from your blog.
The only piece left off is the CRYSTAL_ENTITLEMENT role assignment to the id which is used within the entitlement systems tab in CMC. I will get this configured and try it one more time.
Just to confirm,
1. The new user id to be created (should it be a RFC user or dialog user)
2. Is the only role to be assigned to the new user is CRYSTAL_ENTITLEMENT with the authorization mentioned in the installation manual
3. What are the roles to be imported into BO within CMC (are these the roles which we want for data access)
4. When a user tries to login with any other user id other than the one listed in Entitlement systems tab, does it use the roles assigned to that person in SAP to retrieve the data or would it be dependent on the roles imported into BO within CMC in earlier step.
Please let me know.
Thanks
Dharma.

Role Import Error In SAP Authentication

Dear Experts,
I have Installed BO XI R3.1 Integration kit for Sap Solutions.After Updating in Entitlement System,Options then while moving to Role Import i am getting error as shown below.
After Login to CMC>Authentication>SAP-->Role Import
SAP_CMINIT3 : rc=20 > Connect to SAP gateway failed Connect_PM GWHOST=biwdev, GWSERV=sapgw01, SYSNR=01 LOCATION CPIC (TCP/IP) on local host ERROR hostname 'biwdev' unknown TIME Wed Jun 08 11:03:00 2011 RELEASE 720 COMPONENT NI (network interface) VERSION 40 RC -2 MODULE nixxhl.cpp LINE 183 DETAIL NiHLGetNodeAddr: hostname cached as unknown COUNTER 110
1)Can you please tell me how to solve it?
2)Can you please give me links related to Single Sign On or documents ?

Hi,
are all transports imported in your SAP Back- End?
Can you ping your SAP Back- End from your BO Server?
With regards to SSO, you can have SSO from your SAP EP to BOBJ or from BOBJ to your SAP Back- End. Check the SAP ITK installation guide.
https://websmp203.sap-ag.de/~sapidb/011000358700000559912010E/xi31_sp3_bip_sap_inst_en.pdf
You need a S-User for Login.
Regards
-Seb.

Error when updating through "Role import"

Hi all
I get this error when I update through Home > Authentication > SAP > Role Import:
"An error occurred while communicating with the CMS.
The following error message was returned:
Error occurred in CSAPSecHttpRolePage::OnCommitRoles. Return value = -2147213817 (0x80041e07)j Failed to commit objects to server : Duplicate object name in the same folder."
Does this mean that I have duplicate users or groups? If this is the case, how come I get the error even if I remove all roles, update, and then add a role and update again? Then everything should have been cleared?
And the funny part is that the import of users seems to work, because I can log on to the InfoView using SAP authentication... But I don't like this error, and would like to get rid of it.
Best regards,
Martin Søgaard

Hi Sogaard,
when you remove all roles can you verify that all the user groups and users are being removed from the system ?
after removing the roles could you also delete the entitlement system and re-create it ?
Ingo

ARQ: Role Import does not show roles in the preview

Dear All,
Recently I upgraded our system to SP#14. Now when I try to import roles from NWBC->AM->Role Mass Maintenance->Role Import, it does not show roles in preview. Also, it does not import the roles specified. (either a range or full name of the role). It does not even give any error message.
I implemented SAP note#1897975 Role import does not show roles in the preview.
Still facing the same problem. Has any one faced this problem? Please suggest.
Regards,
Faisal

HI Faisal,
This note(1897975) you have to implement in Plug-in System, try to check the same once and let me know if it resolves our issue.
Regards,
Neeraj Agarwal

Import roles to the ERM without using the "Mass Role Import

Hello,
I want to know if there is another way to import roles to the ERM without using the "Mass Role Import.
Im'm using SAP GRC AC 5.3
Best Regards.
Pablo Mortera.

Hi.
There is NO other way to import roles..
We need to use only ERM for "Mass Role Import.
Regards
Gangadhar

Role Import in CUP

Hi
There are two options of choosing the source system for role import in CUP
1. Back end system
2. ERM
I am facing problems in importing roles in CUP from ERM. The system shows a successful import but the number of roles imported are Zero. However if I choose the Backend system as source system, the roles get imported in CUP.
can someone help me with this issue. I want to import roles from ERM because roles imported from ERM will have all the role attributes like Business process, Sub business process, functional area etc which are not available if we import roles from backend.
Regards,
Nitin

Hi Sahad,
Did you look at CUP logs? Is ERM and CUP installed on same server? Have you configured Business process and sub process exactly same as in ERM?
There are 2 ways to upload roles into CUP using spreadsheet:
1) Cumbersome method, if you don't have roles maintained in Excel: You can get R/3 roles via SUIM or some other method and manipulate them to match the role import template of CUP
2) Easy method : Import all the necessary roles into CUP via Backend. Once you have all the roles in CUP, go to 'Search Roles'. Click on 'Search' button without providing any search criteria. This will return all the roles available in CUP. Now, click on Export button. CUP will export all the roles into Excel spreadsheet in the format which CUP understands. Now, delete all the roles from CUP and play with the spreadsheet to manipulate other parameters like role approvers, systems, business process etc and upload that spreadsheet into CUP.
Both these methods require some manual work.
Regards,
Alpesh

Mass role import

Hi guys,
i have a problem with mass role import. When i want to do a mass role import the system warns me with the following error: Failed processing; role not imported and the log does not help.
Thanks in advance!!!
Kind regards!!!
Isaac

I attach the System Log
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]3b0c[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!ZAP:SOL_ANT_VIAJES_COMPEN-G102 : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]6f28[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!CO:RPTE_CO-LLAD : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]b79e[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!GL:VIRL_CTAS_CONTAB-ALL-CTRL : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]608b[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!TR:ADMR_DATOS_MTRO-G103 : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]b29c[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!GL:ANAL_VALU_MONETARIA-ALL : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]55c2[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!AR_SOL_ANTICIPO-I102 : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]8e78[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!Z_FI_TX_S_ALR_87012083 : ]
2010-04-08 09:10:54,772 [Thread-1507] DEBUG BackgroundJobHistoryDAO before inserting....[email protected]08f5[jobId=42,lastModifiedDate=Thu Apr 08 09:10:45 ART 2010,statusId=1,statusDesc=<null>,message=22805#_!ROLENAME#_!/VIRSA/Z_VFAT_ADMINISTRATOR : ]
2010-04-08 09:10:54,788 [Thread-1507] DEBUG BackgroundJobHistoryDAO before

ERM mass role import - not importing all the roles

Dear All,
We are configuring GRC AC 5.3 SP11and are currently trying to import roles into the ERM. The system reads the three files (roles, information, and organization" and the job is run in a "successfull" way. However, not all the jobs are being uploaded. For example, out of a total of 300 roles, only 24 roles were uploaded. Afterwards, I tried again to import the roles using the exact same files I initially used, but this time, 35 roles were imported. Does anyone know why this happens and how to solve it? Thanks in advance for your answers.

Hello Arias, There could be a couple of reasons:
1. If you have derived roles, possibly the child role was attempted to be imported before the parent role. During the first import, the child role failed but the parent role imported. Then, on the second run the parent role was already there and the child role could be imported successfully. The way I get around this is to first create a parent role extract/import, then do a child extract/import.
2. Potentially the same problem as above but for composite and single role imports. You could load the single roles first, then the composite.
Best Regards, Dylan

Error in Mass role import in Role Expert

Hi,
While configuring role expert, in mass role import ,I am able to import the bulk download file but its import is getting failed and error is "File is in invalid format"
If I alter the downloaded file, another error is generated saying "Cannot write to Upload Directory
ursula\sap_temp\ROLEIMPORT or Directory does not exist.
Please help me out!
Regards,
Anubha

Hi Michael,
I am not able to import the SAP roles properly.
I downloaded the roles from backend properly. But while importing them I am getting a list of backend roles and against each of them following message Error in processing role infomation. Role not imported.
What could be the possible mistake? I have set Upload Directory = ursula\sap_temp.
One more problem, while creating a new role I am able to reach successfully till the risk analysis phase. After that, as soon as I click on approval , i am getting message Error in creating request.
I suppose the control should go to Access Enforcer from here.I have already set AC Workflow URL for role approval in Configuration -> miscellaneous.
Thanks in advance!
Anubha

Error in Mass role import

Hi All,
I am trying to do a mass role import in ERM. We are using version 5.3 SP10. When trying to mass import the roles I get an error Enter a valid Enterprise Role Management Information File format. I am using the dumps form executing the program /VIRSA/RE_DNLDROLES. I am using the output in .txt format.
Is there any way to get around this issue.
Thanks,
Chinmaya

Hello Chinmaya,
You need to have the information file and the org file in .xls format. Kindly download this file from backend and then change the extension to .xls, modify it to check that data is arranged in proper columns and then save it as .xls format. Once you do that and try to upload this error will not come.
Regards, Varun

GRC 10 Role Import error(Master role does not exist) in SP12

Hi,
We have completed connectors part and ran sync jobs successfully.
We have given required inputs in Define Criteria,Select Role Data in Role Import.When we submit this,only few roles are successfully imported.
It is giving error like Master role does not exist(some roles) but it is successful for few other roles.
We have tried with SKIP option in role authorization source as per a note but it is not successful for all the role import and getting above mentioned error.
Please check and advice.
Thanks & Regards,
Koteswara Rao.

Hi Koteswara
Have you confirmed in SAP that your ZM* roles are definitely imparting roles only? When you tried to upload them on second attempt, did you relaunch the the role import screen to ensure any buffering completely cleared?
Another thing to try - import the master role and then exit NWBC and run the repository synch job. Go back to NWBC and attempt to import the derived roles to see if error is gone?
If these don't work for you it may be time to contact SAP. I assume it was the following note you referred to: 1576321 - Import derived role without master role
Also, this topic was raised in SCN last year (unfortunately the thread was not updated with the solution). Possibly reach to the thread owner and see if they will login to SCN and update it Role import failed with Master role does not exist in SP13
Regards
Colleen

Problem with Role import in GRC 10.0

Dear GRC Gurus,
I want to import roles from backend to GRC 10.0 system. for this I am using NWBC.
In NWBC --> Access Management --> Mass Role Maintenance --> Role Import --> in this age below OPtions are selected:
Role Selection --> Technical Role
Import Source: Role Attribute Source: User Input, Role Authorization Source: Backend System
Definition Criteria:Application Type: SAP, Landscape: nothing is shown in the dropdown, Source System: nothing is shown in the dropdown
Without Defining Landscape and Source system I cannot proceed further
Please advise why the system is not showing up the values in the dropdown.
I have maintained role status as production in SPRO.
I appreciate your help.
Thanks,
Swathi

Hi,
Sabita is correct.
Here is the link to the documentation
SAP Access Control 10.0
Simon

Regarding BI Role Import in CMC

Similar Messages

Maybe you are looking for