Role problem

Hi All,
I created a Role for Profit Center Master transaction for a Company code XXXX with these K_PCA,K_PCAP_SET(KOKRS=XXXX),K_PCAR_REP(BUKRS=XXXX),K_PCAS_PRC(KOKRS=XXXX) giving my company code XXXX as the auth object but when i execute the transactions i could see the datas of other company codes too. Can anybody help me out to find where the problem is?
Thanks in Advance
Regards
Andrew.J

Hi Rao,
I have checked in the profile but there is no other auth obj controls these trans. is there any other trans which can give a complete detail of the auth objs used ina trans? like SU53.
Thanks in Advance
Regards
Andrew.J

Similar Messages

CM12 Reporting Role problems

I have been trying to resolve an issue where my central admin site which was assigned the reporting services role stopped working. SSRS was operating but there seemed to be a problem with the reporting user account. I did all sorts of stuff including allowing
this account the ability to logon locally and I still couldn't get past the issue. Basically I could see reports in both the web reporting console and the SCCM native console but whenever I attempted to run a report I received errors about unable to impersonate
the reportsuser account. I let months go by and just didn't use the reporting function but now I need it again and cannot get this thing working.
I decided to try and reinstall the role from scratch so here are the steps I followed:
1.) Removed the Reporting Services point role from my CA
2.) Deleted the folder named: SMS_SRSRP from the CA
3.) Opened Services console and stopped SQL Server Reporting Services for my database server
4.) Opened SQL Management Studio and deleted the ReportServer and ReportServerTempDB databases from my database server
5.) Restarted SSRS in Services and used Reporting Services Configuration Manager to recreate the native ReportServer and ReportServerTempDB (confirmed creation in SQL Management Studio).
6.) Created a new AD account for reports user so that there wouldn't be any issues using the old account and added the account to local GP on the CA to allow interactive logon and RDP logon
7.) proceeded through the Reporting Service point role in SCCM (being careful to run the console on the CA in a local administrative context). I observed that the file folder SMS_SRSRP was created and the reports copied to it.
8.) Ran IE as an admin and added the new reports user account and the SCCM administrator to the SSRS site and assigned roles.
It was at this point that problems became evident. The first thing I noticed was a strange behavior where the folder: ConfigMgr_MAD was being replicated with an extension of .OLD.# on a continual basis every few minutes. Also, if I open ConfigMgr_MAD I cannot
see reports (only the details for the folder).
The next thing that was evidence of a problem is that going into SCCM console to the Monitoring node and under Reports, there are no reports listed.
Furthermore I dug into the SSRS log and I found that the errors seem to indicate that there is a problem accessing a file location and the forward slashes seem to point to IIS as a problem (or at least that the file location is a virtual/web folder)
but I am not sure why this should be the case.
The context of this error from the SSRS log is as follows:
library!ReportServer_0-1!d70!02/12/2015-10:03:59:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.ItemNotFoundException: , Microsoft.ReportingServices.Diagnostics.Utilities.ItemNotFoundException: The item '/ConfigMgr_MAD/{5C6358F2-4BB6-4a1b-A16E-8D96795D8602}'
cannot be found.;
So it seems that the problems have to do with SSRS writing to IIS but that doesn't explain why SCCM console can't show the reports unless the issue is that both the web console and SCCM console use IIS to generate the report presentation. I might be way
off base with the path I have gone down but would certainly appreciate any help the community could provide. I really need to get this reporting services point operational again and I don't really have time or resources to rebuild my CA at this time.
V/r,
Chris Bolton

As I continue to troubleshoot I went so far as to remove SQL Reporting Services from my CA entirely, reboot and installed SQL Reporting Services again. I also removed the folders where Reporting Services existed before I reinstalled. I had hoped that there
was simply a corruption in SSRS that may be resolved through removal, reload and reconfig. The results were not as I had hoped and the problem persists once I had re-setup the Reporting Service Point in SCCM. I dug into the SRSRP.LOG file to see what it reports
and I found this (I have highlighted in bold where I think the problem items are):
Updating data source {5C6358F2-4BB6-4a1b-A16E-8D96795D8602} at ConfigMgr_MAD SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Successfully get report server from Registry SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Moved folder from /ConfigMgr_MAD to /ConfigMgr_MAD.OLD.9. SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Created folder [ConfigMgr_MAD]. SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Creating data source {5C6358F2-4BB6-4a1b-A16E-8D96795D8602} at ConfigMgr_MAD SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Invalid class SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Could not retrieve the reporting service name for instance 'MSSQLSERVER' SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Invalid class SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Could not stop the reporting service '' SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Next security configuration at [2/12/2015 3:26:14 PM] SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Root Folder exists SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
Successfully checked that the SRS web service is healthy on server CA-SCCM.mesainc.com SMS_SRS_REPORTING_POINT 2/12/2015 3:24:19 PM 5036 (0x13AC)
So this seems to indicate that there is a problem with the SSRS process locating the SQL instance and that the SSRS service cannot be accessed by ConfigMgr?
I am going to remove the Reporting Services Point role again and let this sit for a couple of days while everyone out there has a chance to ruminate on the issue.

Worker Role problems (doesn't work without debugging)

Hello,
I upgraded the OS Version up to 3 last week and everything worked OK. But yesterday worker role stopped working. Windows Azure manager showed that service started up OK. I tried to find problem in code and found out that Worker Role works just great during
the debug only.
Here is ServiceDefinition.csdef code:
<?xml version="1.0" encoding="utf-8"?>
<ServiceDefinition name="Workers" xmlns="http://schemas.microsoft.com/ServiceHosting/2008/10/ServiceDefinition" schemaVersion="2013-03.2.0">
<WorkerRole name="EventsProcessor" vmsize="ExtraSmall">
<Startup>
<Task commandLine="startup\regeventsrc.cmd" executionContext="elevated" taskType="simple" /> 
</Startup>
<Imports>
<Import moduleName="RemoteAccess" />
<Import moduleName="RemoteForwarder" />
</Imports>
<LocalResources>
<LocalStorage name="ZipContainer" cleanOnRoleRecycle="true" sizeInMB="12000" />
<LocalStorage name="CrashDumpsContainer" cleanOnRoleRecycle="false" sizeInMB="1024" />
</LocalResources>
</WorkerRole>
</ServiceDefinition>
Can someone please help? What should I check first?
Thanks!

Hi Alex,
Thank you for advice. I copied the exact connection string from the Azure Management Portal and Worker Role started to work.
Old connection string was:
connectionString="Data Source=xxx.database.windows.net;Pooling=false;Initial Catalog={dbName}; User ID={userName}; Password={password};"
The new one is:
connectionString="Server=tcp:xxx.database.windows.net,1433;Database={dbName};User ID={userName}@xxx;Password={password};Trusted_Connection=False;Encrypt=True;Connection Timeout=30;"
Anyway sometimes (very rarely... once in a 2-3 hours) I get next error:
"System.Data.SqlClient.SqlException (0x80131904): A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL
Server is configured to allow remote connections. (provider: TCP Provider, error: 0 - A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed
to respond.) ---> System.ComponentModel.Win32Exception (0x80004005): A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond"
Probably do you have some ideas regarding this?
Thanks a lot
Alex

Search Portal Roles problem

Hi,
I have a problem enabling the portal roles search. I have followed this guide:
http://help.sap.com/saphelp_nw04/helpdata/en/b2/d59a4271c80a31e10000000a1550b0/frameset.htm
The problem is that when i enable the portalRolesSearch in the index managemant service search does not work at all. I get the following error when trying to search:
Error during search occurred - com.sapportals.wcm.WcmException
Does anyone know what the problem might be?
Regards Thomas

Hello!
We get the same error. We are on Ep 6 SPS 15. Did you get any other information on this issue or have you opened an OSS call yet?
Regards, Christian

Dynamic Admin Role Problems - IDM7.1

Hi Everyone. I'm having problems getting a dynamic admin role to work correctly. No matter what I do I always get the error at logon that the user controls no organizations and has no capabilities. Here is how the admin role is configured.
General:
Type = Identity Objects
Assigners = blank (I have also tried configurator)
Organizations = Top
Scope of Control:
Controlled Organizations = Top
None for everything else.
Capabilities:
All caps assigned, no cap rule.
Assign to users:
Has the rule below assigned to it. If I check a user that is in the AD group mentioned in the rule, it gives me a '1', if I check one that doesn't have the group, a '0'
Rule:
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Rule PUBLIC 'waveset.dtd' 'waveset.dtd'>

<Rule authType='UserIsAssignedAdminRoleRule' id='#ID#Rule:IAM Admin Admin Role Rule' name='IAM Admin Admin Role Rule' createDate='1239044336520' lastModifier='Configurator' lastModDate='1248287397906' lastMod='26'>
<RuleArgument name='context'/>
<RuleArgument name='runAsUser'/>
<isTrue>
    <contains>
      <rule name='my_rulelibrary:get_DownCaseList'>
        <argument name='dnlist' value='$(runAsUser.accounts[AD].groups)'/>
      </rule>
      <downcase>
        <rule name='my_Configuration:IAM Admin Group Name'/>
      </downcase>
    </contains>
</isTrue>
<MemberObjectGroups>
    <ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
</MemberObjectGroups>
</Rule>I have also added the item below to the system configuration and reset the app server
<Attribute name='authz'>
            <Object>
              <Attribute name='checkDynamicallyAssignedAdminRolesAtLoginTo'>
                <Object>
                  <Attribute name='Administrator Interface'>
                    <Boolean>true</Boolean>
                  </Attribute>
                  <Attribute name='Service Provider User Interface'>
                    <Boolean>false</Boolean>
                  </Attribute>
                  <Attribute name='User Interface'>
                    <Boolean>true</Boolean>
                  </Attribute>
                </Object>
              </Attribute>
            </Object>
          </Attribute>Any ideas?

Hi,
the view handed to these kind of rules is created with the noFetch option set to true. As a result the AD groups of the user are not available during rule evaluation.
You could solve your task by doing a search using the FormUtil class.
I would however advise you to only do this in a small or demo environment as the usage of usermember rules does not scale at all. This is a pure sales feature that will quickly bring down a production environment with high CPU utilization and horrible response times. Unlike what one might guess these rules are not only evaluated during login but almost all the time, often multiple times for each click. Even if the rule as such only performs cheap operations the AuthCache class hogs more and more CPU time with each rule of this kind you add to the system.
Regards,
Patrick

User Role problems in Sun Java Application Server Platform Edition 8

I am having two problems setting up user roles in Sun Java Application Server Platform Edition 8. At first, I thought that it was a problem with the higher level features that I was using, so I created a very simple example using the simplest authentication I can use, but the problem still occurs. I am using the file realm and configuring the users in the App Server Admin Console. I create 2 users in different roles. One user should have access, the other should not.
1) The first problem is that both users can access the page
2) The second problem is that the isUserInRole() method returns false for both users with the role that it should be authenticating against.
Here is a sample of my code:
Users Configured in Console:
username password roles
user1 ********** admin
user2 ********** noaccess
web.xml
     <security-role>
          <role-name>admin</role-name>
     </security-role>
     <security-constraint>
          <web-resource-collection>
               <web-resource-name>My Protected Area</web-resource-name>
               <url-pattern>/*</url-pattern>
          </web-resource-collection>
          <auth-constraint>
               <role-name>admin</role-name>
          </auth-constraint>
          <user-data-constraint>
               <transport-guarantee>NONE</transport-guarantee>
          </user-data-constraint>
     </security-constraint>
     <login-config>
          <auth-method>BASIC</auth-method>
          <realm-name>file</realm-name>
     </login-config>
     <servlet>
          <servlet-name>
               TestServlet
          </servlet-name>
          <servlet-class>
               mypackage.TestServlet
          </servlet-class>
          <security-role-ref>
               <role-name>admin</role-name>
               <role-link>admin</role-link>
          </security-role-ref>
     </servlet>
     <servlet-mapping>
          <servlet-name>
               TestServlet
          </servlet-name>
          <url-pattern>
               /TestServlet
          </url-pattern>
     </servlet-mapping>
TestServlet.java:
          out.println("admin role: " + request.isUserInRole("admin") + "<BR/>");
Thanks before hand for any responses.
- Brian

Hi Jeanfrancois,
Your suggestion has lead me to find my problem. There were actually three problems.
1) First, you suggestion to reorder my xml file did not cause any errors to occur. I got suspicious that my web.xml file was wrong. I looked at some sample web-xml files and found that I was missing the header as follows:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC '-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN' 'http://java.sun.com/dtd/web-app_2_3.dtd'>
2) When I added this information, the deploy feature failed stating the my web.xml file was out of order. I fixed the ordering. It now deployed, but the security still wasn't working.
3) I then added the sun-web.xml file. This file was missing before hand as I thought it was unnessary. However, this file added the essential mapping from a role to a group. After adding this, it now started to work.
Thanks so much for you time and effort. You really did help me.
- Brian Blank

Role problems using RIMLoginModule

Hi all,
we are currently trying to execute an web application using the RIMLoginModule with a blackberry.
For this reason, we have to configure the module on: http://servername:port/webdynpro/dispatcher/sap.com/mba~com.sap.mbs.mso.main/MSOMain
Unfortunately, after calling this url, I logged on to the server, but he complains, that he does not find a user role in configuration database!
What is the problem?
We are having NW2004s SP15 Web AS.
Is it possible that the RIMLoginModule runs only on a 6.40? If yes, what kind of solution exists for systems >6.40 ?
Thank you for your help in advance.
Kind regards, Patrick.

You could try this- Tools -> Priviliges -> (Show Privilege for the ROLE not the USER), then see if "Desktop & Plus Privilege" is checked
I was just creating/removing EUL's in my test instance and the same thing happened to me.

Role problems

Our organization is beginning to implement roles and I was doing some testing. I added a role with following attributes in our SunONE 5.2 patch 2 directory:
dn: cn=role1,ou=roles,o=calgary regional health authority
objectclass: top
objectclass: LDAPSubEntry
objectclass: nsRoleDefinition
objectclass: nsSimpleRoleDefinition
objectclass: nsManagedRoleDefinition
cn: Role1
description: Test Role 1
The problem is, I can't see or search this role at all, even using the directory manager account!! The following command doesn't find anything:
ldapsearch -h XXXX -D"cn=directory manager" -wXXXXX -b "ou=roles,o=calgary regional health authority" "(objectclass=nsManagedRoleDefinition)"
Even if I change the filter to objectclass=*, it still doesn't return the entry? What gives? I know the schema is correct and schema checking is enabled and objectclass attribute is also indexed.

An example of the search that shows using (&(objectclass=nsManagedRoleDefinition)(objectclass=ldapSubEntry)) is in the Getting Started Guide for 5.2, http://docs.sun.com/source/816-6696-10/cmdline.html#14974
I admit DS has so many features that the volume of doc can be overwhelming at times.
Mark Craig
DS doc lead

BI Developer Role Problem

Hi all,
I installed the new 10.1.3.3 version of BI Publisher.
I created user with developer's account and when the user tries to edit a report it comes a error "The page cannot be displayed" with Internet explorer and "500 Internal Server Error" with Firefox
When I assign Administrator role everything is fine.
I didn't have such problems with the previous 10.1.3.2 version.
Can somebody who runs the 10.1.3.3 version help?
Thanks,
Ros

Hi Ros,
do you have any soultion found for this.
I have the same problem after update to 10.1.3.3 I get
"500 Internal Server Error
Servlet error: An exception occurred. The current application deployment descriptors do not allow for including it in this response. Please consult the application log for details."
I don't want to add the Administrator role to all developers ...
Is it a bug??? Can it be solved anyhow???
chrissy

Transport Role Problem

Hi Gurus!
I have a problem.
I need to transport a role from Test to Prod, but the role exists in Prod and the user create workbooks in this role.
How can I transport the role without afect the user workbooks??
- It Is a generated profile and i can't transport the profile through SU02
- I need to transport the role becasue the authorizations in the role are wrong
Any suggestion??
Thanks !!
Dani.

If the user has created the workbooks directly in production..
Then as far as I know you can not transport the role without replacing the existing workbooks in Production

Query Role Problem

Hi
I have built a role that should allow users to execute all queries but to to only change/delete there own query and i have done this using the ' enhancemets to the owner' by using the $USER option.
The problem is that whilst the role works fine it only allows the users to see the queries that they have created and doesn't display any others. This is a problem as when a user logs on they have no queries to actually look at unless they have created them
Users should be able to execute all queries but only change or delete their own.
Anyone have a good template for this or know how to solve it
Message was edited by:
        Andrew Watson

Can someone tell me what is missing
In RS_COMP
ActivityCreate or generate, Change, Display, Delete, Execute Include Assign
InfoArea *
InfoCube 0CCA_C11, 0COPC_C04, 0FIAP_C02, 0IC_C03,
Name (ID) of a reporting comp *
Type of a reporting componentQuery
in RSCOMP 1
Activity: Change, Display, Delete, Execute, Enter, Include, Assign
Name (ID) of a reporting compo *
Type of a reporting component Query
Owner (Person Responsible) for $USER
What happens is that as soon as I apply $user then only the reports that the user has created become visble infoareas. IS $user correct. if there are any reports in history then it says i cannot display this.I Presume because it wasn't created by the user.
Once again i need the user to display and execute everything but only change/delete their own queries.
At the moment i have just a blank box as the user hasnt created any yet??

DataSourceUserManager : role problem

Hi
I usually use apache-tomcat. I have a database with users and group data.
So now I am trying to secure my web application in 10gAS.
1 - I configured a data source
2 - Enterred group info in principals.xml
3 - Added security-role-mapping to orion-application.xml to map roles to groups.
4 - Defined the user-manager (DataSourceUserManager class) block to link it to my rdbms via the datasource.
The authentification is working, I can log in my Web application and it seem that in each request the user is binded.
The problem is, in my Web-xml i have security constraint contraining access to some page to specific roles. I'm unable to access any of these page whichever user I log in and having that specific role. Does orion not binding role to user correctly ? Does i forgot some config ?
Been 2 days I'm trying to figure why this is not working...

Hi
I tried what you said and its still not working, so here is how i configured it :
In all principals.xml files (i am hopeless) i added this
<principals>
<groups>
<group name="KnownUser" />
<group name="SystemAdministrator" />
<group name="Author" />
<group name="DataPublisher" />
<group name="CanEmbedCode" />
</groups>
<users>
</users>
</principals>
In the orion-application.xml of the j2ee application :
<principals path="principals.xml" />
     <user-manager class="com.evermind.sql.DataSourceUserManager">
          <property name="groupMembershipGroupFieldName" value="roleName" />
          <property name="groupMembershipUsernameFieldName" value="userLogin" />
          <property name="table" value="pnsUsers" />
          <property name="passwordField" value="password" />
          <property name="groupMembershipTableName" value="pnsProfilesRolesAgg" />
          <property name="usernameField" value="userLogin" />
          <property name="dataSource" value="jdbc/test1" />
<property name="debug" value="true" />
<property name="staleness" value="250"/>
     </user-manager>
I had the security role mapping in this file too but i moved them in the orion-web.xml of the web module as you said :
<security-role-mapping name="KnownUser">
          <group name="KnownUser" />
     </security-role-mapping>
     <security-role-mapping name="SystemAdministrator">
<group name="SystemAdministrator" />
     </security-role-mapping>
     <security-role-mapping name="Author">
          <group name="Author" />
     </security-role-mapping>
     <security-role-mapping name="DataPublisher">
          <group name="DataPublisher" />
     </security-role-mapping>
     <security-role-mapping name="CanEmbedCode">
          <group name="CanEmbedCode" />
     </security-role-mapping>
This can be sounds strange that my groups are in fact my roles too, but this is our reality to make things dynamic and it was working on old versions of 9ias.
When the security-role-mappings was in the orion-application.xml and instead of binding role to grp i was binding role to users, it was working, i had isUserInRole working perfectly. The data-source is working, thrust me.
Antoine Gilbert

CAU Cluster Role problem

Hi
I've got problem with run CAU on my Hyper-V cluster. It's look like one cluster resource is missing.
get-CauClusterRole -ClusterName thvc1
get-CauClusterRole : Could not get the state of resource "CAUTHVC18z2Resource": (Win32Exception) The cluster resource could not be found
At line:1 char:1
+ get-CauClusterRole -ClusterName thvc1
When I checked:
Get-ClusterResource -Cluster thvc1
Name
State
Adres IP klastra
Online
Monitor udostępniania plików
Online
Nazwa klastra
Online
Scale-Out File Server (\\THVC1CUA)
Online
THVC1CUA
Online
Virtual Machine Configuration W7-Pc1
Online
Virtual Machine Configuration W7-plwropc301                                Online
Virtual Machine Configuration W8-plwropc302                                Online
Virtual Machine Configuration WXP-pc1
Online
Virtual Machine Configuration WXP-plwropc300                               Online
Virtual Machine W7-Pc1
Online
Virtual Machine W7-plwropc301
Offline
Virtual Machine W8-plwropc302
Offline
Virtual Machine WXP-pc1
Offline
Virtual Machine WXP-plwropc300
Offline
So CAUTHVC18z2Resource is missing. So I can remove this role using
Remove-CauClusterRole.
How to clean this role and add it again.
Thank you very much for help.
Kind Regards Tomasz

Hi Jens_W,
Please install the Recommended hotfixes and updates for Windows Server 2012 R2-based failover clusters update, then confirm your Windows Remote Management service have configured
as Automatic.
More information:
Recommended hotfixes and updates for Windows Server 2012 R2-based failover clusters
http://support.microsoft.com/kb/2920151
Requirements and Best Practices for Cluster-Aware Updating
http://technet.microsoft.com/en-us/library/jj134234.aspx
I’m glad to be of help to you!
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Securityadmin role problem

I am creating a model in VB 2010 using datasets with SQL Server 2012 DBs. I recently had OS7 problems on my PC and had to create a new user account, transfering alll my files to the new account. In my old account I had no problem accessing the
data in my databases but in this new account I am not permitted even though I sign in as Administrator. I believe the problem is my "securityadmin role" but I don't recall how to access it or modify it to allow me to access my DB data.
I would appreciate any help. Thanks, Allen
DAllenCohen

I have gone through my permissions for the SQL Serverfolder. My account has Administrative privalages. I can access one of my instances of my server (but not another instance). However, when I try to open any of my databases I get a message
that "the database is not accessible. (object explorer)". When I open "Show technical details" I get the message listed below (under the ************). Also, I tried reloading or repairing SQL Server 2012 Developer from the
original disk and it would not accept the product key. Is there a time limit on the validity of the key on the same computer? I think in trying this that it switched me to a free verion. How can I get back to the original 2012 developer version?
Thanks for any help I can get.
Allen
Microsoft.SqlServer.Management.SqlMgmt.DefaultLaunchFormHostedControlAllocator.AllocateDialog(XmlDocument initializationXml, IServiceProvider dialogServiceProvider, CDataContainer dc)
at Microsoft.SqlServer.Management.SqlMgmt.DefaultLaunchFormHostedControlAllocator.Microsoft.SqlServer.Management.SqlMgmt.ILaunchFormHostedControlAllocator.CreateDialog(XmlDocument initializationXml, IServiceProvider dialogServiceProvider)
at Microsoft.SqlServer.Management.SqlMgmt.LaunchForm.InitializeForm(XmlDocument doc, IServiceProvider provider, ISqlControlCollection control)
at Microsoft.SqlServer.Management.SqlMgmt.LaunchForm..ctor(XmlDocument doc, IServiceProvider provider)
at Microsoft.SqlServer.Management.UI.VSIntegration.ObjectExplorer.ToolMenuItemHelper.OnCreateAndShowForm(IServiceProvider sp, XmlDocument doc)
at Microsoft.SqlServer.Management.SqlMgmt.RunningFormsTable.RunningFormsTableImpl.ThreadStarter.StartThread()
DAllenCohen

Home Role Problem

Hi SDN'ers
I have EP-7.00 SP17,standalone Java Stack with Data Soucre as LDAP.
As default, every new user is member of everyone group.
And everyone group is assigned Home (eu_core role)role.
Now problem is: For few users(created in UME Database) i have to de-assign that home role.
So i go in Identity Management via administartor login and select user, go to assigned groups and remove everyone group.
But it throws me an error and group doesnt get removed.
Error is : You are not authorized to assign one or more entities. Perform a new assigned entities search to see the correct status.
If i follow the other approach,
i go to everyone group, select the user .
Processing goes on for atleast 15-20 minutes and after this i find that Remove button is disabled for me.
KINDLY HELP ME OUT..
What could be the reason for such a peculiar behaviour...
Thanks n Regards
Chetna

Hi Chetna
Those are not errors you cannot modify the standard permission thats all.
You have to create a copy, else default it will be assigned to Everyone.
And as I replied before you cannot remove the user from Everyone group.
1. Create copy of role - dont worry about copy it uses same iviews there is no difference in iviews
2. Assign this role to all users you want.
Edited by: Yogesh Galphade on Mar 25, 2009 6:28 PM

Role problem

Similar Messages

Maybe you are looking for