Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN

Dear All,
I am new to sap...
I tried installing SAP NETWEAVER 7.X SR3
While installing i got a error at phase 33 0f 50.
The error message is CJS-30196 Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN.
I am here copying the error log below..
Can some one guide me how to solve this.
I am using Oracle DB and Java j2sdkfb-1_4_2_24-rev-b06-windows-amd64.
Mine is a AMD processor.
Line:-----
Line:-----
SAPINST log file
Line:-----
Line:-----
INFO 2011-12-28 14:26:35.453
Creating file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\x.
INFO 2011-12-28 14:26:35.453
Removing file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\x.
INFO 2011-12-28 14:26:40.750
Creating file C:\Program Files\sapinst_instdir\x.
INFO 2011-12-28 14:26:40.750
Removing file C:\Program Files\sapinst_instdir\x.
INFO 2011-12-28 14:26:43.031
Copied file 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.xml' to 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.99.xml'.
INFO 2011-12-28 14:26:45.625
Copied file 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.xml' to 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.100.xml'.
WARNING 2011-12-28 14:26:57.656
Unable to get information about path
LABEL.ASC\ using GetVolumeInformation. Operating system error message: The filename, directory name, or volume label syntax is incorrect.
INFO 2011-12-28 14:27:02.875
Copied file 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/inifile.xml' to 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/inifile.34.xml'.
INFO 2011-12-28 14:27:03.156
Execute step
Component W2K_ServicePack_Check|ind|ind|ind|ind
Preprocess of component |NW_Onehost|ind|ind|ind|ind|0|0|NW_First_Steps|ind|ind|ind|ind|1|0|W2K_ServicePack_Check|ind|ind|ind|ind|2|0
INFO 2011-12-28 14:27:14.531
Copied file 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/keydb.xml' to 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/keydb.34.xml'.
INFO 2011-12-28 14:27:15.125
Copied file 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.xml' to 'C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/statistic.101.xml'.
INFO 2011-12-28 14:27:15.500
Execute step createJ2EEAdmin of component |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|2|0|NW_CI_Instance|ind|ind|ind|ind|11|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|3|0
INFO[E] 2011-12-28 14:27:16.281
FSL-02077 File system export (share) saploc does not exist.
INFO 2011-12-28 14:27:16.656
Removing file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\UserCheck.message.
INFO 2011-12-28 14:27:16.687
Removing file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\UserCheck.jlaunch.
INFO 2011-12-28 14:27:16.687
Creating file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\UserCheck.jlaunch.
INFO 2011-12-28 14:27:16.718
Creating file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\UserCheck.log.
INFO 2011-12-28 14:27:16.828
Working directory changed to C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS.
INFO 2011-12-28 14:27:16.828
Output of F:\usr\sap\D04\DVEBMGS00\exe\jlaunch.exe UserCheck.jlaunch com.sap.security.tools.UserCheck "C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install\lib;C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install\sharedlib;C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install" -c sysnr=00 -c ashost=VIJAYA04 -c client=001 -c user=DDIC -c XXXXXX -a checkCreate -u J2EE_ADMIN -p XXXXXX -r SAP_J2EE_ADMIN -message_file UserCheck.message is written to the logfile C:/Program Files/sapinst_instdir/NW04S/SYSTEM/ORA/CENTRAL/AS/UserCheck.log.
WARNING 2011-12-28 14:27:47.625
Execution of the command "F:\usr\sap\D04\DVEBMGS00\exe\jlaunch.exe UserCheck.jlaunch com.sap.security.tools.UserCheck "C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install\lib;C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install\sharedlib;C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\install" -c sysnr=00 -c ashost=VIJAYA04 -c client=001 -c user=DDIC -c XXXXXX -a checkCreate -u J2EE_ADMIN -p XXXXXX -r SAP_J2EE_ADMIN -message_file UserCheck.message" finished with return code 3. Output:
Dec 28, 2011 2:27:26 PM Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Dec 28, 2011 2:27:31 PM Info: Connected to backend system D04 client 001 as user DDIC
Dec 28, 2011 2:27:42 PM Info: Called for user J2EE_ADMIN
Dec 28, 2011 2:27:44 PM Info: User J2EE_ADMIN exists
Dec 28, 2011 2:27:46 PM Info: User can log on with the given password
Dec 28, 2011 2:27:47 PM Error: Exception during execution of the operation
[EXCEPTION]
com.sap.security.tools.UserCheck$MissingRoleException: Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN
     at com.sap.security.tools.UserCheck.checkUser(UserCheck.java:940)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:268)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:331)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
SAPINST Log:-
Dec 28, 2011 2:27:47 PM Info: Leaving with return code 3
INFO 2011-12-28 14:27:47.625
Removing file C:\Program Files\sapinst_instdir\NW04S\SYSTEM\ORA\CENTRAL\AS\dev_UserCheck.
ERROR 2011-12-28 14:27:47.640
CJS-30196 Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN
ERROR 2011-12-28 14:27:47.734
FCO-00011 The step createJ2EEAdmin with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|2|0|NW_CI_Instance|ind|ind|ind|ind|11|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|3|0|createJ2EEAdmin was executed with status ERROR ( Last error reported by the step :Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN).
Line:-----
Line:-----
USER CHECK LOG
Dec 28, 2011 2:27:26 PM Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Dec 28, 2011 2:27:31 PM Info: Connected to backend system D04 client 001 as user DDIC
Dec 28, 2011 2:27:42 PM Info: Called for user J2EE_ADMIN
Dec 28, 2011 2:27:44 PM Info: User J2EE_ADMIN exists
Dec 28, 2011 2:27:46 PM Info: User can log on with the given password
Dec 28, 2011 2:27:47 PM Error: Exception during execution of the operation
[EXCEPTION]
com.sap.security.tools.UserCheck$MissingRoleException: Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN
     at com.sap.security.tools.UserCheck.checkUser(UserCheck.java:940)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:268)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:331)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
Dec 28, 2011 2:27:47 PM Info: Leaving with return code 3
Thanks & Regards,
Vijay...

Dear All,
As the installation is not completed i could not login SAP.
I tried to create user at OS level and assign SAP_J2EE_ADMIN.
Doing so i am getting an popup saying an object SAP_J2EE_ADMIN cannot be created.
I am still in the installation phase.
Below is the User Check Log..
Dec 28, 2011 2:27:26 PM Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Dec 28, 2011 2:27:31 PM Info: Connected to backend system D04 client 001 as user DDIC
Dec 28, 2011 2:27:42 PM Info: Called for user J2EE_ADMIN
Dec 28, 2011 2:27:44 PM Info: User J2EE_ADMIN exists
Dec 28, 2011 2:27:46 PM Info: User can log on with the given password
Dec 28, 2011 2:27:47 PM Error: Exception during execution of the operation
[EXCEPTION]
com.sap.security.tools.UserCheck$MissingRoleException: Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN
     at com.sap.security.tools.UserCheck.checkUser(UserCheck.java:940)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:268)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:331)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
Dec 28, 2011 2:27:47 PM Info: Leaving with return code 3
Thanks & Regards,
Vijay..

Similar Messages

Not assigned to user group /SAPQUERY/H2

Dear Gurus,
I have assigne Tcode S_PH0_48000510 to a user but when she executes this TCode, she is getting an error that "Username is not assigned to user group /SAPQUERY/H2. How can I resolve this?
Chansa

Hi,
Assign the user name to the relevant user group via SQ03.
regards,
Dilek

ABAP Query : user is not assigned to user group

Hello All,
i have created user group using sq03 and assigned user name for change authorization in 'assign users and infosets'.
But when user tries to run query using sq01 system is giving message 'User XXX is not assigned to any user group'.
I tried every thing but facing same problem.
Could anyone please help me out .
Thanks

I actually assigned the user group to a role in SQ10. The user is assigned to the role. I also created a new post under Security which has more detail:
http://scn.sap.com/thread/3198604

CUA issue; after roles are removed systems assigned to users remain?

Hello,
I've had this specific issue with CUA for some time, but haven't needed to try and resolve until now.
The problem is this:
- after security roles for a user have been removed for an entire system, in the system tab entries remain.
- this results in the user account remaining in the child system, even though there are no security roles assigned.
I have tried removing system entries once all roles are removed, however after saving the changes I see that the systems still exist.
So, can anyone comment on why this happens? Is there an SAP note to resolve this?
Appreciate the feedback.
Paul

Paul Vipond wrote:
Thanks Julius.
My intention is not to delete users. What I'm expecting to happen is that after I remove all the roles assigned to user for a specific child system, that user should not exist in the child system anymore.
If you delete the system assignment for a child system, A deletion of the user in that system will happen.
Paul Vipond wrote:
This is the way it has worked for many child systems, but not all. For me it's specifically my production systems where a user account remains after all the roles have been removed.
In dev/test systems I've removed all roles assigned to a user and after saving their account no longer exists in those dev/test systems.
Make sense?
If that is so, that is a bug in your dev/test system. I suggest to open an incident wiht SAP then.
It should work like in a standalone system.... Removing all roles there will never lead to a deletion of that user!
b.rgds, Bernhard

Privilege not assigned to user despite being in user_attr

I gave net_privaddr to a user by using usermod on solaris 10. user_attr was changed as expected and correct defaultpriv was added for the user but when I su to the user and check
ppriv $$ I don't see the privilege and neither can I bind to privileged ports.
I believe it is using the correct user_attr as all entries in nsswitch.conf has only files entries.
What could be the reason? Can anyone tell me how to resolve this problem?
Edited by: user13755008 on Jan 16, 2011 6:04 AM

I did not modify any files. I just used
usermod -K defaultpriv=basic,net_privaddr username
I then checked in user_attr file and the changes were there.
When I log in as that user and run
ppriv $$
I just see basic privileges in both E and I sets.
When I try to run apache with this user it says cannot bind to privilege port as expected because net_privaddr. If i change the apache port to say 8080(in httpd.conf) it runs just fine. So the problem is that apache cannot bind to port 80 because the user dosen't have net_privaddr privilege. So, getting the user to have net_privaddr privilege is the problem. And I don't understand why the user is not getting the privilege.

Service Desk: Support Team Assignment from User not in a Support Team

I am working on configuring the Service Desk and all has been going pretty well until now.
The issue surrounds automatic assignment of Support Teams when a ticket is submitted.
In cases where people assigned to the org structure (PPOMA_CRM) submits a ticket, the support team is assigned correctly (via Rule 13200137 in PFAC_RESPO), but when an end user submits a ticket, it doesn't assign a Support Team.
I have not assigned end users to the org structure because they are not part of the support team and have been using PPOMA_CRM to only establish the support org structure.
So the question is what am I missing to configure SolMan 7.0 so tickets from general users are assigned to the appropriate support team?
Thank you,
Brian

Brian,
It sounds like you did not maintain the identification tab with the ibase for the end users. You have to list every system a user can create tickets for on their identification tab in the General Partner role.
It should look something like:
<system ID> <identification number> <client> <userid>
DEV 1234567890 100 BSMITH
QAS 1234567890 100 BSMITH
PRD 1234567890 300 BSMITH
the very left field's value should be CRM001 for all three.
You do not have to fill out the employee role for end users for the functionality you desire.
regards,
Jason

Workitem assignment on User workplace - FS-CM

There is a issue on workitem assignment to user(agent), there are more
workitem which is not assigned to user.
How to know exactly findout those workitem which is not assigned to
user(agent).
Where to find the user details to whome the workitem has been assigned.
Not finding the same in SWWUSERWI table.

I think you can give a try to the FM SAP_WAPI_GET_WI_AGENTS
SWL_WI_DISP_ACTUAL_AGENTS
SWL_WI_DISP_EXCLUDED_AGENTS
SWL_WI_DISP_POSSIBLE_AGENTS
SWL_WI_NOTES_DELETE_AGENT
SWL_WI_POSSIBLE_AGENTS_ASSGIN

CUP 5.3 sp7.1 - 049:Role assignment to user not executed completely

Hello Experts,
Message received in audit information:
049:Role assignment to user not executed completely
Can anyone help me with why I am receiving this message?
=[],id=6129,reqNo=201000139,actionDate=Tue Oct 19 10:40:27 EDT 2010,action=ROLE_PROVISIONING_FAILED,userId=U03776,path=,stage=,actionValue=PR4-300,description=049:Role assignment to user U10025 not executed

Hi,
Check that the connector that you have created is working fine and also the user ID that you are using in the backend system is within the valditiy date and all the required authorizations.
Use remote login and ensure that the user can login with out any issues and has all the required authorizations.
Rgds,
Raghu

When Role is assigned to User through membership rule then it's membership is not added to OID ?

Hi All,
I have OIM 11gR2 installed with LDAPSync enabled.
When tried to assign Role to User through membership rule, Role is successfully assigned to User in OIM, but it is not added in OID.
Role membership is added in OID when User requests Role through Catalog search. Also, Role membership is added in OID after running job 'LDAPSync Post Enable Provision Role Memberships to LDAP '.
How can I add Role membership in OID as soon as Role is assigned to User through membership rule in OIM ?

Hi
It sounds like you have not selected anything on the Presentation & Data tab of the Workspace Startpoint/User Service.
You need to specify:
Your Asset (the form you want to present to the user)
An associated Action Profile (tells the server how you want the form rendered...typically it is set to Default which uses the Render PDF Form process)
The variable to hold your data(typically an xml variable)
Make sure these are set.
Diana

SAP MII 14.0 SP5 Patch 11 - Error has occurred while processing data stream Dynamic Query role is not assigned to the Data Server

Hello All,
We are using a two tier architecture.
Our Corp server calls the refinery server.
Our CORP MII server uses user id abc_user to connect to the refinery data server.
The user id abc_user has the SAP_xMII_Dynamic_Query role.
The data server also has the checkbox for allow dynamic query enabled.
But we are still getting the following error
Error has occurred while processing data stream
Dynamic Query role is not assigned to the Data Server; Use query template
Once we add the SAP_xMII_Dynamic_Query role to the data server everything works fine. Is this feature by design ?
Thanks,
Kiran

Thanks Anushree !!
I thought that just adding the role to the user and enabling the dynamic query checkbox on the data server should work.
But we even needed to add the role to the data server.
Thanks,
Kiran

Assign multiple users to a single role?

I have a process where I need to assign multiple users to a given role. In this case, I want one of the users to 'win', and take ownership of the process step. (Imagine the situation where one user is the primary processor, the other is a backup; if the primary is out of the office, i want the secondary to have the ability to pick up the request).
I've tried to assign multiple users to the same process role as follows:
rtm.addRuntimeDefinedUserToRole(prInstance, roleName, user, userContext );
but the process is only assigned to a single user - from my testing, it seems to be assigned to the first user specified using the above api call.
Is there a way to do this programatically?

Hi,
Can you please advice how you did this?
I am using Visual composer as my UI. But with looks like i am not able to pass a structure from VC so i can map it to "Assign Users to Process role" CO.
Per my understanding I need to write a program using GPI API which populates the User_List structure of the above CO. But after that i am not sure how to use this CO. Can anyone give me detailed instructions on how to use the "Assign Users to Process role" CO to assign multiple users to the role dynamicallly?
Regards,
Kumar.

Event Handler not Triggered when user is assigned by Membership Rule

I have defined a post-processed event handler for RoleUser Entity.
The handler is triggered normally when a user is manually assigned a role.
However, it is not trigger, if users are assigned through membership rule.
I have tried both the single execute method and the bulk execute method.
OIM version: 11gR2

Hi,
Check the list of orchestration handlers triggered for this operation in the Diagnostic Dashboard. Check whether, if your custom event handler is present in the list. If its isn't, then there must be something wrong with your Plugin.
Thanks,
RK.

ERROR: "You are not assigned to a role" in BEx

Hi,
I have a user BEXUSER. In PFCG, I have assigned this user to a role ZR_USER_ROLE.
However, when I tried to open a query in BEx Anlyzer through Open > Workbooks > Roles toolbar, I could not find any workbooks assigned to this user.
Next, I tried to open a query using Open > Queries toolbar, I chose a query and tried to click Enter in Role icon. However, I am prompted with a message saying "You are not assigned to a role".
How is this possible when I have already assigned this user to a role. I have checked PFCG and confirmed that the particular role contains this user. Can someone explain about this?
Thanks

I am getting this exact same error, and the values that I have set in my query developer's job role are the following :
S_USER_AGR
ACTIVITY = 01, 02, 06, 22
ROLE NAME = {list of roles that the user should be able to save queries to}
S_USER_TCD
TRANSACTION CODE = RRMX
The user still receives the "you are not assigned to a role" error message when pressing the "save to role" button for a workbook.
In the ST01 authorizations trace, I see that the user is FAILING the authorization check for S_USER_AGR, but is failing the check for role names that he / she not supposed to modify.
So those failures are good, but they seem to prevent from saving the workbook to any role ...
How can it be setup so that the user can save workbooks to roles that were inteded to be saved to, without getting the "your are not assigned to a role" error when trying ?

Role are not effected to user

Hi to all ,
created user "test", by login to portal useing this "test" user, default Home role is dispalyed..
Now i created my Custom role .. i assigned this Role to user "test" in user administration.
i checked is assigned roles my customrole is assigned but it is not displayed in portal while user login.
is there any controls while assigning Roles.. to user ?

Hi Eswar,
Check the role permission.
Set the group Everyone for Read permission, and set the flags End User and Role Assigner.
Good Luck
Eduardo

EP Role assignment to User.

Hi,
I have recently installed EP. When i assigned a New role Created (role i created) to a new User, The Contents assigned to that role is not getting displayed. But, when i also assign a super admin role to the user, the content of new role is getting displayed along with the content of super admin role.
Infact, when i assign content administration role to the user, it is not geting displayed when i log in as a new user to which it is assigned. however, when i assign the super admin role to the user, the contents of content admin role is getting displayed.
Is there any Post EP Installation setting required to solve this issue.
Please help me in solving this issue?

Hello Shabir,
Initially all the contents can be viewed only if u have super_admin role. If u want to give access of any folder to a particular user, just open the permission editor of the folder and assign any particular role (say content_admin role) and select the end user checkbox.
Now assign the user the same role u have specified in the permission editor of the folder. Then the user can view that folder.
This will solve ur problem.
Regards
Deb
[Reward points for helpful answers]

Role SAP_J2EE_ADMIN is not assigned to user J2EE_ADMIN

Similar Messages

Maybe you are looking for