SAP IdM 7.2 SP6- Future dated role assignments not showing in the UI

Hi All
After assigning a role to an identity with a valid from date in the future it is not visible in the UI.
I've tried to configure this in the MX_ASSIGNMENT attribute and also in task level (same attribute) but still no good.
It only shows the current assignments. The Advanced option does not do anything.
Is this due to SP6. Do we have to move to SP8 for this to work?
Please advise.
Ranjit

Hi Steffi
I've had success with this. I retested with the same settings (that I provided earlier) for the "change identity" task and it works fine. Then I tried the same with the "Display identity" task and it worked as well. However what I noticed with the "Display identity" task is that I actually had to choose the task rather than just look for the pending values in the initial screen - hope I'm making sense here . See below screenshots
When I choose the task "Display identity" I get the below which is what I wanted to see in the above screen as well.
Any ideas why I'm not able to see the pending values in the first screen (above). I have the same display task defined in MX_PERSON.
Your thoughts please.

Similar Messages

SAP MII 14.0 SP5 Patch 11 - Error has occurred while processing data stream Dynamic Query role is not assigned to the Data Server

Hello All,
We are using a two tier architecture.
Our Corp server calls the refinery server.
Our CORP MII server uses user id abc_user to connect to the refinery data server.
The user id abc_user has the SAP_xMII_Dynamic_Query role.
The data server also has the checkbox for allow dynamic query enabled.
But we are still getting the following error
Error has occurred while processing data stream
Dynamic Query role is not assigned to the Data Server; Use query template
Once we add the SAP_xMII_Dynamic_Query role to the data server everything works fine. Is this feature by design ?
Thanks,
Kiran

Thanks Anushree !!
I thought that just adding the role to the user and enabling the dynamic query checkbox on the data server should work.
But we even needed to add the role to the data server.
Thanks,
Kiran

Users are created but Roles are not Provisioned in the Target System

Hi,
It would be great if somebody would provided solution to my problem. The problem is when I try to create the Users in Identity Managment UI then the Users are created in the Target systems but the Roles are not provisioned to the Users.
In the provisioning job SetABAPRole&ProfileForUser,
It is says In the Error putNextEntry failed storing
Exception from Modify operation:com.sap.idm.ic.ToPassException: User does not exist
MSKEY 58437
Please note the When we create the User, the user is created however the Roles is not provisioned to the user.
Regards,
Hakim

Hello Nits,
since this thread is from 2010 and the OP was logged on last in 2012 (as you can see in the profile), I don't think you'll get an answer here.
Please create a new thread to explain your problem (with version and SP numbers, logs etc). You can add a link to this thread to show, that the problem is similar.
Regards,
Steffi.

The billing doc is not showing in the order documnet flow in SAP CRM 7.0

Hi CRM Experts,
Our CRM system has been upgraded from 4.0 to 7.0 recently.
We have come across with one strange issue; for some orders which are billed in ECC6.0 are not showing as next document in the CRM order under document flow in SAP GUI. Only preceding document and replicated document are showing in the CRM document flow.
Appreciate for yor valuable solution at the earliest.
Best Regards
Succhi

I have the same problem!!! Did anyone solve this???

Creating a custom role does not show up whe creating a user

On portal 10.1.4 I have followed the directions in 10.1.4 Oracle Server Portal Configuration Guide.section 6.1.6.9.1 Example: Defining a User Administrator Role.
However, the newly created role does not show up when I create a new user.
Any suggestions?

This is a bug in 10.1.2.0.2. It works if you create the group from the directory page OID

Role is not showing up in SUIM transaction

All
Z_PT_TRANS_ALL role was created for all
Display access.
When I go to SUIM
Roles -> By Transaction Assignment.
and search for roles this role is not showing up.
However, role does have the transaction in S_TCODE.
Please advise.
From,
PT.

Roles by transaction searches for roles in the menu, not roles in S_TCODE.
Use Roles by authorization values, enter S_TCODE object and the tcode in the field if you want to search for tcodes in S_TCODE.

SAP Standard ESS country structure not showing on the iViews

Hi All,
Some of the Fields in the SAP Standard Employee Self Service Country structure not showing on the iViews, if we want to bring those fields to iView level, What would be the solution.
Please suggest.
Thanks
PRadeep

Hi Pradeep
If these are mandatory fields or legall required in that country and delivered in V_T588M or V_T588MFPROPS then you need to check with SAP why they are not shown in the ESS scenario
If these are optional or R3 specific fields it could be they are not delivered in V_T588MFPROPS - try inserting
an overide in V_T588MFPROPC
If still you cannot get these fields you may need to add a field to the ESS application using NWDI
and you may also need to change the model so it recognises the new field - this is effectively changing
the SAP delivery
Best regards
Stuart

Role assignments not set in ABAP but IdM indicates OK status

Hi,
We went live with IDM 7.2 SP8 last month. We have started to see issues with Business Role assignments in target systems. Generally, BR assignments are parsed to respective privileges and assigned correctly. Sometimes privileges in one target will get assigned but not in another target. Occassionally assigning privileges to one target does not get through either. In all cases the IdM assignment is marked as 'OK', but when we check the backend the assignment is not there. Log entries don't show any jobs triggered for the target that failed to update (and consequently there is no log entries in that target either). But why would IdM mark the specific privilege as 'OK' status -- it should either remain 'Pending' or 'Failed' but certainly not 'OK'.
This effect is inconsistent -- it works correctly at times and fails at others -- increasingly more failures. There is nothing different about the users or environment. We see this in ECC, BW, GTS, etc. We have 36 prd and non-prd systems linked systems. Initially we thought this only affected prd systems as BR's only have prd privileges and the PRD targets are load-balanced. For non-prd systems the assignments are direct privileges, not BRs, and they are not load-balaced. We are now seeing this in behavior in all environments for BR's or direct privilege assignments, in prd and non-prd targets.
Since BR's have appovers we cannot remove BR's and re-assign in production. So for non-prd targets we have removed the privileges, those that indicated 'OK' but did not get set in the target, and reapplied -- the privileges get deleted successfully without any corresponding job being triggered and then when we re-add it the assignment goes into 'OK' status without any job being triggered.
When we tried assigning another user the same privileges it went through fine to the target and IDM marked 'OK' -- exactly as it is supposed to work (non-prod privileges have no approvals).
We are not able to re-produce this in our DEV environment -- the targets are non-load balanced. The assignments work consistently, both BR's and privileges.
Has anyone seen such behavior by IdM?
Thanks for your thoughts.
Ashok

Hi,
Thanks for the suggestion. But ours was a different problem.
The issue was with a faulty reconciliation job that had been fixed. But it had done its damage before the fix and this caused the inconsistent behavior.
During the reconciliation job (to update changed and add new backend roles in IDM) various task trigger attributes get disabled and then re-enabled after the import. These disabled triggers did not get re-enabled for the privileges on some systems. And the reconciliation job was also delta enabled, so only new privileges, after the initial load, should have been impacted. But impact to many privileges -- all privileges of some target systems -- misled our investigation. The timing of the reconciliation job executions kind of added to the confusion and inconsistencies during the initial setup. But we finally tracked this down and wrote a custom job to fix the triggers for only the affected privileges. Assignments to all systems started to function successfully as expected.
Best regards,
Ashok

Roles are not updating in the GRC 10.0 System.

Hi
We had created Z role in ECC system and Ran the Sync Jobs in the GRC 10.0 System .
But the role created in backend System(ECC) was not updating in the roles of the GRC system.
Can any one provide right solution.
Thanks

Hi Wipro Basis Team
On running the sync job what are you expecting to occur when you say the roles are not updating in GRC System? I wonder if you are expecting a different outcome to the purpose of the sync jobs.
Regards
Colleen

ERM mass role import - not importing all the roles

Dear All,
We are configuring GRC AC 5.3 SP11and are currently trying to import roles into the ERM. The system reads the three files (roles, information, and organization" and the job is run in a "successfull" way. However, not all the jobs are being uploaded. For example, out of a total of 300 roles, only 24 roles were uploaded. Afterwards, I tried again to import the roles using the exact same files I initially used, but this time, 35 roles were imported. Does anyone know why this happens and how to solve it? Thanks in advance for your answers.

Hello Arias, There could be a couple of reasons:
1. If you have derived roles, possibly the child role was attempted to be imported before the parent role. During the first import, the child role failed but the parent role imported. Then, on the second run the parent role was already there and the child role could be imported successfully. The way I get around this is to first create a parent role extract/import, then do a child extract/import.
2. Potentially the same problem as above but for composite and single role imports. You could load the single roles first, then the composite.
Best Regards, Dylan

Calendar sync future appointments Google Calendar not showing up

I'm hoping someone can shed some light on this issue for me. My google calendar syncs fine with the appointments in the current year, however i have some future appointments 1-3 years out which i can't see in my BB but i can see them in Google Calendar via browser after i click "look for more" to show future dates.
Does BB10 only sync the current year appointments?

Here is the weird problem I am having. I have done the sync and followed the steps with the /syncselect link. However, I can get ONLY my sub calendars to appear in iCal and not my default (main) Google calendar.
I've removed the account from my mac, added it again, that didn't work. Then I removed the sub calendars, added those again (through sync select), neither of those worked. I even tried to add it in as a manual calendar using the long URL specific to the calendar with the /user at the end (CalDAV old settings) but that also didn't work.
Anyone else had this issue?

CRM 2007 Business Role IC_AGENT not showing the whole screen

Hi,
I set up CRM 2007 successful for a couple of standard roles like TPM_PRO, SALESPRO and SERVICEPRO. The system is working fine. Assigning the business role IC_AGENT is showing me an uncomplete screen. The area for navigation bar, the account info, the alerts and the communication information is blank. Has somebody an idea what is wrong?
Thanks and best wishes,
Andreas

Hi Prasoon,
unfortunatly I cannot help you. It is still not working. Luckly was that CRM 2007 we were just preparing for demonstration. So at the end we showed something different.
But next step what I would do is open an OSS message due to the fact that it is a standard role and it has to work.
Best regards,
Andreas

SAP IDM 8.0 Provisioning of group privilege assignments

Hi,
I set up Active Directory as a target system. I imported the new packages for Eclipse and did the initial load for AD (System privileges were created).
When I assign the PRIV:AD:ONLY privilege to an identity, the identity gets provisioned to AD.
When I assign the PRIV:AD:ONLY privilege to a group, the group gets provisioned to AD.
So far so good.
But when I assign the group to the identity I get the error in the execution log:
Cannot obtain mskey for group privilege PRIV:GROUP:AD:CN\=MY AD GROUP\,CN\=GROUPS\, DC\=DUMMY\, DC\=COM
The CN represents my CN in the Active Directory, but, I have no PRIV:GROUP:AD privilege?
so I can not provision group assignments to AD and I used only the default packages with no modifications.
And an additional question, when does the RDS for 8.0 comes out?
Are there some predefined approval processes like in 7.2?
Thanks, Patrick

Hi Jai,
Ahhhh
Thank you! you pointed me in the right direction, I disabled a few actions in the initial load job, including "WriteGroupPrivileges".
I had to disable the following Attributes: MX_INHERIT, MX_GROUP_INHERITANCE
I got the following error:
Value not legal for this attribute:Attribute: MX_GROUP_INHERITANCE" when storing attribute 'MX_GROUP_INHERITANCE=ONE'
Thanks for the fast help!
Patrick
Edit: Do I need for every Group in IDM a privilege for the target system?

Crystal report not showing all the table in SAP CRM

Hi
I am connecting crystal report 2008 using open sql connectivity (SAP table, cluster or Function ) with SAP CRM system. It is showing some of custom tables under "DD" but not all.
Wanted to understand what setting make a new custom table (transparent) to show under DD in SAP table, cluster or function connection
Help is greatly appreciated
Thanks
Padmanabh

Hi Rao,
Try to edit the following registry and check
HKEY_CURRENT_USER\Software\Business Objects\Suite 12.0\Crystal Reports\FetchOptions\NTablesMax
Give the value as 20000
Thanks,
Sastry

SAP FIORI LEAVEAPPROVAL - Scenario configuration does not show in the drop down list /GBHCM/LEAVEAPPROVAL ?

We are in GBHCM003 600 (SP 10). Do we need implement anything else? Do anyone know which SP, the UIHCM003 100 (SP 05) comes from ?
/GBHCM/LEAVEAPPROVAL is available in the ODATA services and i have added already.
Thanks Uma.

Hi,
Same problem. We have installed UIX01HCM and following the implementation information on Sap Help for Approve Leave Request
http://help.sap.com/fiori_bs2013/helpdata/en/88/a2675283776f2de10000000a44176d/content.htm
The information recommends using service /GBHCM/LeaveApproval (1)
We dont see this in our system.
1) How do we get this service?
If this is not the recommended service anymore:
2) where is the information or service for the new implementation?
Thanks,
Mark

SAP IdM 7.2 SP6- Future dated role assignments not showing in the UI

Similar Messages

Maybe you are looking for