Two user with same profile and role having different authorization

Dear All,
I have very strange case of authorization . We have a new abap developer in our company . Her profile as copied from an exiting abap developer's profile in Development system. But she don't have authorization for lot of transaction that the existing user have. I checked the profile tabs , role tabs . then done the user compare for all the roles , but of no use.
I did a compare of the two uses using S_BCE_68001430 and could see is that the existing abap user is having authorization starting with T_PXXXXXXXX that is giving him extra rights. These authorization is not present in any of the existing role he is assigned to (checked using S_BCE_68001396). The authirsaction in the roles start with T-DXXXXXXXX
Will appreciate if any one can give any input . The problem is i need to assign each authorisation the existing user having manually to the new user.
regards
Tony

Thanks for the mail.
I check the "Reference User for Additional Rights" -- there is no refernce user assgined.
I checked the table USR04 the no. of Profle for the two users are diffrent and in the table UST04 also the the existing uer is having addtional profiles.
I like to add one more point Some of the roles of the  two users are composite roles and both the composite and its orignial roles are included the profile of both users.
Does any one have idea of the authorisations starting with T_PXXXXXXXX
regards
tony
MANDT BNAME          PROFILE    
100   CHARLHO        B_LSMW_ALL 
100   CHARLHO        T-D1780054 
100   CHARLHO        T-D1780057 
100   CHARLHO        T-D1780058 
100   CHARLHO        T-D17800581
100   CHARLHO        T-D1780075 
100   CHARLHO        T-D17800751
100   CHARLHO        T-D1780086 
100   CHARLHO        T-D17800861
100   CHARLHO        T-D17800862
100   CHARLHO        T-D17800863
100   CHARLHO        T-D17800864
100   CHARLHO        T-D1780087 
100   CHARLHO        T-D1780088 
100   CHARLHO        T-D1780247 
100   CHARLHO        T-D1780304 
100   CHARLHO        T-D1781182 
100   CHARLHO        T_P0920411 
100   CHARLHO        T_P09204111
100   CHARLHO        T_P092041110
100   CHARLHO        T_P09204112
100   CHARLHO        T_P09204113
100   CHARLHO        T_P09204114
100   CHARLHO        T_P09204115
100   CHARLHO        T_P09204116
100   CHARLHO        T_P09204117
100   CHARLHO        T_P09204118
100   CHARLHO        T_P09204119
100   TESTUSER2      B_LSMW_ALL 
100   TESTUSER2      T-D1780054 
100   TESTUSER2      T-D1780057 
100   TESTUSER2      T-D1780058 
100   TESTUSER2      T-D17800581
100   TESTUSER2      T-D1780075 
100   TESTUSER2      T-D17800751
100   TESTUSER2      T-D1780086 
100   TESTUSER2      T-D17800861
100   TESTUSER2      T-D17800862
100   TESTUSER2      T-D17800863
100   TESTUSER2      T-D17800864
100   TESTUSER2      T-D1780087 
100   TESTUSER2      T-D1780088 
100   TESTUSER2      T-D1780247 
100   TESTUSER2      T-D1780304 
100   TESTUSER2      T-D1781182

Similar Messages

  • Misrouted emails to .mac users with same name as person at different ISP?

    In the last 6 months I've received emails from strangers with .mac addresses whose prefix (eg jimbo@) is the same as the actual name of someone in my address book who isn't a .mac user. It looks as though mac is looking at the name, searching for a .mac user with that prefix, and misrouting the email to them instead!
    Any ideas? Is it possible? Any fixes?
    iMac & Powerbook   Mac OS X (10.4.5)  

    I wrote an email to a friend nicknamed Alleycat. I had not put
    Alleycat in the name fields in address book, but it is the prefix
    of the email address, which goes to her website. Forgetting this,
    I carelessly typed 'Alleycat' in 'To:' and it came up as the blue button
    which indicates mail knows the address (which it should not have done),
    so I hit Send.
    The Mail.app stores all message recipients in the list of Previous Recipients in Mail by default and the Mail.app autofill feature pulls from the Address Book and the list of Previous Recipients in Mail.
    At the Mail.app menu bar, go to Window and select Previous Recipients. A previous recipient already entered in the Address Book will have a vCard icon to the left of the name or email address. You can add a previous recipient to the Address Book or remove a previous recipient from the list. Removing a previous recipient from the list of Previous Recipients in Mail has no effect on Address Book entries.
    A week later I got a worrying personal response from a totally
    unknown (but real) [email protected], and the friend Alleycat
    had not received my mail.
    Do you save all sent messages? If so, is this sent message still available in the account's Sent mailbox to view the email address in the To: field?
    The Mail.app autofill feature does not make up an email address. As previously provided, the autofill feature pulls from contacts in the Address Book and from the list of Previous Recipients in Mail.
    Regarding being infected by a Trojan written for OS X, this would require opening an attached file that is masquerading as something legitimate and you would also be prompted for your admin password before the malicious script is installed.
    You cannot be infected by anything targeted at OS X (which are few and far between anyway) by opening an email message alone.

  • Merging two Podcast with same episodes and two different feed addresses

    Version 7.0.1.8 has certainly problems in the download of new podcast episodes.
    I'm having a lot of difficults - the last one beeing forced to unsubscribe one podcast and subscribe it again with another feed address. Now I have two podcasts in ITunes with same name. In Windows Explorer, all episodes are together - in the iTunes menu, all episodes are separated, each one downloaded the same episode, and with a number one appearing in the file name under the folder where the programs are stored. I tried to merge both subscriptions, but it's impossible.
    Does anybody knows how to do this? Need I download all episodes again?
    link:http://discussions.apple.com/message.jspa?messageID=3376635#3376635

    nothing was done, but I hope new software updates solved this issue.

  • How do I sync two iPhones with my iTunes and still have different apps on each phone? Do I use home sharing?

    Does home sharing let me have the same iTunes library on mine and my girlfriends phones?

    If you are synching all music that you have in iTunes on your computer then, when you next sync, any music not in iTunes but on the iPod should be removed.

  • How can OIM provision users with same Display Name in AD?

    I can create users with same First Name, Middle Name and Last Name (same Display Name) in OIM if they have different UserId.
    But I can not provision two users with same Display Name to one Organization Unit in AD, the resource provisioning shows
    Status: Rejected
    Response: AD user already exists
    Can AD be configured to create users with same Display Name (different UserId) in one OU, or would I have to create logic in OIM to modify the display name so it gets accepted by AD?
    Thanks!

    Thanks Nitesh. Also, I can create the user with same DN in different OU's, not in same OU.
    I agree once we determine that same cn exists in one OU , I can modify the display name by appending a number at the end or something. I understand the logic but I need more details on how to specify this logic in the pre-pop adapter, can you please share more details.
    Thanks a lot!

  • Create a different db with same db_name and now cannot start apex

    Hi All
    we create a db in the same box with my old db.
    The purpose is we need to change the default character set to unicode.
    And How do we start apex?
    Is there a command line tool to start apex?
    -Thanks for the help!

    Hi umesh,
    Thanks for your help.
    That means we can set up two database with same db_name and domain is system. the duplicate DB (second DB) does not affect primary DB in system and makes a confusion for client application? suppose i use TNS to control each DB by IP .
    also, can we use db_link to link two differnet OS plastform( window 32 bit and linuc 64 bit redhat with service name) oacle version is 10 g too?
    I try to configure a TNS in primary DB tnaname file but fail with TNS : no listener ora-12541 during connect linux DB server.
    But I copy this TNS to new window 32 bit PC with oracle client. it works to link to linux db services.
    which issue?
    Thnak for help
    JIM
    Edited by: user589812 on Jul 3, 2009 9:00 AM

  • I bought a new iphone and as i was setting my apple ID account and i signed in to my account and confirmed two useres with diffrent numbers that were signed to the same apple ID and it messed up my i messege and face time. how do i fix that ?

    i bought a new iphone and as i was setting my apple ID account and i signed in to my account and confirmed two useres with diffrent numbers that were signed to the same apple ID and it messed up my i messege and face time. how do i fix that or delete one user ?

    Hello sapiii96,
    Thanks for using Apple Support Communities.
    For more information on this, take a look at:
    iOS: Troubleshooting FaceTime and iMessage activation
    http://support.apple.com/kb/ts4268
    To sign out of your Apple ID
    Go to Settings > FaceTime, tap your Apple ID, and select Sign Out.
    Go to Settings > Messages > Send & Receive, tap your Apple ID, and select Sign Out.
    Best of luck,
    Mario

  • HT5622 Good day!! I was having two Iphones with same icloud id, later i deleted 1 id from one device, and made 2nd id for this device but same time my old id is stored on other device and i can not change it with another id, can any1 guide me on this issu

    Good day!! I was having two Iphones with same icloud id, later i deleted 1 id from one device, and made 2nd id for this device but same time my old id is stored on other device and i can not change it with another id, can any1 guide me on this issue.

    Log in to icloud.com on a web browser and remove the device from "Find My iPhone"

  • I have two users with different music on each itunes and i can only use one library, how do i use both for one iTouch?

    i have two users with different music on each itunes and i can only use one library, how do i use both for one iTouch?

    Chris, I believe this link may have the information you're looking for. Welcome to discussions!
    http://docs.info.apple.com/article.html?artnum=300432

  • I have set up two users, one for myself and one for children.  The computer automatically logs in for the children with no password required.  When the children go to spotlight and type in a search criteria all of my files show up.  How do I prevent this?

    I have set up two users, one for myself and one for children.  The computer automatically logs in for the children with no password required.  When the children go to spotlight and type in a search criteria all of my files show and open up.  How do I prevent this?

    Log in to your account, and move all your files to your home folder. No other users should be able to access them there and they won't show up with a Spotlight search.
    Make sure your kids' account(s) do not have admin privileges.

  • Database restore with same SID and different schema owner

    Dear all,
    I have quality system on HP-UX oracle platform which has been upgraded from 4.6C to ECC 5.0
    and schema owner for the database is still SAPR3
    I have installed new Test system with version ECC 5.0 with same SID and now i need to refresh its database with Data from QAS system ... owner at Test system is SAPC11 which is new installation ECC 5.0 and where SID is C11.
    I need to know once i restore data what steps i need to carry out at Test system
    i.e like change ENV settings from SAPC11 to SAPR3.
    Please note SID is same on both hosts. and owner is different SAPR3 and SAPC11
    Regards,
    RR

    Dear all ,
    Thanks for your views . but i have already installed ECC 5.0 on
    target machine with schema owner as default SAPC11 (sid)
    Is there any other way out ... instead of doing reinstallation with schema owner SAPR3 / instead of doing Export-Import system copy method which again is as good as reinstallation.
    I would like to have your views on following ,
    when i will restore database from source to taget
    al tables in target machine will be having owner as SAPR3 ( which came from source ) ...but my DB owner at Target machine is SAPC11 ( as far as ENV and all profiles are concerned ) .... cant i use SAPR3 user which got restored with backup of source to target to start my instance at Target machine... may be by changing ENV settings.
    I really appreciate and thank you in adavance for sharing your views.
    Regards,
    RR

  • How to get Unique calid for users with same name in multiple domain env..

    I found we need to use "-k legacy" option for creating users in non-hosted setup..
    I had two domains default as xxxx.com and the one that I created as yyyy.com
    When I have users with same name in two of the domains as user1..
    The calid for both of them is... user1 ....so they share the same calendar
    When Im in valid SSO of yyyy.com I get the mail account for user1 as [email protected] .....but the calid .. common as user1
    How I can get unique calid for users under two domains..
    whether I need to set Hosted domain support...Then how the mailid's differ with out using hosted domain support..
    And I need to login UWC without using @domain.com...
    Help me on this...
    Ashik

    Do you have UWC and Cal configured at least for virtual domain support?
    basically.. for discussion.. let's say you have three domains on your server.. 1st domain is the default domain. other 2 domains are virtual domains.
    if all domains were created with mail and cal support (-S mail,cal).. you would use the following options when creating users:
    1) for the default domain.. you must use the "-k legacy" option when adding users.
    2) for the other two domains.. when you create the user.. do NOT use a "-k" option.
    If you do not use the "-k" option.. it defaults to "hosted" which will cause the user's calid to be [email protected]
    If you Do use the "-k legacy" option.. it will create the calid as just "userid"
    With regard to logging into UWC without the @domain.com part of a username in a hosted domain.. the easiest way to avoid this.. is to point a host name under the hosted domain to the server.
    if you point webmail.xxxx.com to the server... and then access it via:
    http://webmail.xxxx.com/uwc/
    any users in the xxxx.com hosted domain will NOT need to use @xxxx.com when logging in... they can just use "userid"
    This feature does not take any special configuration (aside from adding a DNS entry for the hosted domain)
    Hopefully that helps.

  • 2 users with same user id in OIM!

    hi,
    can you please help me with this production environment issue!
    there are 2 users with same userid, same first name and last name in OIM but are only one is present in all of the target resources. i just dont know how to delete such user, as the two are in active state.
    Any suggestions are welcome!!
    Thanks!

    This can only happen if something went wrong with your trusted reconciliation settings. Mostly with the settings of recon rule. Please check whether in the rule definition, whether it is set to case sensitive. Even that, it shouldn't create 2 users with the same user id in OIM as user id is unique in OIM enforced in the database table.

  • Logging into a previously working website with same username and password

    I am now unable to log into a previously used website for work after I cleared safari's history and website data. I am using the same username and password as previously performed before it was cleared. I am able to log in on my desktop at work using the same username and password. How do I fix?

    Although LiveCycle will allow you to create two users with the same user ID (each in different domains) it is not recommended for the reson you are experiencing.  The domain is not used in the authentication, LiveCycle attempts to authenticate with the first user id it locates that matches the supplied user id.
    In your example, The first instance of "user1" that LiveCycle is finding happens to be part of "Domain1", this is why SecuredDoc1.pdf can be opened and SecuredDoc2.pdf can't be opened (the user1 that is a member of the policy applied to the second document is not the user that has been authenticated).
    You need to keep all user ids unique.
    Regards
    Steve

  • Two account with same UPN in Active Directory

    Is it possible to have two accounts with same UPN in AD? 
    I'm using Windows Server 2012 R2

    To expand on what Mr X said. Active Directory allows you to assign just about anything to the userPrincipalName attribute, as long as the value is unique. The value of this attribute is generally referred to as the UPN. But you could assign values with no
    "@" symbol, for example, or more than one "@" symbol. Also, Active Directory does not require that any value be assigned. It is an optional attribute.
    If no value is assigned to the userPrincipalName attribute, then the user can use a "default" UPN, which is <sAMAccountName>@<DNS domain name>, where <sAMAccountName> is the "pre-Windows 2000 logon" name of the user
    (the value of the sAMAccountName attribute), and <DNS domain name> is the DNS name of the domain.
    If a user has a value assigned to userPrincipalName that does not match this "default" form, then they can logon with either UPN, as long as no one else has either value assigned to their userPrincipalName attribute. You will note that Active
    Directory enforces uniqueness in the domain on sAMAccountName values.
    If in domain "domain.com" a user has a sAMAccountName of "jsmith" but userPrincipalName "[email protected]", then another user can have userPrincipalName of "[email protected]" (as long as no one else
    has that value assigned to userPrincipalName). They can each logon with their assigned values for userPrincipalName. But the first user can no longer also logon with their "default" value, based on their sAMAccountName, because it is now
    used by someone else. But if you attempt to assign a value to userPrincipalName that is also assigned to another user, you get an error.
    Bottom line, only one person can logon with any given UPN.
    Richard Mueller - MVP Directory Services

Maybe you are looking for

  • Adobe Acrobat 6.0 Pro

    Please help, no matter what I do I'm unable to use "Create PDF from clipboard image" the menu item is always grayed out. This has nothing to do with what I've copied and whether it's from within an application or not. I know how to use this feature,

  • CANNOT OPEN DOCUMENTS ON T/X

    Yesterday I tried to soft reset my T/X in order to operate my wireless keyboard. After successful soft reset, I cannot open documents (all other applications open without any problems). I get/go to the page to reset time and date (normal procedure vi

  • Air runtime bundled with exe installation issue

    Hello, I am sorry if my question is not relevent but i am facing an installation issue with air bundlled with my exe app. I have created my air app as  myApp.exe  with flash cs5.5.Air 2.6 has been embeded with the package.If i try to install the pack

  • Torch 9860 does not show saved photos, music, video

    Hi, I am unable to see the pictures taken on my phone Torch 9860, or synched music/video. However, i can see them through the desktop software and copy them. I am using phone memory only no additional SD card being used. Please help. tks

  • IPhoto not enough..recommend home publishing

    I recently switched from a pc to a mac. I am totally happy but I miss the photo editing software and homepublishing software of Picture it! and Microsoft works. I liked to make calendars, cards, collages, etc with my photos and/or clip art. Is Adobe