Unable to assign User groups in Enterprise Portal

Hi,
We are using EP 7.0 with MS SQL on Windows 2003 Server. Recently we have changed the UME to IDES EHP4 System. We can able to create users in the backend system and can read but when we try to assign any groups to the user we are getting the following error,
User attributes successfully modified
You are not authorized to assign one or more entities. Perform a new assigned entities search to see the correct status.
I am the administrator with full rights. Please help us, what is need to be done to resolve the issue.
Thanks,
Ajay.

Hi,
@Sukrut-
We have already assigned the SAP_BC_JSF_COMMUNICATION role to the communication user but still getting the issue with group assignment. please find the default trace below.
#1.5 #005056835CB600750000002100000B740004ABB31AFC209F#1314685646778#com.sap.security.core.wd.assignusermapping.AssignUserMappingComp#sap.com/tcwddispwda#com.sap.security.core.wd.assignusermapping.AssignUserMappingComp#Ajay#5914##EP70ULQ_E7Q_2951550#Ajay#b8bdc571d2d011e08434005056835cb6#SAPEngine_Application_Thread[impl:3]_16##0#0#Error##Java###An unexpected error occurred during retrieval of all backend systems available for user mapping for principal ''''.
[EXCEPTION]
#2#USER.R3_DATASOURCE.Ajay#com.sap.security.core.wd.exception.UmeUiException: java.lang.NoSuchMethodError
     at com.sap.security.core.wd.umeuifactory.UmeUiFactoryCompInterface.handleThrowable(UmeUiFactoryCompInterface.java:2618)
     at com.sap.security.core.wd.umeuifactory.UmeUiFactoryCompInterface.getUserMappingSystems(UmeUiFactoryCompInterface.java:1637)
     at com.sap.security.core.wd.umeuifactory.wdp.InternalUmeUiFactoryCompInterface.getUserMappingSystems(InternalUmeUiFactoryCompInterface.java:575)
     at com.sap.security.core.wd.umeuifactory.wdp.InternalUmeUiFactoryCompInterface$External.getUserMappingSystems(InternalUmeUiFactoryCompInterface.java:912)
     at com.sap.security.core.wd.assignusermapping.AssignUserMappingComp.refreshSystems(AssignUserMappingComp.java:338)
     at com.sap.security.core.wd.assignusermapping.AssignUserMappingComp.setPrincipal(AssignUserMappingComp.java:287)
     at com.sap.security.core.wd.assignusermapping.wdp.InternalAssignUserMappingComp.setPrincipal(InternalAssignUserMappingComp.java:220)
     at com.sap.security.core.wd.assignusermapping.AssignUserMappingCompInterface.resetComponent(AssignUserMappingCompInterface.java:139)
     at com.sap.security.core.wd.assignusermapping.wdp.InternalAssignUserMappingCompInterface.resetComponent(InternalAssignUserMappingCompInterface.java:136)
     at com.sap.security.core.wd.assignusermapping.wdp.InternalAssignUserMappingCompInterface$External.resetComponent(InternalAssignUserMappingCompInterface.java:230)
     at com.sap.security.core.wd.maintainuser.ReadonlyDetailInterfaceView.onPlugDefault(ReadonlyDetailInterfaceView.java:169)
     at com.sap.security.core.wd.maintainuser.wdp.InternalReadonlyDetailInterfaceView.wdInvokeEventHandler(InternalReadonlyDetailInterfaceView.java:105)
     at com.sap.tc.webdynpro.progmodel.generation.DelegatingInterfaceView.invokeEventHandler(DelegatingInterfaceView.java:85)
     [Removed few extra lines to shorten the log -
Ajay]
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
Caused by: java.lang.Exception: classname:[java.lang.NoSuchMethodError]message:[com.sap.security.core.umap.imp.UserMappingUtils.isReferenceSystem(Ljava/lang/String;)Z]
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
     at java.lang.reflect.Constructor.newInstance(Constructor.java:282)
     at com.sap.security.core.jmx.impl.JmxServer.handleThrowable(JmxServer.java:581)
     at com.sap.security.core.jmx.impl.JmxServer.getUserMappingSystems(JmxServer.java:420)
     [Removed few extra lines to shorten the log -
Ajay]
     at com.sap.security.core.wd.jmxmodel.JmxModelCompInterface.getUserMappingSystems(JmxModelCompInterface.java:768)
     at com.sap.security.core.wd.jmxmodel.wdp.InternalJmxModelCompInterface.getUserMappingSystems(InternalJmxModelCompInterface.java:497)
     at com.sap.security.core.wd.jmxmodel.wdp.InternalJmxModelCompInterface$External.getUserMappingSystems(InternalJmxModelCompInterface.java:768)
     at com.sap.security.core.wd.umeuifactory.UmeUiFactoryCompInterface.getUserMappingSystems(UmeUiFactoryCompInterface.java:1635)
     ... 56 more
Caused by: java.lang.NoSuchMethodError: com.sap.security.core.umap.imp.UserMappingUtils.isReferenceSystem(Ljava/lang/String;)Z
     at com.sap.security.core.jmx.impl.JmxUserMappingHelper.getUserMappingSystems(JmxUserMappingHelper.java:123)
     at com.sap.security.core.jmx.impl.JmxServer.getUserMappingSystems(JmxServer.java:417)
     ... 77 more
@SujiRam-
We can see the group in portal and we are getting same issue for all the portal groups not particularly for one grp assignment. We are not using LDAP for EP.
Please suggest-
Thanks,
Ajay.

Similar Messages

Create new user group on ENTERPRISE PORTAL

Hi people,
I need to know how to create a group of users in the enterprise portal.
Thanks.

Hi sergio torres ,
You have to wrtie all the users in a text file and then import that file into portal.
Find the below link for the fields u have to choose and sample also there.
[http://help.sap.com/saphelp_nw04/helpdata/en/7d/49ae0771924cf4a1fc7e2af7b2e18c/content.htm|http://help.sap.com/saphelp_nw04/helpdata/en/7d/49ae0771924cf4a1fc7e2af7b2e18c/content.htm]
Reward points if useful
Thanks
Suresh
Edited by: Suresh Mandalapu on Aug 4, 2008 1:16 PM

Unable to created users through UME on portal with AS ABAP as its data sorc

Hi,
Unable to created users through UME on portal with AS ABAP as its data source.
I have assigned SAP_BC_JSF_COMMUNICATION to the user SAPJSF but this only helps in editing the already existing users but not in creating new users on portal.
I have checked that that the role SAP_BC_JSF_COMMUNICATION is properly generated and has * in all authorizations. I have even assigned SAP_ALL and SAP_NEW to SAPJSF and another ID.
DO we need to make any config changes to make the database writable from portal. Please advise.
Thanks,

Hi,
If your system is a AS ABAP + +JAVA System,, you have to do the following
1. Login to Client 001 using SAP GUI
2. Create a user id
3. Login to portal and you will be able to see the user.
4.Assign him the portal rights
If you want the portal to use seperate Database for USers, there is a setting in Visual admin, that you can change for the same, but i dont remember that

Warning! task_eval_init(): unable to set User/Group baseDN

Hi,
I have installed Directory server on Unix platform.
Installation went successful. While doing the installation, I have given the userid to run the server as "admxxx" and group as "www".
After the installation, the server started properly but with a warning message that "warning: daemon is running as super-user". And I was able to open the console and do whatever I wanted.
We have created 3 more directory server instances and we imported an LDIF file into one of the instances successfully.
Now the problem is, whenever we start the admin server, we are getting the following message.
bash-2.03# ./start-admin
Info: Cache expiration set to 600 seconds
Warning! task_eval_init(): unable to set User/Group baseDN
Netscape-Administrator/4.2 B2002.057.2313
startup: listening to http://servername, port 6061 as root
warning: daemon is running as super-user
Can any one tell why I am getting the message Warning! task_eval_init(): unable to set User/Group baseDN ?
This is very urgent. We have configured this LDAP to SiteMinder server.
Thanks in Advance,
Murthy

zhangping,
I don't recognize your error. But are you using ldap for logging into SunMC ? This is not possible.

Links/documentation of User Administration of Enterprise portal

Can anyone please provide me with the links/documentation of User Administration of Enterprise portal..
thanks..

HI,
See this blog
User Management with SAP NetWeaver Administrator
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e0a97b7b-0301-0010-a091-8ed417fadd2a
and also see help.sap.com, you can learn more
Senthil K.

Unable to Create Users/Groups/Orgs in OAM

I have created a admin user [oamadmin] in Sun One Directory Server and configured the admin user as a Administrator during the initial installation/configuration. When I go the Identity System Console, I can see the users from Sun One Directory Server. When I tried to create a User, Group or a Organization, I see the error message
"You do not have sufficient access rights"
Is there anything I'm missing? What should I tune if I have to create users, groups and organizations from Identity System Console? I have included the admin user [oamadmin] in Directory Administrators group in Directory Server.

You have to create a workflow that creates user, group, ... and make the current logged in user (your admin in this case) the initiator of this workflow
for more details check the identity and common administration guide section 5 - chaining identity actions into workflows

Unable to delete User object in FIM Portal - Cannot find the object "#calculateRequestSetTransitionsAssembleStatementsPartition"

Hi,
***Problem
I encounter a problem with FIM (version 4.1.3441.0 and 4.1.3496.0) when I try to delete a User object (and only a User object) whatever if it is
manually/Expiration Workflow/Powershell.
Deleting a User object used to be perfectly functional and, without any product version modification, stopped working. I haven't neither deleted/modified or add a
"Grant" MPR or any of the corresponding Sets since last time I saw it working.
Displayed error is "Request could not be dispatched" in FIM Portal and is referencing a stored procedure in Event Viewer.
***Error details
When I try to delete a User object, here is the output :
Portal
"Processing error" on submit
with the following details
Request status is stuck at "Validating" until next restart of FIM Service (after what it becomes “Canceled”)
Request’s “Applied Policy” tab does not contain any MPR where, at least, a “Grant” MPR is expected
As SQL Timeout is relatively high and error happens quickly, I don’t think there is a Timeout problem under that.
Logs
« Application »
The Portal cannot connect to the middle tier using the web service interface. This failure prevents all portal scenarios from functioning correctly.
The cause may be due to a missing or invalid server url, a downed server, or an invalid server firewall configuration.
Ensure the portal configuration is present and points to the resource management service.
« Forefront Identity Manager »
Reraised Error 50000, Level 16, State 1, Procedure ReRaiseException, Line 37, Message: Reraised Error 1088, Level 16, State 12, Procedure CalculateRequestSetTransitionsAssembleStatements,
Line 332, Message: Cannot find the object "#calculateRequestSetTransitionsAssembleStatementsPartition" because it does not exist or you do not have permissions.
Transaction count after EXECUTE indicates a mismatching number of BEGIN and COMMIT statements. Previous count = 1, current count = 0.
Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException: Other ---> System.Data.SqlClient.SqlException: Reraised Error 50000, Level 16, State
1, Procedure ReRaiseException, Line 37, Message: Reraised Error 1088, Level 16, State 12, Procedure CalculateRequestSetTransitionsAssembleStatements, Line 332, Message: Cannot find the object "#calculateRequestSetTransitionsAssembleStatementsPartition"
because it does not exist or you do not have permissions.
Transaction count after EXECUTE indicates a mismatching number of BEGIN and COMMIT statements. Previous count = 1, current count = 0.
   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler,
TdsParserStateObject stateObj)
   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult
result)
   at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(DbAsyncResult result, String methodName, Boolean sendToPipe)
   at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
   at Microsoft.ResourceManagement.Data.DataAccess.UpdateRequest(RequestType request, IEnumerable`1 updates)
   --- End of inner exception stack trace ---
Requestor: urn:uuid:7fb2b853-24f0-4498-9534-4e10589723c4
Correlation Identifier: e7209633-46d0-4f4b-a59e-807649ef71ea
Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException: Other ---> System.InvalidCastException: Specified cast is not valid.
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.CreateRequest(UniqueIdentifier requestor, UniqueIdentifier targetIdentifier, OperationType
operation, String businessJustification, List`1 requestParameters, CultureInfo locale, Boolean isChildRequest, Guid cause, Boolean doEvaluation, Nullable`1 serviceId, Nullable`1 servicePartitionId, UniqueId messageIdentifier, UniqueIdentifier requestContextIdentifier,
Boolean maintenanceMode)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.CreateRequest(UniqueIdentifier requestor, UniqueIdentifier targetIdentifier, OperationType
operation, String businessJustification, List`1 requestParameters, CultureInfo locale, Boolean isChildRequest, Guid cause, Boolean doEvaluation, Nullable`1 serviceId, Nullable`1 servicePartitionId, UniqueId messageIdentifier)
   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Delete(Message request)
   --- End of inner exception stack trace ---
For information, a maintenance plan rebuild/reorganize indexes daily and this problem has occurred on servers with different performances.
Is any of you has already encounter this problem ?
Any help would be greatly appreciated,
Thanks in advance for your help,
Matthew

While there are several SQL Agent jobs (FIM Temporal Events, Maintain Sets, and Maintain Groups among others)created by the FIM install only one of those is enabled and scheduled and it calls all of the same stored procedures that the other
jobs do. Step 2 is Maintain sets and Step 3 is maintain groups. So the Maintain sets and groups jobs never need to get enabled and scheduled, but if you want them to be maintained more frequently then you can.
David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

Unable to unlock Users & Groups preferences

trying to add a new user or do anything in system preferences that requires me to unlock - I type in my password (correctly) and the lock will not open.
Using a MacBook 2.4 GHz Intel Core 2 Duo, running Snow Lepoard (10.7.4) logged in as adminstrator user.
Any suggestions?

Maybe these will help:
Lost password reset
http://theappleblog.com/2008/06/22/reset-os-x-password-without-an-os-x-cd/
http://www.hackmac.org/?q=node/4

Assigning Users to Groups on LDAP thru EP

Hi,
I have configured EP6 SP7 with multiple LDAP(MS-ADS)servers. I can read/write the groups and users to LDAP through EP. But i cannot assign the users to groups through Enterprise Portal. Also if i assign users to a group in LDAP on LDAP server itself, these assignments does not show up in the portal. do i have to configure my dataSourceConfiguration_multiLDAP_db.xml file? if so then which parameter?
Please advise.
regards,
Hassan

Dear Hassan,
Need a clarification. If users are assigned to a group in LDAP, Can you see the same thing reflecting in portal?
I have configured LDAP as UME and I am able to see a group of LDAP appearing in Portal. But when I see the list of users assigned to this group, its empty.
Any clues or suggestions.
Regards,
Sreeram

Adding users to groups in enterprise dashboard does not result in software showing in creative cloud desktop

if I change membership of a user in the enterprise portal the license does not adapt on the desktop application or web overview. I have tried changing group membership and changing the user.
While changing the membership an error 500 returns at the top of the screen, but membership is changed.
Any advice?
Thanks,
Eric

Hi Ashish,
That was the first thing I tried. logging off from creative desktop, browser even logged off from Windows and OSX, no results. Adding a new non-existent user to the groups works, but changing a user to a different group does not work.
Eric

Cannnot assign user to user group

Hi,
we have SAP EP connected to ECC.
i have created a R/3 role, so i can see it as user group in sap portal.
i have created a user in ECC and asign to him the previous R/3 role.
When i see in SAP Portal, i can see the previous user and i can see the prevoius r/3 role as user group.
But the user group is empty, is it normal? for me , i should see this user in the user group in the portal (because it's done in ECC)
Even, if i tried manually in sap portal to add this user in the user group, the system does not allow that because the button "ADD" is disactivated (I think it's normal because this user group exist in ECC as R/3 role)
Any help to assign this user (created in ECC) to user group (Created in ECC as R/3 role) in SAP Portal ?
Thanks

solved

Assign SQ03 Abap Query User Group to role

Please advise how to assign SQ03 Abap Query User Group to a role. Thanks.
Moderator message: please do more research before asking.
[Rules of engagement|http://wiki.sdn.sap.com/wiki/display/HOME/RulesofEngagement]
[Asking Good Questions in the Forums to get Good Answers|/people/rob.burbank/blog/2010/05/12/asking-good-questions-in-the-forums-to-get-good-answers]
Edited by: Thomas Zloch on May 12, 2011 5:40 PM

Hello Sunil,
The problem is that I have hundreds of users to maintain user groups.
found out that it is possible to assign user group to role and role to user groups. implementing hr authorization with in-direct assignment of auth. So if I could use sq10, user groups could also be link to position in the org chart.
sq10 does allow you to assign a user group to a role but when you assign the role to a user and the user runs a query, it reports that no user group has been assigned.
Suspect that there must be a parameter or switch that is not turned on
Regards

Assign users to groups

How do i assign user groups. Like in defining numbering series or query it has to be specified that which groupwill be assigned to that paticular series or query. Now my question is where do we define that group 1= set of users.

Hi debraj bhattacharyya,
To set user group, please try the following:
1. Define Series:
- Go to Administration -> System Initialization -> Document Numbering.
- Double-click on the row number of the document type for which you want
to define the numbering. The Serials window opens. Here you can assign
number ranges to a group.
- Up to ten different groups can be defined.
- Only super users can create and maintain number ranges.
- A user who is not defined as a super user can only change the
definition of his or her own default number range, assuming he or
she is authorized to maintain number ranges at all.
2. Define Authorization:
In Administration -> System Initialization -> Authorization -> General
Authorization window, you select the user in the left and define his
authorization under Administration
->System Initialization -> Series - Group.
After the two steps above, a specific user can only view and add the
documents within the series which has been assigned to a specific group
that he has been fully authorized.
Hope it is helpful!
Regards,
Ivy

List of Portal Users/Groups

Is there a way to get the list of users/groups in the Portal to allow us to add security to our custom built portlet? Once the security has been added, we can use the APIs to check if someone is privileged, but how do we get a list of the users/groups to select from in the first place.
Regards
Jenny

Just check if<b> IRole and IUser</b> Interfaces have the necessary methods to do so.....

List of Portal Users/Group

Is there a way to get the list of users/groups in the Portal to allow us to add security to our custom built portlet? Once the security has been added, we can use the APIs to check if someone is privileged, but how to we get a list of the users/groups to select from in the first place.
Regards
Jenny

Search for LDAPSEARCH in metalink. I've seen a stored procedure that one may use to list either users or groups. You have to use both if you want to dump list of groups with users. Optionally there's an LDAPSEARCH command that may be used via command line. Refer to Metalink Note 251776.1. This note will give you syntax on the command line LDAPSEARCH. In order to do this though, you must know the base domain parameters for your portal groups...which you can obtain from the Administrator -> Global Settings -> SSO, and you also must know the password to your orcladmin superuser account that's used to login to the LDAP.
Hope this helps...

Unable to assign User groups in Enterprise Portal

Similar Messages

Maybe you are looking for