User lock / Validity date?

Hello IDM Gurus,
I needed your insight on an issue we're facing; Using standard tasks from the SAP provisioning framework, we have a task that locks a user in a connected SAP system; and we have another task that sets a person's validity date to today's date (basically invalidating their account by the following day); After locking a user using the task we then go ahead and set the same user's validity date as today's date; as a result of this, the administrator lock set previously ends up disappearing. I don't believe this is normal behavior; shouldn't a validity date and an admin lock exist independent of each other? Is this happening because of the way the SAP Provisioning framework sets a validity date?
Would greatly appreciate any advice and insight on the issue!
Thanks a lot in advance!
Best regards,
Sandeep

closed.

Similar Messages

  • USER ACCOUNT NOT IN VALID DATE

    Hello folks,
    Could you pls help me out with this error
    USER ACCOUNT NOT IN VALID DATE
    I have checked it in SU01..its shows the correct validity date..
    but still i am facing this problem
    Thank,s
    Srini

    >
    Narendra Reddy C wrote:
    > Hi prasad,
    >
    > USER ACCOUNT NOT IN VALID DATE means ur id has been locked by BASIS people ie authorization people.
    > so check with ur BASIS team.
    >
    > REDDY
    Really?
    Gp

  • Regd : How to find Validity date for a user in central user system

    Hi Experts;
    I want to get the list of users with profile SAP_ALL  with following details like validity ,user type ,user name ,user id..
    I can get through SUIM for each individual systems.Its very difficult to login to each system ,generate the report.So I prefered to go for Central system
    But if I use central user system I have no option to find validity and user type for the system ( SUIM - > Cross system application )
    I have also tried to the table USRO2 ( which gives only the list of users in the central system )
    So is there any possible ways to find the Users with profile SAP _ALL with validity date in the central user system. So that I can easily generate it as one report instead of logging to each and every system
    Regards
    Sanjeev.S

    Hi Ruchit
    Thanks for your reply. I want to find the validity date of all users having SAP_ALL
    profile of all child system connected through central user system .So it is possible
    to do that in Centrals System by executing the report?
    If I execute that report in Central user system will it give the details of all child
    system connected to central system
    I think it will give only the result of Central system and not the child system connected to Central system.Please clarify me.
    I can execute the report by logging to each child system ,but it takes very long hours for me since there are many system in my landscape.
    Awaiting for your reply.'
    Thanks
    Sanjeev.S

  • Beginner User:  Locking (making read only after data entry) a single field after selecting date

    Hello, I am a beginner user trying to create a form using Adobe Livecycle.  One of the fields I would like to make read only/protect it/password protect it after a user selects the date.   For example, I select August 17, 2010 as the date. After I select it, I would like that field to be read only or protected so that another user can not edit it. 
    I am a complete novice using XML or codes.  I'm learning alot from these boards though.    I know its probably simple.
    Any help is appreciated.

    The attached locks a text field if the date chosen is "08-17-2010". If it is not the text field is accessible.
    // form1.page1.date::exit - (JavaScript, client)
    if (this.rawValue == "2010-08-17") {
      form1.page1.tf.access = "protected";
    else {
      form1.page1.tf.access = "";
    Steve

  • Lock objects to allow 1 user to insert data at a time

    Is it possible to Use lock objects to allow only 1 user to insert data into a  database table at a time.
    I am creating Assets using "BAPI_FIXEDASSET_CREATE1".
    To create "n" assets similar to the asset I use a DO loop in my program and call the BAPI. (Please refer number of fixed assets field in AS01).
    I need to avoid other users from manually creating assets using AS01 while the BAPI is running so that the range of assets created is consistent ( without gaps )
    Thanks and Regards,
    Ashwin

    <b>Lock objects</b> are use in SAP to avoid the inconsistancy at the time of data is being insert/change into database.
    SAP Provide three type of Lock objects.
    - Read Lock(Shared Locked)
    protects read access to an object. The read lock allows other transactions read access but not write access to
    the locked area of the table
    - Write Lock(exclusive lock)
    protects write access to an object. The write lock allows other transactions neither read nor write access to
    the locked area of the table.
    - Enhanced write lock (exclusive lock without cumulating)
    works like a write lock except that the enhanced write lock also protects from further accesses from the
    same transaction.
    You can create a lock on a object of SAP thorugh transaction SE11 and enter any meaningful name start with EZ Example EZTEST_LOCK.
    Use: you can see in almost all transaction when you are open an object in Change mode SAP could not allow to any other user to open the same object in change mode.
    Example: in HR when we are enter a personal number in master data maintainance screen SAP can't allow to any other user to use same personal number for changes.
    Technicaly:
    When you create a lock object System automatically creat two function module.
    1. ENQUEUE_<Lockobject name>. to insert the object in a queue.
    2. DEQUEUE_<Lockobject name>. To remove the object is being queued through above FM.
    regards,
    srinivas
    <b>*reward for useful answers*</b>

  • Locking form when multiple users try saving data

    Hello,
    How can I prevent users from saving data in the same form at the same time? is there anything to lock a form once a user opens it for entering data??
    As if 2 users are having access on the same form, and accidentaly they opened the same form and selected the same combination of dimensions, if both of them saved data. The data will be overwritted by the latest one...and this is not the required scenario......we need to have it only possible for one user to open this form at a time.
    Is it possible?
    Thanks.

    Hi,
    As Kyle said, the issue would be only if both the users update/modify the same cell.
    However said that, is it possible that same cell would have different values, even if two different user enters the data at same time?
    Means data entered would have to be same even if it is entered by different users. (Just asking out of curiosity :) )
    Also process management can be thought off, wherein only current owner can fed data(free form).
    Hope this helps.
    Regards
    -SM

  • User validity date is not refelcting in Childsystem

    Hi Experts,
    I have changed the  validity of a user in  CuA  system . But the validity is not reflecting in child system. on checking SCUL I found the error as " User type 75 is not actiive". I didnot find any issues in distributing roles and profiles for this user in CUA.only for user valdity I am reciving this error. Please advice how this error can be rectified. In SCUM the distribution parameter is global for user valdity. I need to know the root cause for this error.
    Thanks,
    Sanjeev.S

    Hi Sanjeev,
    Why dont you identify user master data that has not been changed from the central system and distribute it again where necessary.
    You can do all this from SCUL
    Look at the following SAP notes :
    632486
    First of all check if that user is existing in the child system and is active or expired:
    Some times the user might have been deleted in the backend system and you are tyring to change the validity date of the user only on  the CUA system because he exists only in the CUA box.
    I strongly think that the user record is manually deleted in the child system
    Please try to perform this action for another user who exists and see if its happening the same way.
    if it does not.
    Go to the child system and delete the user completely and recreate the user one more time in CUA and see what happens.
    Edited by: Franklin Jayasim on Jun 29, 2010 7:04 PM

  • Changing The Validity Dates In Org Model in CRM- User Level

    Hi
    How can we restrict the Validity Dates in Organisation Structure at User Level.
    I need that the user should be given some specific dates<b> ( Valid till or assigned till )</b> while assigning in the org. And it should be visible always in the Org Model.
    We tried using Delimited Date Function, but the User gets ellapsed if the Validity is expired.With the business point of view, <b>the requirement is that all user should be listed in Org model with respect to any dates.this would mean that if a user is terminated we would want to change the Valid till date in the Org</b>

    Hi Amrita,
    Business partner number and Object ID is automatically determines by system when creating a org unit.
    I dont find any configuration to create org unit with your own BP number and object ID. You have option to make repairs to the existing org unit.
    Please find the below path to repair the org unit
    IMG -> CRM -> Master Data -> Business partner -> Integration Business partner -Org management -> Create Business partner initially
    Select the org unit and execute to get all the org units.
    You can select the org units with errors /warnings and click on start repair to get automatic assignment of BP.
    Hope it helps
    Reward points if it helps
    Regards,
    Madhu

  • Create popup - Makes user to enter a valid date

    I need to create a popup menu and I must make the user enters a valid date in order to continue processing.
    Thanks In-advance!
    JeffG

    use FM 'HELP_START' to display calender popup, with this use will always enter a valid date and in right user format.. see below example
    REPORT zpwtest.
    DATA : i_sel TYPE TABLE OF dselc ,
           i_value TYPE TABLE OF dval .
    DATA : w_help TYPE help_info .
    DATA : value TYPE help_info-fldvalue .
    PARAMETERS p_dat TYPE char10 .
    AT SELECTION-SCREEN ON VALUE-REQUEST FOR p_dat .
      w_help-call = 'T' .
      w_help-tabname = 'SYST' .
      w_help-fieldname = 'DATUM' .
      w_help-spras = sy-langu .
      w_help-dynprofld = 'P_DAT' .
      w_help-report = sy-repid .
      w_help-dynpprog = sy-repid .
      CALL FUNCTION 'HELP_START'
           EXPORTING
                help_infos   = w_help
           IMPORTING
                select_value = value
           TABLES
                dynpselect   = i_sel
                dynpvaluetab = i_value.
      p_dat = value .

  • RFC_ERROR_LOGON_FAILURE: User account not in validity date

    Dear All
    We are trying to upgradfe one of our ECC system to EHP4. We created a system in the solution manager. However, it had some problems and we tried to delete it. During deletion, we are receiving an ABAP dump as "CALL_FUNCTION_REMOTE_ERROR". Detailed dump mentioned the error as :-
    RFC error text: "RFC_ERROR_SYSTEM_FAILURE"
    CPI-C error text: "Server repository could not create function template for
    'FM_DIAGLS_NOTIFY_JAVA' caused by: com.sap.mw.jco.JCO$Exception: (103) "
    We checked on the java trace file and we found this error occuring repeatedly.
    Exception thrown [Fri Feb 18 12:25:14,057]:Server repository could not create function template for 'FM_DIAGLS_NOTIFY_JAVA' caused by: com.sap.mw.jco.JCO$Exception: (103) RFC_ERROR_LOGON_FAILURE: User account not in validity date
    com.sap.mw.jco.JCO$Exception: (103) RFC_ERROR_LOGON_FAILURE: User account not in validity date
         at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:455)
         at com.sap.mw.jco.MiddlewareJRfc$Client.connect(MiddlewareJRfc.java:1025)
         at com.sap.mw.jco.JCO$Client.connect(JCO.java:3255)
         at com.sap.mw.jco.JCO$Pool.initPool(JCO.java:4725)
         at com.sap.mw.jco.JCO$PoolManager.getClient(JCO.java:6180)
         at com.sap.mw.jco.JCO$PoolManager.getClient(JCO.java:6135)
         at com.sap.mw.jco.JCO.getClient(JCO.java:8803)
         at com.sap.mw.jco.JCO$Repository.getRepositoryClient(JCO.java:20461)
         at com.sap.mw.jco.JCO$Repository.queryFunctionInterface(JCO.java:20541)
         at com.sap.mw.jco.JCO$Repository.getFunctionInterface(JCO.java:20649)
         at com.sap.mw.jco.JCO$BasicRepository.getFunctionTemplate(JCO.java:19687)
         at com.sap.mw.jco.JCO$Server.getFunction(JCO.java:7471)
         at com.sap.mw.jco.MiddlewareJRfc$Server.dispatchRequest(MiddlewareJRfc.java:2260)
         at com.sap.mw.jco.MiddlewareJRfc$Server.listen(MiddlewareJRfc.java:1738)
         at com.sap.mw.jco.JCO$Server.listen(JCO.java:8182)
         at com.sap.mw.jco.JCO$Server.work(JCO.java:8302)
         at com.sap.mw.jco.JCO$Server.loop(JCO.java:8249)
         at com.sap.mw.jco.JCO$Server.run(JCO.java:8165)
         at java.lang.Thread.run(Thread.java:534)
    Can anyone please help. Our complete upgrade is struck due to this.
    Thanks in advance
    Regards
    Lokesh

    Hi Sven
    Thanks for the update. I checked and found 3 communication users to have expired. I increased their expiry date to 31.12.9999.
    However, now when i tried to perform the deletion action, I am receiving a different dump as
    RFC state: " "
    RFC error text: "RFC_ERROR_SYSTEM_FAILURE"
    CPI-C error text: "Bean FM_DIAGLS_NOTIFY_JAVAnot found on host a2ms00015,
    ProgId =WEBADMIN: Object not found in lookup of FM_DIAGLS_NOTIFY_JAVA."
    The Java Trace file shows this error :-
    Exception thrown [Fri Feb 18 16:46:06,657]:Exception thrown by application running in JCo Server
    java.lang.RuntimeException: Bean FM_DIAGLS_NOTIFY_JAVAnot found on host a2ms00015, ProgId =WEBADMIN: Object not found in lookup of FM_DIAGLS_NOTIFY_JAVA.
         at com.sap.engine.services.rfcengine.RFCDefaultRequestHandler.handleRequest(RFCDefaultRequestHandler.java:138)
         at com.sap.engine.services.rfcengine.RFCJCOServer$J2EEApplicationRunnable.run(RFCJCOServer.java:254)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
    Please help
    Regards
    Lokesh

  • If user locked (backend) then from portal i m not able to send data

    If user locked (backend) then from portal i m not able to send data
    both user are same in front end and backend.
    But once user is unlocked i am able to send data from portal to backend...
    Regards
    Ruturaj

    Hi
    Since you are in CUA landscape(as u said portal and r3 user are same) unless and utill you unlock it data will not be process.
    [Help|What's the right user to access;
    BR
    Satish Kumar

  • Method of fetching Account status and user locked date in Portal.

    Hi,
    Can anyone suggest me the method name  in UME API in Sap Ep for fetching User Account Status and Last User Locked Date. Or suggest a related code for it.
    user database is LDAP.
    Thanks

    Hi Abhai,
    The class (actually Interface) you're looking for is IUserAccount. You can get this from the IUser by using the method getUserAccounts().
    The IUserAccount provides all sort of methods like lockDate(), isLocked(), getLockReason().
    See more in https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sapportals.km.docs/library/ep/_d-f/ep%206.0%20sp2%20usermanagement%20public%20api
    Best regards,
    Amit

  • RSPLAN - User account not in validity date

    Hallo,
    when I open the TA RSPLAN and jump into the planning modeler, I get the error message "User account not in validity date" in the web-browser.
    I've checked the validity period of my SAP user in the SU01 (... also in the backend of the Netweaver portal) - The date is valid (01.10.2009 - 31.12.9999)! So, why I get this message?
    Thanks in advance...

    Hi,
    If you run the support desk tool, note 937697. It will most likely tell you where the problem is, my guess is that one of the users defined in the JCo destinations of the Web Dynpro Content Administrator are not in validity date in SU01.
    thanks,
    Michael

  • ESW : User account not in validity date

    hi team,
    i'm trying to log in to the system " HU2" with the id P1047788 and for which i'm getting the error as " User account not in validity date".
    i have already registered again in the page " http://www.sdn.sap.com/irj/sdn/soareg" using my P-id and the password.
    but, unfortunately i didn't receive any mail communication since 2pm totay.
    could you please help me to activate my account ?
    thanks in advance,
    Alok

    HELLO ALL,
    I am also facing the same problem, can any one helps us out to solve this problem.

  • User Exit for VA41 Validity Date

    Hi,
    I am giving order type in VA41 Tcode and then Clicking on 'Create with Reference' .Then a Pop Up is getting generated. In this i am giving Contract created with validity date lessthan today's date(in Contract Tab).For Example i created a Contract xxxxxx with 'valid to' 9.12.2008. When I am giving this contract and clicking on 'Copy' button a Warning message is getting generated 'The sales document is only valid until 09.12.2008'. Now i have to change this into Error message instead of Warning Message.
    i used User Exits mv45afzz,MV45AFZA,MV45AFZB. But the debugger is getting started only after Warning message got generated.Is there any User Exit for which debugger gets started when i give the Contract and then Click on 'Copy' button. Please Suggest.
    Thanks
    K Srinivas

    Hi,
    Create a file say breakpoint.txt file as follows:-
    [FUNCTION]
    Command=/H
    Title=Debugger
    Type=SystemCommand
    Once you come to the screen of 'Create with reference' where you are giving the contract, from  second session drag the above mentiuoned file to the session where you are running VA41, & drop it here. Now debugger has been activated. Proceed with debugging. This method you can use for any of the 'POP UPs'.
    I hope this helps,
    Regards
    Raju Chitale

Maybe you are looking for