User XYZ has no authorization for tp command IMPORT

Dear friends,
We have several users who are facing the issue while importing TR in QA system from DEV system. We have checked with the users by assigning them SAP_ALL and even then they are facing same issue. Could you please help us in this ? I have attached screenshot of the error. We are using Solman for transports.
Thanks
Gaurav

I suggest extra troubleshooting:
- does this happen for all users, or only one? Who are the users for which it works? what is different about them?
- note that SAP_ALL is famous for not including "all" authorizations, especially some RFC related auths such as S_RFCACL (unless you specifically switch that on) and these RFC failures rarely appear in traces (but they do appear in SM21 sometimes). also, unless you are consistent with regenerating SAP_ALL after installing support packs it will get out of date and not contain everything.
- have you checked TMS logs on operating system as advised by the error message? Those logs usually have extra details. you can probably read them yourself with AL11.
- have the generated RFC destinations used by TMS been altered? You first need to identify the RFCs within STMS then go into SM59 and look at them. They should not be using "current user" authentication, because tp should be run by the sidadm or sapservice users on the OS. Maybe basis has altered those RFC.
let us know what you find.
UPDATE:
thinking about this further.
I bet you are hitting S_RFCACL errors. Give the user SAP_ALL plus a dummy role having S_RFCACL and try. Activate a trace. If I'm right, you will see the S_RFCACL proper value needed in a role. compare that to a user for whom it works. Bet it's something like that. Might as well add several S_RFC* authorizations to the dummy role too.
Message was edited by: Kesayamol Siriporn

Similar Messages

User X has no authorization for the requested document

Dear All,
We are trying to allow users to view the reporting documentation against a particular InfoProvider. We have created the documents and assigned them to the InfoProvider and transported these to QA.
However we can see the documents but the users get the above error.
Which authorisation objects do they need assigning to their Role/s ?
We have tried S_RS_ADMWB, S_BDS_D & S_BDS_DS to no avail.
Please help.
Thanks
Craig.

Dear All,
Thanks for the replies however I have solved this myself.
The InfoProvider that we associated the documents against has an authorisation relevant InfoObject that the users are assigned. And the queries run just fine. But because of some bizarre authorisations check EVERY object within the InfoProvider that is marked as Authorisation relevant must be given a value whether used or not that matches your profile.
So what we ended up having to do was to give the users their restricted value for the queries and colon ":" authorisation to display the documents against the InfoProvider.
How crap is that ?
Cheers
Craig.

User has no authorization for function group SWRS

Dear SRM Gurus,
We are facing an issue u201CUser has no authorization for function group SWRSu201D.
Hope the user has no authorization to access function group SWRS and this function group is saying that workflow substitution.
Can you any one have any idea what scenario are we using Workflow substitution?
Is there any Roles need to be assigned?
I would be appreciating if you could let us know more detail on this.
Thanks.
Regards,
Magesh Basavaraj.

Hi,
The authorization object is 'S_WF_SUBST' for substitute role..try to assign this object and check..
Saravanan

When testing the message from RWB error - User PAMIDIK has no authorization

Hi Experts,
When i am testing the scenario from FILE to PROXIE i am geeting the following error in SXMB_MONI.
i went to RWB - IE - TEST MESSAGE .the message had left from RWB but when i see in SXMB_MONI in XI i get the following error.
Error Message: User XX has no authorization to process messages
Regards
Kiran

Hi ,
where you are testing the message in RWB, IE or Adapter Engine ??I think you dont have proper authorization to perform the action check with you basis team.
Regards,
Raj

User has no authorization for Function group SYST

Hi,
We are starting to make customisation to B2B application. I have just created a new project for B2B_XXXX application and deployed it on the server. When I run this custom application, I am not able to login using the same user that is working fine for the standard B2B application.
Following is the error I am getting
ERROR 1 - RFC_ERROR_LOGON_FAILURE: User INTUSER05 has no RFC authorization for function group SYST
ERROR 2- The application was not able to switch to a stateful connection......
Strange thing is that the same user works very well for standard B2B.
Any clue? All I have done is created a CUSTCRMPRJ for B2B ERP (SHRWEB, SHRAPP). Please help.
Best regards,
-Tarun
Edited by: Tarun Bakshi on Nov 10, 2011 7:37 PM

Hi Shanto,
The problem is still occuring. Even If I give s_rfc authorisation the order is not being created.
I compared the source code for b2b and b2b_custom application, I have pasted below the component info
sap.com      CORE-TOOLS      7.00 SP14 (1000.7.00.14.0.20071210170909)      SAP AG      SAP AG      20080125132852
sap.com      SAP_JTECHF      7.00 SP14 (1000.7.00.14.0.20071210172424)      SAP AG      SAP AG      20080125132853
sap.com      BASETABLES      7.00 SP14 (1000.7.00.14.0.20071210170411)      SAP AG      SAP AG      20080125132853
sap.com      SAP-JEECOR      7.00 SP14 (1000.7.00.14.0.20071210172300)      SAP AG      SAP AG      20080125132852
sap.com      JLOGVIEW      7.00 SP14 (1000.7.00.14.0.20071210160700)      SAP AG      SAP AG      20080125132853
sap.com      SAP-JEE      7.00 SP14 (1000.7.00.14.0.20071210172039)      SAP AG      SAP AG      20080125132853
sap.com      SAP_JTECHS      7.00 SP14 (1000.7.00.14.0.20071210172719)      SAP AG      SAP AG      20080125133813
sap.com      BI_UDI      7.00 SP14 (1000.7.00.14.0.20071210170522)      SAP AG      SAP AG      20080125133909
sap.com      BI_MMR      7.00 SP14 (1000.7.00.14.0.20071210170459)      SAP AG      SAP AG      20080125133230
sap.com      UMEADMIN      7.00 SP14 (1000.7.00.14.0.20071210164800)      SAP AG      MAIN_APL70VAL_C      20080125140341
sap.com      LM-TOOLS      7.00 SP14 (1000.7.00.14.1.20080124101556)      SAP AG      MAIN_APL70P14_C      20080125134809
sap.com      SAP-SHRWEB      6.0 SP0 (1000.6.0.0.2.20080129095806)      SAP AG      MAIN_CRM70PAT_C      20110608153828
sap.com      SAP-SHRAPP      6.0 SP0 (1000.6.0.0.2.20080128172843)      SAP AG      MAIN_CRM70PAT_C      20110608154506
b2b_custom application has been created by using code from the following SCs that were added to the track
SAPSHRWEB10_7-20003522.SCA
SAPSHRAPP10_7-20003520.SCA
SAPCRMWEB10_7-20003518.SCA
SAPCRMAPP10_7-20003516.SCA
SAPCRMDIC10_0-20003519.SCA
STRUTS01_0-10003646.SCA
SAPIPCMSA10_0-20003515.SCA
SAPCRMJAV10_7-20003517.SCA
SAPSHRJAV10_7-20003521.SCA
TEALEAF00_0-20001451.SCA
SAPBUILDT14_0-10003479.SCA
Any help would be great...

User does not have authorization for InfoProvider

Hi,
We are in BI 7.0 and want to display the data in the cube that I created and loaded data to. In RSA1, I am do a right click on the cube and select "display data". I am getting to selection screen and after selecting the output fields and executing, I am getting the following error:
User XXX does not have authorization for InfoProvider ZFREDC
The long text is like this:
You do not have sufficient authorization
Message no. EYE007
Diagnosis
You do not have sufficient authorization for the requested data records.
Procedure
Either select other data or get the required authorizations from your administrator.
I did a authorization check in SU53 after I got the error and it says the last authorization check was successful.
Can somebody suggest me what to do. If there are any authorization objects that I need to have in my role?
Thanks.

Hi,
Be sure to have authorisation object S_RS_ICUBE assigned with at least activity 03 (execute) and subobject data and agregate for the respective cube(s) or infoarea(s).
Regards, Patrick Rieken.
Message was edited by:
Patrick Rieken - BI-Formance B.V.

Has the options for custom command buttons and scripts been removed from speedgrade?

I run alot of framecyclerDI machines and am looking to upgrade them but i cant seem to find any method of adding command bars and buttons like you could in the iridas versions of speedgrade i also cant see a way of executing any external scripts which for me is a big issue as i have a hell of alot of pipeline scripts that the artist could execute.... any ideas or have i just missed somthing ?.......(would love it if they added a python sdk)

Hi Dennis,
Thanks for replying,
Its actually more the other way getting speed grade to control outher things.
i.e
take the in and out points and send the track to a dcp creator
rendering and sending anotated frames directly into my databases notes system
taking the shotname and seeing if theres is a new version avaliable and pull it from the server to the local machine drive/cache
Theres a load more..but you get the idea .. using the buttons to execute these commands in the interface made these functions editor friendly...
I can get round some of the issues by reading from the autosave.ircp and setting up a PYQT GUI but that seems like a bit of a hack.
I understand the reasons to keep the UI uniform (editors dont like it when you move buttons) but Im suprised these options got removed as intergrating software into pre-existing pipelines would seem to be a selling point for any software..
Are there any plans in the roadmap for speedgrade that would help me in the future?
S.P.F

ISA : The user has no authorization

Hello Friends,
I created a customer configuration " MYCONF" under
http://host:50100/shopadmin/admin/xcm/init.do
and then i tried to connect to :
http://host:50100/shopadmin/shopadmin/init.do?scenario.xcm=MYCONF
i was directed to login page .
i enter login : WEBADMIN and its pass but i get this error :
An error occurred:The user has no authorization for Shop Management
In SAP CRM back end , i gave the WEBADMIN user the roles :
SAP_CRM_INTERNET_CUSTOMER
SAP_CRM_ISA_UA_SUPERUSER
SAP_CRM_ISA_WEBSHOP_MANAGER
restarted all servers .
but i still have the same error..
what happens?

Hi Blackman,
try logging with just your own CRM logon. It should work. The webadmin user is this the one logging onto CRM that you set up in teh XCM settings?). This should have the role SAP_CRM_ISA_ITSLOGIN assigned to it.
Then your user just needs the webshop one you assigned but you should have sap_all anyway right?
Cheers
Andrew

Authorization for user on WF

HI All ,
I am using WF for invoice and I want that during the process the user will
assign it to other user .
my question is how it work with authorization i.e. if user 1 get the WF and send it to user
2 that don't have any authorization to display the invoice .
does it work or it fail that the user dont have authorization?
one more thing does the user need to have authorization for WF besides the business authorization
for invoice ?
Regards
Alex

Yes even as a end user you should haveenough roles to receive and process the workitems, aprat from the respective business process authorizations. As the workitems is a part of Org. management you should have right authorizations..
[PLease refer Sap Help Docu|http://help.sap.com/saphelp_nw04/helpdata/en/8c/1923d1932b11d2a5ea0060087a79ea/frameset.htm]

WEB UI- only Display authorization for LEADS to users

Hi Gurus,
I have a requirement like i need to give only display authorizations for users to leads.
I have created a new business role and assigned only search links. but in that search link we have Create New option. How i need to disable this.
Users needs only display authorizations for Leads.
Waiting for reply...
Regards,
Ajay.

Hi Ajay,
First of all, It is possible to disable the New button on the Search page without any code change. There is an SPRO setting which is to be done in order to achieve this.
You might have created a new z navbar profile as you have created a new business role as per your business requirement.
Lets take an example, you want to disable the New button on Contact Search Page. follow these steps:
1.Go To T. code /ncrmc_ui_nblinks
2. Select the Z navbar profile you have created for your business role
3. Double Click on "Define Generic OP Mapping" in left hand side
4. Select Object Type as BP_CONTACT and remove the Following entry
BP_CONTACT D Create MD-BPCP-CR MD-CONP-SR
Please note the Obj. Action here D Create, if you remove this entry it means you are disabling the Create Action for this business role for object Contact.
Hope this will help you.
Regards
Ajay

HR authorization for Display the documents in SAP DMS

HI experts,
We want to control display authorization depending on the entry made in object link tab in DMS( DOcument Management System). We developed screen for HR master object link. When user executes cv03n and enters document No. system should check hr master number entered in object link. If the user has authorization for that hr master number in PA (personnel administration), then he should be allowed to display the document. Otherwise it should restrict him to display the DIR.
Now my query is how to achieve it. Can anybody provide me some solutions
I have one solution, whenever user enter document number in cv03n screen, system will first check hr master number entered in object link and it will check the Personnel Area, Employee group and employee subgroup aginst this hr master number. Say for ex: PA:1000, EG:1 and ESG:01 for HR number xyz.
Now system should check in roles assigned agaist user id for these PA, EG and ESG values. If user has got authorization for PA:1000, EG:1 and ESG:01 in HR roles,then he should allowed to display the document.
Now my query is how feasible this approach? is this tough task for abaper? or is there any easier approach than this.
regards
sham

Hi,
Try to use the User Exit: CNEX0002.
Check with your ABAP er for the enhancement.
Hope it helps..
Thanks!!!

User xyz does not exist/not attached in this period

_we checked InfoType 0105, SubType 0001 the value was correct,date range covering the period of validity also not expire.
so any one suggest solution for this issue ?_
User xyz does not exist/not attached in this period.
[EXCEPTION]
com.sap.pcuigp.xssfpm.java.FPMRuntimeException: User xyz does not exist/not attached in this period.
at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:112)
at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:122)
at com.sap.pcuigp.xssutils.pernr.EmployeeGroupInfo.init(EmployeeGroupInfo.java:140)
at com.sap.pcuigp.xssutils.pernr.wdp.InternalEmployeeGroupInfo.init(InternalEmployeeGroupInfo.java:183)
at com.sap.pcuigp.xssutils.pernr.FcEmployeeServices.initPernr(FcEmployeeServices.java:270)
at com.sap.pcuigp.xssutils.pernr.FcEmployeeServices.onInit(FcEmployeeServices.java:226)
at com.sap.pcuigp.xssutils.pernr.wdp.InternalFcEmployeeServices.onInit(InternalFcEmployeeServices.java:273)
at com.sap.pcuigp.xssutils.pernr.FcEmployeeServicesInterface.onInit(FcEmployeeServicesInterface.java:135)
at com.sap.pcuigp.xssutils.pernr.wdp.InternalFcEmployeeServicesInterface.onInit(InternalFcEmployeeServicesInterface.java:198)
at com.sap.pcuigp.xssutils.pernr.wdp.InternalFcEmployeeServicesInterface$External.onInit(InternalFcEmployeeServicesInterface.java:258)
at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPM.attachComponentToUsage(FPMComponent.java:922)
at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPM.attachComponentToUsage(FPMComponent.java:891)
at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPMProxy.attachComponentToUsage(FPMComponent.java:1084)
at com.sap.xss.essceservices.vcceassignmentselection.VcCEAssignmentSelection.onInit(VcCEAssignmentSelection.java:235)
at com.sap.xss.essceservices.vcceassignmentselection.wdp.InternalVcCEAssignmentSelection.onInit(InternalVcCEAssignmentSelection.java:174)
at com.sap.xss.essceservices.vcceassignmentselection.VcCEAssignmentSelectionInterface.onInit(VcCEAssignmentSelectionInterface.java:162)
at com.sap.xss.essceservices.vcceassignmentselection.wdp.InternalVcCEAssignmentSelectionInterface.onInit(InternalVcCEAssignmentSelectionInterface.java:144)
at com.sap.xss.essceservices.vcceassignmentselection.wdp.InternalVcCEAssignmentSelectionInterface$External.onInit(InternalVcCEAssignmentSelectionInterface.java:220)
at com.sap.pcuigp.xssfpm.wd.FPMComponent.doProcessEvent(FPMComponent.java:564)
at com.sap.pcuigp.xssfpm.wd.FPMComponent.doEventLoop(FPMComponent.java:438)
at com.sap.pcuigp.xssfpm.wd.FPMComponent.wdDoInit(FPMComponent.java:196)
at com.sap.pcuigp.xssfpm.wd.wdp.InternalFPMComponent.wdDoInit(InternalFPMComponent.java:110)
at com.sap.tc.webdynpro.progmodel.generation.DelegatingComponent.doInit(DelegatingComponent.java:108)
at com.sap.tc.webdynpro.progmodel.controller.Controller.initController(Controller.java:215)
at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.init(ClientComponent.java:430)
at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.init(ClientApplication.java:362)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.initApplication(ApplicationSession.java:783)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:303)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingPortal(ClientSession.java:761)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:696)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:253)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
at com.sap.tc.webdynpro.clientserver.session.core.ApplicationHandle.doProcessing(ApplicationHandle.java:73)
at com.sap.tc.webdynpro.portal.pb.impl.AbstractApplicationProxy.sendDataAndProcessActionInternal(AbstractApplicationProxy.java:869)
at com.sap.tc.webdynpro.portal.pb.impl.AbstractApplicationProxy.create(AbstractApplicationProxy.java:229)
at com.sap.portal.pb.PageBuilder.updateApplications(PageBuilder.java:1344)
at com.sap.portal.pb.PageBuilder.createPage(PageBuilder.java:356)
at com.sap.portal.pb.PageBuilder.init(PageBuilder.java:549)
at com.sap.portal.pb.PageBuilder.wdDoApplicationStateChange(PageBuilder.java:303)
at com.sap.portal.pb.wdp.InternalPageBuilder.wdDoApplicationStateChange(InternalPageBuilder.java:197)
at sun.reflect.GeneratedMethodAccessor5506.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at com.sap.tc.webdynpro.progmodel.generation.DelegatingComponent.doApplicationStateChange(DelegatingComponent.java:139)
at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.doApplicationStateChange(ClientComponent.java:667)
at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.doApplicationStateChange(ClientApplication.java:537)
at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:120)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:333)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:741)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:694)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:253)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
ras

Hi,
In transaction HRUSER check if the user XYZ has been attributed to a valid pernr and if the user is valid in period.
regards,
Fabio Louzada Saito

Section Wise Authorization for automatic payment (F110)

Hi SAP Gurus,
Our client wants Section Wise authorization on Automatic Payment (F110). That is User A is authorized to make payments for the vendors which have open line items which has section XX. While User B is authorized to make payments for that particular vendors which have open line items which has section YY.
While execution F110 by User A, system will make payment for all those open items which has section XX. But, when User B is executing F110, system will make payment for all those open items which has section YY.
Please guide, how to achieve the results.
Points will be awarded
Regards
Rajesh Gupta

While executing F110, you can choose BSEG-SECCO in 'Field Name' field in 'Free Selection' tab and enter particular values for this field in Values field, i.e. XX or YY. That way, you can segregate payments. As far as authorization issue goes, check with your security consultant if particular users can be given authorization for F110 transactions for particular values of BSEG-SECCO field; I am sure this can be done in user authorization profile by the Security Team.

Error: Authorization for Reconstruct BW Structures

Hi, We are on BI 7.0 & ECC 6.0. I am trying to reload the PM data under LO Cockpit. I am trying to fill setup tables using tcode OLIIBW, when I schedule the job in the backend I get an error:
You do not have authorization for Reconstruct BW Structures in Plant Maintenance
I ran the SU53 to see the missing auth object in my profile. I found that I need authorization object S_BTCH_ADM for background Processing with authorization field BTCADMIN = Y.
My security analyst says that its a critical SOX authorization and they cannot give me. I need to know how can I run this job in the background. Is there an alternate way to do it? Why do I need critical access to run Standard SAP process.
kindly help .
Puneet

There really isn't a workaround for this because the OLI*BW tocdes are just selection screens for ABAP programs. The underlying ABAP program is where the security check lies that is checking your profile and is throwing the error.
Ask your security team if a background, non-dialog, user account has been setup for execution of background jobs on your ECC source system. If there has been one created, find out how has control over that account and have them execute the setup or ask if you can have the id and password for that account to be able to run the setup. Alternatively, ask your security team if they can create a non-dialog account whereby you would be allowed to execute the setup jobs in background.

Authorizations for Query loading

Hi,
We provided the authorization for EP screen and backend is BW while opening an screen we are getting an error " no authorizations for Loading a query" please can anyone will help me for this.. which authorization is require for laoding up query...
Thanks
Sonu

Hi,
Please create a role for the reporting user in T code PFCG.
Assign execute authorization for the query using authorization object
S_RS_COMP and S_RS_COMP1.
Assign the role to the user.
Basic idea is to make sure the user has execution authorization for the query you are running in Portal.
Please see below link
http://help.sap.com/saphelp_nw70/helpdata/EN/f8/7913426e48db2ce10000000a1550b0/frameset.htm
Regards,
Nitin

User XYZ has no authorization for tp command IMPORT

Similar Messages

Maybe you are looking for