2009 Aug 14 8:06 PM
Hi folks,
I'm getting some trouble with SAP roles, and wanted to ask for some help.
There is a user who had access to the transactions F110 and another Z transaction, and after assigning a role for her to get access on FCHI, she lost access for those first two transactions.
We have already tried to clean the user buffer, but it didn't work.
Does anybody know what could possibly be the problem in this case, as she needs access to the three transactions?
SAP version is 4.6.
Thanks in advance!
Hi folks,
I'm getting some trouble with SAP roles, and wanted to ask for some help.
There is a user who had access to the transactions F110 and another Z transaction, and after assigning a role for her to get access on FCHI, she lost access for those first two transactions.
We have already tried to clean the user buffer, but it didn't work.
Does anybody know what could possibly be the problem in this case, as she needs access to the three transactions?
SAP version is 4.6.
Thanks in advance!
2009 Aug 14 8:38 PM
Assigning the new role will (probabely) have caused a 'user compare'. Have a look at all begin and end dates for the role assignment this user had. Change teh dates for any expired roles and save the user master.
In addition to that, have a look at the change documents (SUIM) for this user to see whether a profile was directly added to the user master, not by assigning the role it bekongs to. This profile may have been deleted by the user compare. Find the role for that profile and assign that to restore the old situation.
2009 Aug 17 7:36 AM
2009 Aug 17 3:06 PM
Hi,
Check whether there was any role change was done for the respective roles of the two transactions.
Assign ment of any transaction should not remove any other access.
You can regenerate the profile for the respective role if that is Ok. If there is any temporary issue with buffer, it should solve the issue.
Regards,
Sandip.
2009 Aug 17 5:49 PM
Hi dudes.
Thanks for your help!
I've checked today, and it seems the user is no more having this issue. As I have looked to her profile, and asked some help around here, we found out that maybe it was a delay due to the user having too much authorizations (over 3000 profiles), which I've been told is not a good thing in 4.6, and may really cause some problem or delay. The responsible guys said they're probably going to change some security concepts to reduce this access.
Even though, thank you all for the help!
Rod
2009 Aug 17 7:00 PM
> user having too much authorizations (over 3000 profiles), which I've been told is not a good thing in 4.6,
Yeah, that's a fairly big oops I'd say, and not only in that version. Have a look at SAP note 410993 "Maximum number for profiles and authorizations".