on 01-15-2015 3:42 PM
Dear all,
We’re experiencing an issue with the security (users) in our SAP BPC 10.0 NW environment. We have some users with [SAP ALL] profile and, as expected, we can use the users in BPC and they can see everything (they don’t have any kind of restrictions in the data access). Then, we deleted the [SAP ALL] profile to constraint the access to some elements of the dimensions and then, assigning the users to specific teams, were when the issue appeared.
If we have a user who previously was [SAP ALL] and he/she was in the environment but the we removed the [SAP ALL], then when assigning the user to a team via the Planning and Consolidation Administration we receive and error message indicating that the user does not exist.
If we delete the user and try to add again the user we receive and error message also, the user is added but it is not assigned to any team selected in the second step of the wizard.
Also, we can identify that there is something wrong because when selecting the user we cannot see the full name and the email (it is shown for the users with [SAP ALL] profile).
If we assign the user to a team via the team configuration, when clicking on “Save” everything finishes ok (at least that’s what is shown), but after closing the window the user is not assigned to the team.
The BPC and BW roles and profiles seem to be ok because users with the same roles/profiles (except the automatically BPC generated roles) works fine for other environments.
Looking through the support portal we found this note: 1750837 - BPC 10 NW: Not able to create any users in BPC web, which we tried to apply, but after deleting the environment we weren’t able to recreate it.
It seems to be something related with the environment. Do we need to select something in some parameter or configure anything in any specific way?
Thanks in advance, kind regards.
I had such a mistake, too - User does not exist.
fixed by running UJE_VERIFY_SECURITY_DATA with the option "Fix security data if has
error" for all your environments (though it is optional to run this
report).
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Fernando,
did you solve your issues?
I have the same problem for this part:
If we assign the user to a team via the team configuration, when clicking on “Save” everything finishes ok (at least that’s what is shown), but after closing the window the user is not assigned to the team.But not always, sometimes I can assign the user to the team but I couldn't understand why sometimes it works and sometimes it doesn't.
Thanks,
Michele
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi everyone,
thanks for the responses. The users have the correspondent /POA/ roles and they can login to the BPC system, but as I am not able to assign them any role they are not allowed to access any environment.
Regarding the generated roles/profiles it seems that they have the ones required, the problem is that looking within the roles, the authorizations are empty and we don't know why are they empty, because as far as we know authorizations should be filled automatically by BPC.
Also, when adding the same user to another environmet which works fine, the authorizations tab within the role is automatically completed. So it seems to be something related with the environment. Do we need to configure any special parameter?
Many thanks in advance, kind regards.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Please refer to the SAP Notes:-
2069582 - BPC NW : Cannot create teams. Error message: NW active group ZBPC_XXX does not exist.
Regards,
Bishwajit
Hey Santos,
As far as I know the problem is the environment is not properly restored.. Please check that all the standard element are available in BPC or not (Like Standard models, dimension etc...).
I also face the same issue previously while restoring the environment shell some standard models are missing at that time( I observed that only, Some other things are also miss at that time I am not keenly observe that), Then I restore the environment shell again, its successful. After that I am able to add users successfully ..
Please go through the following link once here. In that link loading using by using User mass management ..He is trying to load users by using the back end process. Hope so both are nearly same.
http://scn.sap.com/thread/3678586
hope this will helpful for you
Regards,
Saida Reddy G
Hi,
Just to confirm...
Have you assigned the below background roles to the users:-
1. /POA/BUI_FLEX_CLIENT
2. /POA/BUI_UM_USER
Also confirm that once the roles are assigned, check if the users can login to the BPC system.
Regards,
Bishwajit
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Fernando,
When you remove the SAP ALL profile to the users , what generated profile they have now?
They should have at the minimum of display access roles. Aren't they have any other BW related roles?
Did you try to create any BPC BW Specific roles to the BPC users to isolate them from the BW users/developers?
My guess is if you follow this method, you will not have any role/profile conflicts and it would be easy to manage security in the front end.
Hope this helps..
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.