Cannot use create user as j2ee_admin

[Former Member]

Hi, All:

The system is: double stack, ABAP & Java, NW04s SR2 SP12, BI + EP, AIX + Oracle.

After successful installation, we logon the portal as j2ee_admin, when choose User Administartion -> Identity management, error occurs with message: "A required service for the identity management user interface is not available. Contact your system administrator ".

Then we go to http://<hostname>:50100/nwa -> administration -> identity management ->create user, error occurs with message:"Current user has user creation permissions in the UME, but cannot create users in the back-end system (data source). The original and possibly untranslated message was: "java.lang.reflect.UndeclaredThrowableException"

We check the UME settings via configtool and also check the sap_j2ee_admin role assigned to j2ee_admin in ABAP, it seems all correct.

So it's so strange that we can logon as j2ee_admin but can't do the user administration job.

Anyone met the same issue?

Any info will be highly appreciated!

Best Regards,

D.H

[kishorg]

Hi David,

In the case of dual stack installations, the default admin user for the Java Stack is j2ee_admin, which would be created at the installation time itself. By default, one system user SAPJSF will also be created by default for dual stack installations which is used for the communication in between the ABAP stack and JAVA Stack.

This system user will be used for the commucation in between(UME and ABAP datasource).

You can also see two roles named, SAP_BC_JSF_COMMUNICATION and SAP_BC_JSF_COMMUNICATION_RO. Based on the assigned role to the system user, SAPJSF, one admin user on the Java Stack can only view(if the assigned role is SAP_BC_JSF_COMMUNICATION_RO ) the User related data and can view/edit( if the assigned role is SAP_BC_JSF_COMMUNICATION) the User related informations.

Just check, the assigned role to the SAPJSF user. If the assigned role is SAP_BC_JSF_COMMUNICATION you can modify the user informations(create and modify) on the Java Stack using the j2ee_admin user, if the assigned role is SAP_BC_JSF_COMMUNICATION_RO , you will not be able to modify the user related informations through the Java Stack.

If you want to modify the user related informations through Java Stack, then you have to assign the SAP_BC_JSF_COMMUNICATION role to the system user, SAPJSF. After the role assignment you have to restart the server inorder the changes to take effect.

For data consistency and security, it is not recommended to manipulate the user related informations using both su01(ABAP) and UME(java).

Regards,

Kishor Gopinathan

[Former Member]

Hi,

in netweaver 04s system with abap+java stack installed you cannot user in portal system you can only assign roles but creation of users has to done in ABAP side since during installion you have selected UME as ABAP system

Samrat

[javed_shaikh]

Hi It is true that u cannot do user administration job in 2004s stack, the way around for this is u have to create a user in ur ECC stack assign it initaill SAp_ALL and SAP_NEW permissions then logon with the same user on the portal assign Admin role for itself and then go adhead.

One more thing in the fresh installation you will not get Administartor user by default created, need to create one with the method above and then use this user for User management Job ahead