Intresting J2ee_admin has no RFC authorization for SYST

[Former Member]

Hi All,

In my dev server, in the runtime workbench ->Component monitoring -> the adapter engine -> Is a user defined for component AF ?

Error 1: It says J2ee_admin user is locked ( i have unlocked it in SU01 for several times and again it gets locked back after some time) can some one kindly give what is the reason for this ?

I am sure this is not caused by manual wrong password login's and we have not changed the password from long time and we r still using the same old password.

Error 2: After i unlock j2ee_admin, it says "J2ee_admin has no RFC authorization for SYST"

J2ee_admin currently has the following roles

SAP_J2EE_ADMIN and SAP_S_RFCACL

Administrator role on Java side

when i assign SAP_ALL to the j2ee_admin, this works fine with out any error.

I am suprised that same j2ee_admin works successfully in QA and PRD boxes with out SAP_ALL authorization ( with only one role SAP_J2EE_ADMIN)

Note: My security lead is not allowing me to use SAP_ALL for DEV box as j2ee_admin on QA and PRD does not contain SAP_ALL ? Java role (administrator is same on all DEV, QA and PRD)

Can u please help me on this ?

Thanking you in advance.

Regards

Sonali

[Former Member]

Hi Sonali,

It says J2ee_admin user is locked ( i have unlocked it in SU01 for several times and again it gets locked back after some time) can some one kindly give what is the reason for this ?

Please check whether usertype is Dialog or not. If it is not dialog change it.

Regarding your issue J2ee_admin has no RFC authorization for SYST:

This is described in SAP note 460089. You need S_RFC, please see the

note for details.

Hope it resolves your issue.Please let me know if you still any issues.

Thanks

Kishore

[Former Member]

Hi All,

My problem still remains the same ....please help me

There is S_RFC authorization role in XI 3.0.

Thanking u in advance.

[JPReyes]

Have you done an authorization trace to see which authorization objects is been checked?

Regards

Juan

[Former Member]

Hi All,

I am sorry, There is NO S_RFC authorization role in XI 3.0.

Thanking u in advance.

[Former Member]

Hi All,

I am sorry, There is NO S_RFC authorization role in XI 3.0.

Thanking u in advance.

You mean S_RFC authorization object.

Please find a role (or create a new one) with the authorization object S_RFC and assign it to j2ee_admin user.

Tanks.

[Former Member]

Hi All,

After adding S_RFC object my issue is resolved

[Former Member]

Hello,

Some time you need S_RFC too not only S_RFCACL.

Your roles are generated?

What's the SAP version ?

Thank you,

[Former Member]

Hi Adrian,

our SAP version is NW2004(kernel- 6.40) XI 3.0 and i cud not the role S_RFC in my system .

Anyways my QA and PRD runs fine with out these any additional roles, i want to know why the development server does not run fine with the same role ??

Thanks for ur reply.