SMD Agent "Access Denied"

[Former Member]

Hello

We installed a new Solution Manager 7.0 Ehp1. The configuration steps with the transaction SOLMAN_SETUP where successful.

Now we want connect a managed system to the solution manager for E2E. In the configuration steps of a managed system we installed the smd agent and connect it to our new solution manager.

The agent registration fails with following exception:

u201CReceived SMD Access denied exception

[EXCEPTION]

com.sap.smd.api.AccessDeniedException: Access denied - SMD Agent connection requires some Security Roles: administrators, SAP_JAVA_SUPPORTu201D

We use the user SMD_<SID> where is a copy of the user SMD_ADMIN. The user has the SAP_J2EE_ADMIN Role and the SAP_JAVA_SUPPORT Role. We tested it with every other User on the system like SOLMAN_ADMIN. Everytime the same error.

Regards

[Former Member]

hello

we opened an oss-message with the problem. the solution from sap was: unistall the smd-agent and reinstall it.

and this work. same user, same enviroment just uninstall and reinstall it and the connect was succesfull.

hope that this way works for you to.

regards

simon

[Former Member]

Hi,

Could you please check if both the J2EE roles SAP_JAVA_SUPPORT and jndi_all_operations

are already assigned to SMD_ADMIN user (& copy user also).

If not please assign the 2 required roles. Administrator role is not required from EhP1 onwards.

Also check information available in Supportability guide (page 20)

https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/5eadd4fb-0701-0010-b7ab-e4becf02...

ABAP Role

The SMD User on the Monitoring System requires the ABAP role SAP_SOLMANDIAG_SAPSUPPORT. It is delivered within SAP standard as of NetWeaver 04 SP Stack 13 (see SAP note 828533).

To create this role manually, refer to Creation of Role for ABAP User [see page 57].

J2EE UME Role

The SMD User on the Monitoring System requires the UME roles SAP_JAVA_NWADMIN_CENTRAL_READONLY, SAP_JAVA_SUPPORT (successor of role SAPSUPPORT) is delivered within SAP standard as of NetWeaver 04 SP Stack 13. To create this role manually, refer to Creation of UME Role for J2EE Engine [see page 58].

J2EE Server Roles

-

---

One more possbile reasons may be, SMD_ADMIN user is not available on all the managed system.

Check E2E root cause analysis guide, Required users for installation (of E2E root cause anaylsis using SolMan)

I hope this information will help.

Best Regards,

~_{Pradeep Bishnoi}~

[Former Member]

Hello.

I have exactly the same problem with solution manager EHP1.

Did you find any solution? We are not able to fix this issue.

Any help?

Thanks a lot