Can't Log in to Visual Administrator

[former_member212002]

Hello gurus,

I am not able to log in to Visual Administrator, when i am trying to log in it is giving me error as

Error while connecting

com.sap.engine.services.jmx.exception.JmxSecurityException: Caller J2EE_ADMIN not authorized, only role administrators is allowed to access JMX

How can overcome this??

Any kind of help will be appreciated.

Regards

Abhinab Mishra.

P.S : I am not a BASIS guy.

[Former Member]

Hi,

Looks like Authorization has been modified for this user in your system. Please check with your SAP Security team for this.

With Regards,

Saurabh

[former_member212002]

can u tell me how can i do it on my own.

Regards

Abhinab Mishra

[Former Member]

Hi,

Do you ABAP+ J2EE stack or only J2EE stack?

With Regards,

Saurabh

[former_member212002]

ABAP + J2EE stack i guess.

As i have installed with both AS JAVA and AS ABAP.

[Former Member]

Hi,

Please check the user authorization using the TCODE SU01 or SU01D

Put the J2EE_ADMIN user there and press F7. After that check the tab Role and ensure that you must have role "SAP_J2EE_ADMIN" there and the light against that role should be green.

With Regards,

Saurabh

[former_member212002]

hi Sourav,

Thanks for your time and reply.

But those things are already there when i checked those using tcode su01d

Now what to do??

Regards

Abhinab Mishra

[Former Member]

Hi,

Please check the note "Note 1306097 - Call to /inspection.wsil fails with JmxSecurityException"

With Regards,

Saurabh

[former_member212002]

Sorry can't do that i don't have a marketplace id.

Regards

Abhinab Mishra

[Former Member]

Hi,

I can not copy and paste entire note because this is not allowed here. But still I will try to give to key points and you have to take the help fo your BASIS teamto do these steps.

Solution

Double stack installation :

1. Assign a user a role that has the permission for the UME action JMX.JmxManageAll. You can either create a new role or use the #administrators# role. 2. Assign the user to the WSILSecurityRole from the web application sap.com/com.sap.engine.services.webservices.tool*inspection.wsil

In order to do that on a Java-only installation, you can proceed like following :

Open NWA, go to System Management - Administration -

Identity Management

Create new role, assign action to it - named "JmxManageAll" from service/application "JMX" and type "UME"

Add this role to the user or group that you want to access the inspecion.wsil page.

Open VA, go to Cluster - Server - Services - Security Provider

Scroll to sap.com/com.sap.engine.services.webservices.tool*inspection.wsil,

click on button "Switch to edit mode",

go to tab Security Roles,

select WSILSecurityRole,

click on radio button SecurityRole (accept the popup warning),

Click on "add" button, either for users or directly for groups,

Search and select for users or groups you want to grant permissions for. The change is directly saved.

With Regards,

Saurabh