User comparison standard program not working properly (RHAUTUPD_NEW)

[former_member1125092]

Hi ALL

We have schedule the user comparison standard program (RHAUTUPD_NEW) in background mode, but user comparison is not working properly.

For example: we have assigned the certain roles (MM01) to the user on 01/05/2010 by using transaction code SU01, next day user unable to access the certain transaction.

Note: user comparison standard program schedule job will run on daily basis.

Please help us to resolve the issue.

Regards

K.Gunasekar

[Former Member]

I there should be no problems as such. Just make sure that all the newly created roles have profiles generated. Ans try it again. Usually it happens when there is no profile for a role.

[martin_voros]

Hi,

you can display all authorization objects assigned to user in transaction SU56. This should give you a list of authorization profiles assigned to this user. So you can check where the problem is.

Cheers

[Former Member]

Hi Gunasekar,

Run the report PFCG_TIME_DEPENDENCY and check.

Regards,

Chaitanya.

[former_member1125092]

Hi All

Report PFCG_TIME_DEPENDENCY is linked with repot RHAUTUPD_NEW, Any other reason system why system not update the user comparison properly.

Any idea.

Regards

K.Gunasekar

[Bernhard_SAP]

Hello K,

pfcg_time_dependency picks roles as per selection rolename='*'.

The quesiton is, which variant are you using for rhautupd_new?

Is the name of the new roles covered by the selection of your variant? Which options did you check for your variant?

Has the user under which the job runs sufficient authorizations?

and: has that particualr user with the auth.problems already too many profiles assigned (312)?

What happens if you start profile comparison directly in pfcg for that role/user?

b.rgds, Bernhard

[Former Member]

hi,

are you working in CUA environment ?

If so,then check SCUL log files.

Regards,

Chaitanya.

[Fabrizio_Irmici]

Hi,

check the job log with tx SM37 and post the error to the forum, in my point of view you have to verify the variant that you use and you have to execute tx SUPC in order to check the status of the roles.

regards,

Fabrizio