on 02-02-2011 4:16 PM
Hi,
when i start initial load, i just get users with groups. Is that standard?
Br,
Philip
This should not happen.
Or do you mean users with a role assigned?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
If you look at table sap%REPNAME%users, what can you see there? Do you see the same users?
Is a FILTER defined in the ReadABAPUsers -> Source-Tab?
Is a where/join defined in WriteABAPUsers -> Source-Tab?
Does your service/communication-user has a special restriction in place (Profile-maintenance)?
BR
Michael
First of all - you'll need to familiarize yourself with the database for effective learning and debugging. I'm talking about the MS-SQL or Oracle-DB where you installed the IC-schema. It often helps me to understand whats going on behind the scenes.
Secondly - I read some of your posts - I would advise you to install the dispatcher and everything on the server where the DB is hosted - at least as long as you're in development. The MMC can still be on your local pc/laptop, although some things won't work well there (Import, Dispatcher-Status, ...). This'll ease things a lot I suppose.
About the service-user... SAP delivers a role you can import into PFCG (SAP_BC_SEC_IDM_.SAP-File in misc-folder of installation media). This role should be sufficient for your communication user, is updated every now and then and contains only the necessary permissions. Maybe you'll have to extend it (Z_SAP_) in case you want to read special tables not supported by the SAP framework (e.g. license data).
I can hardly believe that the current role assigned to your user only has permissions to users with groups != empty
By now I have no clue why you only see users in IdM with groups assigned in SU01... look up the SQL-table I mentioned if there are more users.
BR
Michael
Hi Michael,
we use an Oracle-DB and i have often been connected to it with ora developer.
I think maybe wrong, but i could not find these temp tables for exampe sapREPusers in the db. Where should it be exactly?
All normal tables and views can be found under user ORADB_OPER.
I agree too you in relation to the installation of dispatcher/ic on server. I told my sysadmins already yesterday.
Service user has SAP_BC_SEC_IDM_COMMUNICATION role. AUTO_USERCOMPARE = YES at PRGN_CUST
Br,
Philip
User | Count |
---|---|
84 | |
24 | |
12 | |
9 | |
7 | |
6 | |
5 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.