Unable to create user in Java stack

[Former Member]

I'm using SAP IDM 7.2 SP4 Patch 1 to create users in Java stack. Credential of "Administrator" is used to connect to Java stack and create new users. But following exception occurs after "Create Java user" job is executed.

putNextEntry failed storingSPML.SAPUSER.TEST1

Exception from Add operation:com.sap.idm.ic.ToPassException: Administrator is
not allowed to perform add request

Exception from Modify operation:com.sap.idm.ic.ToPassException: SPML
exception: Administrator is not allowed to perform modify request

I've already tried to assign all User Admin, Manage*,etc actions to "Administrator" user in UME. But even after assigning all the actions I still receive the above mentioned error.

Is there any specific role/action that has to be assigned to "Administrator" user?

Experts, please advise.

[Former Member · Accepted solution]

Hi

Did you create & assign the SPML Roles?

AS Java does not come with predefined permissions for SPML interface.

You have to create at least a Role e.g. "SPML.ReadWrite" and assign the SPML.WRITE Action to it, it's described somewhere in the IdM guides.

Does your UME get users from different servers, e.g. LDAP or ABAP? Then this might be the cause.

Regards

Michael

[Former Member · Accepted solution]

Thanks Michael.

Your comments helped me find SAP Note Note 1484633 - Access to SPML service.

I've assigned following UME actions and things are working fine:

Spml_Read_Action

Spml_Write_Action

MANAGE_ALL_COMPANIES

Thanks again for your help