cancel
Showing results for 
Search instead for 
Did you mean: 

BRM - Role Generation not possible - "Destination already Exists"

Former Member
0 Kudos

Dear Experts,

When trying to generate a role in the target system over BRM, GRC give the message "Destination already exists".

The cause for this might be that the role administrator has created the role as well in the target system (only in the development system) before he started to user GRC.

I thought the solution would be to delete the role in the target system directly by using PFCG and then try again generating the role over GRC.

But unfortunately the message still comes up and a role generation is not possible.

Does anybody experienced a similar situation or has an idea how to solve the issue?

Thank you very much in advance for your feedback and best regards,

Eva

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Eva,

It seems the problem is with the Invocation of PFCG from Role Management for maintaining Authorizations in Backendsystems. We believe this issue is with Browser settings of Trusted
Sites. Users working on Role Management need to set the GRC Serveras Trusted sites &  ActiveX Controls.

We have created a Note for this Trusted Sites & ActiveX Controls for 5.3
Version, which have information of what to do in the Browser settings.
Please check the Note 1291501 for Trusted sites setup, which has an
attachment too for setting this up.  Please only work on your Browser
settings of Trusted Sites & ActiveX controls.

Additionally, Please check whether the User generating the Role has Role Designer/

Role Generation authorization in plug-in system as well in GRC system.

The User should also have Connector authorization in order to resolve

the generation issues.

Hope this information helps.

Best Regards,

Nandita

Former Member
0 Kudos

Hi Nandita, Akhil and Shaily,

thank you for your answers, we made a slight progress as we get another error message after given the user access to object S_RFC_ADM with activity 01 in the GRC system.

We are on a higher level for the IE8 than suggested in Note 1291501 and are using GRC AC10.

The connection to 1174449 is not really clrea to me and in ST22 no run time errors occured today or yesterday.

Now the following error message comes up:

Unknown error occured (C25001) (C25 is the development target system where the role should be generated)

I do have SAP_ALL /SAP_NEW in the system so it should not have any impact from authoriaztion point of view.

Does any of you have further ideas?

Thank you very much in advance and best regards,

Eva

Answers (7)

Answers (7)

Former Member
0 Kudos

Hi All,

thank you for your effort, we havn't been able to solve the issue completly as the is still a error message while role generation is coming up: TCODE of role ...can not be added (Dev System with client).

But....by click on save and continue in the Step Generate Roles, the role creation workflow jumps automatically to maintain test cases and by that proceeding in the workflow is possible.

Thank you again for all your help and have a nice weekend.

Best regards,

Eva

Former Member
0 Kudos

Hi Eva,

Kindly check the following configuration in the Plug-in system.

Login into back-end system and go into SU25 transaction and
check the below:

- "step 1 - Installing the Profile Generator" and then
"Initially Fill the Customer Tables" is activated.

If the date is some time in the past, then try to reactivate
this so that the latest objects/data are synced.

Kindly check the follwing and let us know how it goes.

Please review/implement the attached sap note-1637530.

Best Regards,

Nandita

Former Member
0 Kudos

Hi Eva.

How did you solve the first issue? That means the message error "Error unknow ocurred". With SU25?

Many thanks in advanced.

Best regards.

Former Member
0 Kudos

Hi Eva,

Kindly follow the thread given below having few more details regarding role generation:-

http://scn.sap.com/thread/2059118

Let us know if it helps.

Thanks & Regards,

Akhil Chopra

Former Member
0 Kudos

Hi Eva,

Kindly check that do you have parameter 3013 set as yes?

If so then BRM tries to create a SM59 destination using the logged on system credentials.

I think in your case the SM59 destination already exist. Try searching some SM59 destination which might give you some idea.

Best Regards,

Nandita

Former Member
0 Kudos

Hi Nandita,

related to the missing authorazitions, I have been using SAP_ALL in both systems know and it is still not working (a trace in ST01 showed as well no authorazition errors).

Related to the parameter 3013 it is set to yes, but I don't really understand what you mean with "Try searching some SM59 destination which might give you some idea.". And why is BRM trying to create a RFC connection when generating the role, the RFC connection already exists, otherwhise I would have been able to sleect the connector, or am I wrong? But anyway, the error message desitination already exists is no longer appearing, it is only saying "unknown error occured (C25001)" which is our target system in this case.

Do you have any further ideas what to check/change,...?

Thank you very much in advance for your support.

Best regards,

Eva

Former Member
0 Kudos

Hi Eva,

Glad to know that our answers helped you!

This error could be due to some misisng authorizations,Please check that the user has adequate

authorizations to perform this action.Kindly refer to the Security guide for the same.

Best Regards,

Nandita

saksham
Advisor
Advisor
0 Kudos

Hi Eva,

Kindly check the SAP note 1484863-Error 'Unknown Error occured'.

Best Regards,

Saksham Minocha

Former Member
0 Kudos

Hi Saksham,

the user has in both systems access to the authorazitions mentioned in the SNOTE and we are using GRC AC 10.0.

Do you have any further ideas?

Thank you and regards,

Eva

Former Member
0 Kudos

Hi Eva,

You can also check SAP Note #1174449 - Download and start of SAP Shortcut from URL fails sent.

And please make sure that you have assigned proper authorization to the login user.

But if you still face issue, then kindly check the ST22 logs and let us know that what error is coming.

Regards,

Shaily

Former Member
0 Kudos

Hi Eva,

Can you try by assigning SAP_GRAC_NWBC and SAP_GRAC_ALL roles to the user ID with which you are trying to generate a role.

Thanks & Regards,

Akhil Chopra