Supplier authorization issue

[Former Member]

When a supplier administrator logs into the SUS - he gets the below authorization error.

He is given the /SAPSRM/SUS_ADMIN_SUPPL_EHP1 roles.

Is there any other roles that need to be provided or any issue with profile generation?

I am not sure if the OSS notes "1501492  - Authorization error in SUS "Action has errors. You are not authorized to call this action" - SRM" is applicable, because this issue is happening for /SAPSRM/SUS_ADMIN_SUPPL_EHP1.

The table AGR_BUFFI has the entries *%2e* in the URL for the roles /SAPSRM/SUS_INVOICER_EHP1, /SAPSRM/SUS_ORD_COLL_USER_EHP1 & /SAPSRM/SUS_SERVICE_AGENT_EHP1.

[ivy_li]

Hi,

Would you please first check if this role was ever modified?

Please also check object key (SUS-Specific Role Attributes)BBP_SUS_ROLE_ATTRIBUTES in personalization tab of role  /SAPSRM/SUS_ADMIN_SUPPL_EHP1 via trx pfcg.

"Display of role in SUS UM"

"SUS administrator"

should be ticked for this object.

Regards,

Ivy

[Former Member]

It is not modified. In PFCG 1) Display of Role in SUS UM and 2) SUS Administrator is ticked.

[ivy_li]

Hi,

Would you please attach more pictures to show the authorization of this role from PFCG?
Is there any yellow light?

Regards,

Ivy

[Former Member]

Hi Ivy

Please find the screenshot attached.

Below are the supplier roles and both these users does not work and show the same "You are not authorized to call this function". How ever if I give SAP_ALL to them, then they are able to access their purchase orders.

Thanks

Kasee

[ivy_li]

Hi Kasee,

WOuld you please attach two screens?
1, 'Authorization' tab for role /SAPSRM/SUS_ADMIN_SUPPL_EHP1 via pfcg

2, in 'Authorization' tab, please click authorization button and show me the all the authorizations assigned.

Regards,

Ivy

[Former Member]

Hi Ivy,

Please find the role attached.

Thanks

Kasee

[ivy_li]

Hi Kasee,

There must be some changes for this standard role, since yellow light is shown in the authorization. Please import purely standard role and retest the issue.

Regards,

Ivy

[Former Member]

There was no change other than generating the profile. I have compared with another unused client also.

Can you let me know how to get back unchanged role?

[ivy_li]

There are two ways:

1, check what changes have been done for the authorization of this role by using program RSSCD100_PFCG. Then you can revert this back.

2, I can download this role from standard system. I can send to you via email.

If you want option2, please tell me you mail address.

Regards,

Ivy

[Former Member]

Hi Ivy,

Thanks for your help. My email PL.K ASEE at G M A I L.

Also let me know how to upload it back?

Thanks

Kasee

[ivy_li]

Hi Kasee,

Is you mail address  PL.K ASEE@gmail.com ?

I can't send to this box. Would you please specify the complete email address?

Regards,

Ivy

[Former Member]

Hi Ivy,

It is pl.Kasee@gmail dot com.

Thanks

Kasee

[ivy_li]

Hi Kasee,

I received your feedback via mail, and hope this will be of help to solve the error.

Regards,

Ivy

[Former Member]

I have not had a chance to upload the roles as SAP is already looking into this via a OSS incident.

I will get back here later. Thanks

[former_member450986]

Hi ,

we are facing the same problem.

Regards

TTL Team