03-11-2014 11:55 AM
Hi Team,
In SU01, i am unable to see composite roles. Only single roles are visible.
Recently system refresh happened in import/export method for User master data.
After refresh only this is happening. No authorization problems, but composite roles are not visible, but the single roles under composite roles only visible.
Please suggest, what happened and what is the resolution.
Thanks,
Sankar.
03-11-2014 12:13 PM
Hello Sankar, what happens if you add acomposite role to the user in su01? Can you see the user assigment in pfcg for the compsite role? regards, Bernhard
03-11-2014 4:55 PM
Thanks for the reply Berhard.
If i add manually, it is displaying in su01 correctly.
And yes, the user is visible in User tab of PFCG for a composite role (even before i add it manually also).
One more important thing i observed is, for some users, if i go to display mode in su01, single roles are visible.
if i go in change mode, first time the roles are visible but when i click page down button, the roles are not visible.
Please suggest.
Thanks,
Sankar.
03-12-2014 6:16 AM
Hello Sankar, for the moment i haven't really a suggestion for you. I think something went wrong during your refresh. So you can open a SAP ticket. If you don't mind the condition, you can leave it like it is. It depends how many time you would/can spend to serach for a soloution. kind regads, Bernhard
03-12-2014 12:49 AM
Hi Sankar
Are you seeing the user to composite role assignment in the AGR_USERS table?
Regards
Colleen
03-12-2014 3:05 PM
Hi Colleen,
Actually in our land scape, one single role is there in many composite roles.
So by seeing the single roles, i am unable to find to which composite roles the user assigned with.
but in one case, i saw the user was assigned in PFCG, but not the composite role shown in SU01.
Thanks,
Sankar.
03-12-2014 10:41 PM
HI Sankar
I was trying to keep it simple - does the composite role appear in the AGR_USERS table for the user (same as roles tab and shows if single role is via inheritance or directly assigned)
You are right that two composite roles with the same single role will not tell you which role (unless validity dates are different). But you can see mapping in AGR_AGRS of the roles.
Have you executed PFUD as well?
Regards
Colleen
03-13-2014 1:24 PM
Apologies, i misunderstood.
Yes i am able to see the composite roles in the table AGR_USERS against one user.
But those are not displayed in SU01.
For a User (which is effected with this issue) i know the composite role from which the single are there in user profile.
So i have tested by running PFUD for this composite role. But not worked.
And repeating again, when i go to display mode single roles are visible. But when i go to change mode and page down all roles not visible. Empty profile.
Thanks,
Sankar.
03-13-2014 7:43 PM
Have you got an alv filter in your su01. Agr_users table is the roles tab so your data is there
03-13-2014 7:49 PM
Bingo - the guru should have mentioned that he is on 7.31 or higher...!
Cheers,
Julius
03-14-2014 1:42 PM
03-14-2014 2:52 PM
You are correct - ALV on user tab in PFCG came with 7.31.
SU01 already had such filters long before.
So just delete the filter...
03-14-2014 3:44 PM
Hi,
Could you please let me know how to delete those filters.
Thanks,
Sankar.
03-15-2014 6:38 PM
There is a button with the label "Delete Filters" in the task bar. If you click on it, then.... elevator music is started on your PC and Bugs Bunny runs around on the monitor.
Cheers,
Julius
03-18-2014 11:38 PM
I have Obsolete Roles button. Is it the same you are saying.
If this is the case, what is the process for multiple users at a time ?
Thanks,
SANKAR.
03-19-2014 2:13 AM
Hi Sankar
not sure why you mention obsolete roles button instead of filter button? if composite was obsolete and that was your issue you would not see the singles either
On your roles tab you have ALV layout for the roles. There is a button (6 from left) that looks like a funnel/filter. Click on that and see if you have an option to "delete" filter.
The filter is screen layout and not user specific. You do not need to go through and fix each user up. The user has the access (you confirmed it's in the table). You are trying to fix your screen layout
Regards
Colleen