on 10-26-2015 7:09 AM
Hi Experts,
I have created four users in Front-end and Back-end(Admin,End-User, and two test users).I have assigned Business role and Technical catalog role in PFCG.Approve Purchase Order and Approve Requisition these two apps are available in the launchpad for the Admin user but for the remaining three users apps are not available in the launchpad.
End-User:
Admin:
Thanks&Regards,
Chenchu
Hi there,
do you get the tiles if you execute the /n/UI2/FLC FLP check report restricted to the Cust layer and the roles assigned to the affected user?
If yes, then please make sure that notes 2230554, 2154643 and 2200279 are implemented in your system and then please recreate the page cache with reports /UI2/PAGE_CACHE_RESET and /UI2/PAGE_CACHE_CREATE. After this check if translation is working.
If the above not solves the issue, execute report /UI2/INVALIDATE_GLOBAL_CACHES
Best regards,
Janos
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Chenchu,
Possible solutions for above issue.
1. Tiles might be added already but if you are not able to see on home screen, it could be issue with group. Please create a Business role and add app to catalog and then to group. So that use can see app by default on launching.
2. Second possibility is that tile might be added already, just you need to add by clicking on top left corner icon and select from catalog
3. Third possibility is some authorization issue. Please make sure that end user is assigned with SAP_UI2_USER_700 role with required personalisation authorizations.
Please check your console log for any possible errors and if present please post here so that we debug the issue further.
Regards,
Arun.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Chenchu;
This error in console is because of missing authroizations only.
For enduser authorization objects which are required in order to view catalogs, groups are as below
1. S_SERVICE
2. S_RFCACL
3. /ui2/chip
4. s_pb_chip
Assign above authorization via a custom role to user.
Even giving SAP_UI2_USER_700 is not enough. It has missing authorizations for some of the objects.
SAP has also acknowledged the missing authorizations in the standard role.
http://service.sap.com/sap/support/notes/2168841
Regards,
Sarbjeet Singh
Hi Chenchu,
As Sarbjeet mentioned, your console errors are related to authorization issue for end user. Please make sure that Admin assigned SAP_UI2_ADMIN_731 and end user assigned with SAP_UI2_USER_700. Please cross verify auth objects as mentioned below are assigned for end user and admin. Please make sure that users are having S_RFC,S_RFCACL authorization to pull data from back end.
For End users
S_PB_CHIP | ACTIVITY | 03 and 16 | This authorization object is important for accessing the page builder. You can use these values in roles for users who should be able to display pages. |
CHIP_NAME | X-SAP-WD-CHIP* | ||
/UI2/CHIP | ACTIVITY | All activities | This authorization object is important for accessing the page builder. |
You can use these values in roles for users who should be able to delete and add tiles on personalize pages. | |||
/UI2/CHIP | X-SAP-UI2* | For end users, restrict the activities to 03 (display) and 16 (execute). | |
S_SERVICE | SRV_NAME | /UI2/PAGE_BUILDER_PERS | This is a hashed value. Each service has its own hash value, that is, you can restrict the access to the system on system level. If you need the linkage of hash value to object catalog entry, refer to tableUSOBHASH. |
/UI2/INTEROP | |||
/UI2/LAUNCHPAD | |||
SRV_TYPE | HT | Hash type |
For Admin
S_PB_CHIP | ACTIVITY | All activities | This authorization object is important for accessing the page builder. You can use these values in roles for administrators who should be able to configure, customize, and personalize pages. |
CHIP_NAME | None | ||
/UI2/CHIP | ACTIVITY | All activities | This authorization object is important for accessing the page builder. You can use these values in roles for administrators who should be able to configure, customize, and personalize pages. |
Activity 06 is required for running the following reports: | |||
Report/UI2/INVALIDATE_CLIENT_CACHES | |||
Transaction/UI2/INVAL_CACHES | |||
/UI2/CHIP | X-SAP-UI2* | For end users, restrict the activities to 03 (display) and 16 (execute). | |
S_SERVICE | SRV_NAME | This is a hashed value. Each service has its own hash value, that is, you can restrict the access to the system on system level. If you need the linkage of hash value to object catalog entry, refer to tableUSOBHASH. | |
SRV_TYPE | HT | Hash type | |
S_CTS_ADMI | CTS_ADMFCT | TABL | All these authorization objects are needed for different aspects of adding development objects to a transport request. |
S_CTS_SADM | CTS_ADMFCT | TABL | |
S_SYS_RWBO | ACTVT | 1 | |
TTYPE | CUST, DTRA | ||
S_TRANSPRT | ACTVT | 01, 03 | |
TTYPE | CUST, DTRA, TASK | ||
S_DEVELOP | ACTVT | 01, 02, 03, 06, 16 | |
DEVCLASS | * | ||
OBJNAME | Configuration ID | ||
See Checking Launchpad Content. | |||
If no restrictions are needed, enter *. | |||
OBJTYPE | WDCC | ||
S_WDR_P13N | OBJNAME | Configuration ID | |
See Checking Launchpad Content. | |||
If no restrictions are needed, enter *. |
Regards,
Arun.
Hi Chenchu;
It seems like an authorization issue.
Please check in su53 for this user. Also try to put trace in St01 and find out the missing authorizations.
Most probably /UI2/PAGE_BUILDER_PERS 0001 related authorizations will be missing.
Regards,
Sarbjeet Singh
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
83 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.