User member of Administrators group does not have rights to access the CMC
Hi the community,
We are with a SAP BO 4.1 SP6 Patch 2: when we create an enterprise user via the CMC, we add it to the Administrators group, and then we try to log in to the CMC via this user, we have the following error:
You do not have access rights to log on to the application
Do someone already faced that type of issue ? Or are we missing something ?
The only way to be able to connect to the CMC is to add the security for each user on the CMC Application directly. But after when trying to promote from Dev to Qas, it does not work. We have the same problem on each platform (Dev, Qas, Prod).
Thanks for your help!
Like you said every user present in BO is a part of the Everyone group, this also applied to the users in Administrators group or any other for that matter.
So if you deny a certain right let's say to View a certain object, it causes a conflict.
Because a more restrictive right always takes precedence.
So Deny + Grant = Deny.
Grant +Grant = Grant
Grant + Not Specified = Grant.
Deny + Not Specified = Deny.
So you it is not a good idea to Deny a certain right, you should keep it unspecified in most cases.
So users who don't have it explicitly granted, won't be able to acess it.