Unable to view assigned role of an user in IDM UI

[Former Member]

Hi All,

We are not able to view the roles being assigned to a particular user(Identity). Roles are getting assigned to identities since we are able to view the identities under roles.

This issue might be happening because MX_PERSON is not bale to establish a relation with MX_ROLE.

Please find the following screenshot.

Here entry type relations is disabled because of which we are not able to check the relations. Please let us know how to enable the relations tab so that we can connect the MX_PERSON with MX_ROLE.

Thanks,

Nivedita S K

[Former Member]

Dear All,

As I have assigned privileges  to user in SAP IDM but when I check its showing status as Pending at the same user is not created in backend system also. please find the screenshot. kindly suggest.

Thanks

Sajin

[former_member2987]

Sajin,

This should be a separate thread, also I believe it's covered elsewhere in this forum.

Thanks.

[Former Member]

Hi Matt,

kindly find the new thread http://scn.sap.com/message/14697934#14697934. please help

Thanks

Sajin

[Steffi_Warnecke]

Hello Nivedita,

that is how our MX_PERSON looks, too. So that is not the cause of the problem. If you look at the relations of MX_ROLE, you should see the connection to the MX_PERSON.

Did I understand you correctly: if you search for a role, you can see the person assigned to the role. The other way around, if you search for the person and look at its assignments, you can't see the role?

Can you see the privileges? Would you please show a screenshot of that and of the attributes tab of that ordered group/mask? Maybe you have not enabled the correct attribute there.

• Per MX_ASSIGNMENT you can see business roles and privileges in dependency to eachother.
• Per MXREF_MX_PRIVILEGE you see the privileges of the person.
• Per MXREF_MX_ROLE you see the roles.

So maybe the last one is missing?

Regards,

Steffi.

[Former Member]

Hi Steffi,

These three attributes MXREF_MX_ROLE,MXREF_MX_PRIVILEGE,MX_ASSIGNMENT are mapped tp MX_PERSON.

Still we are not able to view privileges and roles under Assigned roles & Privileges tab under Identities in UI.

Thanks,

Nivedita S K

[Steffi_Warnecke]

Hello Nivedita,

I mean, if those attributes are enabled in the UI mask itself. You need to look at the masks in the management console. There is an attributes-tab. I'm guessing that the attributes are missing there, but I can just keep on guessing as long as I don't see screenshots or you don't look yourself.

I'm talking about something like this:

Regards,

Steffi.

[former_member327338]

Can you post a screenshot from the frontend side?

Are you seeing the attributes itself but they are empty?

Just in case: are you using an old  frontend Server (Netweaver 7.0)?

I noticed that MXREF_MX_PRIVILEGE and MXREF_MX_ROLE are not really reliable in that case.

However MX_ASSIGNMENT should show everything.

regards,

Tobias

[Former Member]

Hi Tobias,

Please find the screenshot of the UI where we can see Assigned identities under Role ESS1

But we cannot find the Roles under Assigned Roles tab of Identities

Thanks,

Nivedita S K

[former_member2987]

Nivedita,

Please check the visibility options in the MMC console.  Make sure they are set to "All" and not to "Owner"

Once you've defined owners (you might need to add MX_OWNER to the screen, you can try tightening up visibility.

Regards,

Matt

[ChrisPS]

Hello Nivedita,

              you can try settings in the presentation tab of the display task used on the MX_PERSON object  'Show All Values'. Don't forget to refresh the display task url with the ?NoCache added to

the end or log off or on again.

Thanks,

Chris

[Former Member]

Dear All,

Now I am having an issue that I am trying to create a user in abap system from SAP IDM UI but When I assign privileges to user and try to save I am getting the below error. Could you please suggest...

please find the attributes below. please suggest what needs to be done.

Thanks

Sajin

[Former Member]

Hi sajin,

For role, privileges & groups you should use the attributes MXREF_MX_ROLE, MXREF_MX_PRIVILEGE and MXREF_MX_GROUP respectively.

All the best !!

~ Krishna

[Former Member]

You can't assign directly to assignments...

Peter

[Former Member]

Hi Krishna,

Thank you so much the error got resolved after changing the attribute as showed by you. But the user is not getting created in the system after giving that privilege to user in IDM UI. Could you please suggest.

Thanks

Sajin

[Former Member]

Hi Sajin,

It should work the way you have configured. but anyways try the following.

All the best !!

~ Krishna

[Former Member]

You cannot assign directly to the MX_ASSIGNMENTS attribute.  You must use MXREF_MX_ROLE and MXREF_MX_PRIV.

Peter