cancel
Showing results for 
Search instead for 
Did you mean: 

Initial Load - SAP Systems

Former Member
0 Kudos

Dears,

I have a strange issue that I didn't had before.

I'm doing Initial Upload for new SAP Systems, the roles are correctly provisionned except the xxx:ONLY role that activates the user in SAP.

The role PRIV:xxxxxx:ONLY is not created during the Initial Load ?

Can you help me with this ?

Nicolas.

Accepted Solutions (1)

Accepted Solutions (1)

ChrisPS
Contributor
0 Kudos

Hello Nicolas,

                    did the pass 'Create ABAP Account Attribute' in the initial load run without error according to the job log ?

regards,

Chris

Former Member
0 Kudos

Chris,

I ran this and the Only role is not assigned.

Steffi_Warnecke
Active Contributor
0 Kudos

Hello Nicolas,

no errors in the log there for the pass "Create ABAP Account Privilege"? And you wrote in the first post, it is not created. Was the privilege created and is just not assigned to the users via the inital load? Could you check in the ID store to see, if it was at least created?

Regards,

Steffi.

keith_zhang
Active Participant
0 Kudos

Hello Nicolas,

The account privilege(PRIV:<REP_NAME>:ONLY) is created in pass "Create ABAP Account Privilege" as mentioned, then it is assigned to the user in pass "WriteABAPUsers" (attribute MXREF_MX_PRIVILEGE) together with system privilege of this repository.

Please check if the privilege is created from web UI, and then verify if the "WriteABAPUsers" pass has enabled that attribute. You may also create a new initial load job from the standard template, and compare with the current one.

BR, Keith

Answers (2)

Answers (2)

Former Member
0 Kudos

Dears,

I found my error.

In the pass :  "WriteABAPUsers" I put a lot of field as "Write one when adding entre" and the last row is MXREF_MX_PRIVILEGE and I have to let that one blank otherwise the ONLY priv is not added.

I'm learning every day with SAP IDM 🙂

Nicolas.

Former Member
0 Kudos

Hi Steffi and Keith,

As I couldn't find the solution (the Priv:xxx:only did exist), I decided to try an import of Initial Load and indeed, now it works.

I would like to know why, but I don't find an explanation, maybe because I upgraded my IDM.

Thx for your help.

Nicolas.

keith_zhang
Active Participant
0 Kudos

Hi Nicolas,

If it actually exists, probably it is caused by the 2nd pass(MXREF_MX_PRIVILEGE) in my last reply. While anyway, glad to hear it works fine for you now.

BR, Keith