cancel
Showing results for 
Search instead for 
Did you mean: 

Business Role change made password deactivated or reset in ABAP systems.

Former Member
0 Kudos

Hi,

We recently made changes Business role by adding technical role but this changes has deactivated or reset password for assigned users who had Productive password in connected ABAP system.

We have two type of users, one who access SAP Portal and ABAP with Single Sign on and second who login into Portal and ABAP with password.

This BR change has impacted second type of users who had Productive password.

Regards,

Manish

Accepted Solutions (0)

Answers (3)

Answers (3)

Former Member
0 Kudos

OSS message raised with SAP.

jaisuryan
Active Contributor
0 Kudos

Hi Manish,

Great, while SAP checks from their end, would you please give more information so that others get benefited.

1) You see ABAP create user job in IDM but no logs in target system? Did you check if you have selected create and delete user options while running the change log report in SU01 or whatever tcode you are using?

2) can you please paste the screenshot of the destination tab of the pass which you are using to modify the business roles?

Kind regards,

Jaisuryan

Steffi_Warnecke
Active Contributor
0 Kudos

Hello Manish,

you have marked the thread as "Assumed answered". Could you please share with the community the outcome of your OSS ticket with SAP, so that others can benefit, too? Then you can mark the post as answered. Right now the thread isn't really helpful to anyone (neither you nor the community).

Also, if you answer Jai's questions, maybe we can help in solving your problem?

Having several irons in the fire can't be bad, right?

Regards,

Steffi.

Former Member
0 Kudos

Hi Steffi,

We are still working with SAP on OSS message and surely I will update the outcome of message in thread so we all can take refer in future.

Regards,

Manish

Chenyang
Contributor
0 Kudos

Hi Manish,

It looks like the users have been deleted and re-created? Have you checked the change documents in ABAP?

Cheers,

Chenyang Xiong

jaisuryan
Active Contributor
0 Kudos

Hi There,

Yes, we have faced the same problem! We were asked to upgrade our patch level. Since then we did not have this issue. Please confirm your version and patch level. And always use {M} operator for role modifications instead of {R}. Thanks.

Kind regards,

Jaisuryan

Former Member
0 Kudos

Hi Chenyang,

As per change log in ABAP, it only show password reset by "IDMPROV" system user id, but I did found job log in IdM which shows ABAP User create Job runs during that period.

Regards,

Manish

Former Member
0 Kudos

Hi Jai,

We are on IdM 7.2 SP8 level.

Regards,

Manish

former_member2987
Active Contributor
0 Kudos

Manish,

I'm not 100% sure what your question is.

It seems you made a change to a role that is having unwelcome side effects?

Can you change the role back?

Thanks,

Matt

Former Member
0 Kudos

Hi Matt,

Thanks for your reply.

We tried reversing the role change but password impact on ABAP users remain as is.

Just to summarize:

User had Business Role assigned and user had active password in ABAP system.

Same Business Role was updated with technical role and this change has reset password or in few cases deactivated password in ABAP system.

Regards,

Manish

Steffi_Warnecke
Active Contributor
0 Kudos

Hello Manish,

that means it has triggered the password reset task for the ABAP? Have you checked the log to see which tasks were executed after changing the business role?

Regards,

Steffi.