Top level security on Personal folders

[njensen015]

Hi

I accidentally changed my Top-Level security for everyone to deny view objects on Pesonal folders and i can't change it back because I can't see it in CMC even when logged in as administrator.

I tried following this guide https://me.sap.com/notes/3346433/E

but Setright 12 18 3 any descendants G Note: 12- Administrator 18 - Personal folders 3 - View Object right

isn't the command I need. The command I need is to set view to everyone on Top-level security for personal folders

something like this 1 18 ? 3 note: 1-Everyone 18 -Personal folders Top-level security 3 - View Object right.

I don't think this is the right way to do it. But have no idea what to do otherwise.

All help much appreciated

Kind regards

Peter

[former_member595655]

Hello,

You might have to login via console mode to change the permission again and get back the folder access. But the below option has to be only be carried out under SAP guidance. Please check the below note:

1828536 - How to start the CMS in console mode, BI 4.x (Windows)

Regards,

Ambarish.

[njensen015]

Already tried that. but the command only works for users security and not for toplevel security.

The system is not in Production yet. That is why I am trying this.

If there is a way to delete all personal folders. I can restore them from our current Production enviroment again.

So far promoting top level security from Production doesn't work.

[ayman_salem]

The "View" right in top-level security of "User Folders" is explicitly denied to everyone.

You can solve the problem using the CMS server console as follows:

1. stop SIA

2. Start CMS in Console mode following KBA 1828536 (How to start the CMS in console mode, BI 4.x (Windows))

3. Run the command:: setrole 12 18 622

(This command adds the principal "Administrator" to the user security of "User Folders" with the right "Full Control".)

4. Exit console mode with the "quit" command and restart SIA.

5. Log in as an administrator and you will see the "Personal Folders" again.

6. Go to Personal Folders -> Top Level Security -> All Personal Folders as usual.
There you will see the new Principals "Administraor" with "Full Control" access.

(Note: "Alle" in bild is "Everyone")

7. Correct the View rights of the "Everyone" principal.

Wrong rights:

Correct rights:

...

8. You can delete the new "Administrator" principal later if you wish.

------>

...

I hope this solves your problem and helps.

... and as always said: DO NOT do it if you don't know exactly what you are doing......

[njensen015]

Thank You ayman.salem. You are my new hero. You solution works.

Have a nice day and thank you very much.

/Peter

[ayman_salem]

I'm happy to help.

Please accept the answer and close the question