Skip to Content

FAILED: User "XSA_ADMIN" is not a Controller user

Hello. I have setup XSA as per the note. Successfully deployed some apps etc. After HANA DB node restart I'm getting the following error in xs client.

FAILED: User "XSA_ADMIN" is not a Controller user (missing role collection XS_CONTROLLER_{ADMIN,USER,AUDITOR}).

As per hana docs XSA_ADMIN is a special user and should get this by default.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

6 Answers

  • Best Answer
    Mar 23, 2017 at 11:05 AM

    The support confirmed it's a bug in HANA 122.04. But they didn't provide a way to fix it so far.

    Add comment
    10|10000 characters needed characters exceeded

  • Mar 06, 2017 at 12:23 PM

    I can't say I've ever encountered this error. As you say, the XSA_ADMIN (or other user name specified during installation) is granted basic controller rights to get you started on a new system. Are you sure XSA_ADMIN was the ID you chose during installation? Are you sure no one manually change the authorizations of this user? Can you login via the XSA Admin Web Tooling? Baring all else you might have to uninstall and re-install XSA Runtime.

    Add comment
    10|10000 characters needed characters exceeded

  • Mar 06, 2017 at 03:22 PM

    There is no 3rd tab in the User Management in the HANA Studio. The Role Collections are added as User Parameters as you show in your screenshot.

    There is SQL Syntax, but why not add them via User Parameters. Is that screenshot of your user parameters for XSA_ADMIN? It so it seems pretty complete. BUt it also looks manually edited, since that's way more than what it would have by default.

    I think you have an abnormal situation here. You should consider entering a support ticket or uninstall/reinstall XSA Runtime.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hello Thomas, I have the same problem, I could not login with XS Client and directly with xsa-admin-login.

      However i could login successfully with UAA page https://domain/uaa-security/login

      do you have any idea to solve this issues ?

      thanks in advance

  • avatar image
    Former Member
    Mar 29, 2017 at 09:19 AM

    Hello Kirill,

    I have the same problem and I could not login with my DEVUSER and XSA_ADMIN user.

    I would like to know how you solved the issues.

    Best Regards

    Houssem

    Add comment
    10|10000 characters needed characters exceeded

  • Mar 29, 2017 at 10:00 AM

    So far the only explanation is https://launchpad.support.sap.com/#/notes/2400798 there's a problem with all users on HANA

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Thanks for your reply. I check all tests and it seems that HANA is not affected. Did you solve the issues ?

  • Apr 10, 2017 at 07:37 AM

    The solution is "remove XS advanced via hdblcm (remove xs_worker role and uninstall the component). After this was successful you can install XS advanced again." GG

    Add comment
    10|10000 characters needed characters exceeded