on 05-06-2011 5:28 AM
Hello,
I'm trying to create a namespace definition with PISUPER user but I'm getting error:
Insufficient authorization to create object Namespace Definition
and checking Java log I get the following:
PISUPER | ACCESS.ERROR | W,7f36457071b411e0aa8ae8b9c0a801e6 | | Permission=[write], Principal=[USER.R3_DATASOURCE.PISUPER]
How can I add the necessary read/write/maintain permissions to this user?
PISUPER is service user, not locked and already has the next roles:
SAP_ALM_ADMINISTRATOR
SAP_ALM_CUSTOMIZER
SAP_BC_AI_LANDSCAPE_DB_RFC
SAP_BC_ALM_ADMIN
SAP_BC_ALM_ALERT_USER
SAP_BC_ALM_CUST
SAP_BC_BASIS_ADMIN
SAP_BC_BASIS_MONITORING
SAP_BC_WEBSERVICE_ADMIN
SAP_BC_WEBSERVICE_PI_CFG_SRV
SAP_ESF_ADMIN
SAP_PAF_ADMIN
SAP_SLD_ADMINISTRATOR
SAP_SLD_CONFIGURATOR
SAP_SLD_DEVELOPER
SAP_SLD_GUEST
SAP_SLD_ORGANIZER
SAP_XI_ADMINISTRATOR
SAP_XI_ADMINISTRATOR_ABAP
SAP_XI_ADMINISTRATOR_J2EE
SAP_XI_BPE_ADMINISTRATOR_ABAP
SAP_XI_BPE_CONFIGURATOR_ABAP
SAP_XI_BPE_MONITOR_ABAP
SAP_XI_CONFIGURATOR
SAP_XI_CONFIGURATOR_ABAP
SAP_XI_CONFIGURATOR_J2EE
SAP_XI_CONTENT_ORGANIZER
SAP_XI_CONTENT_ORGANIZER_ABAP
SAP_XI_CONTENT_ORGANIZER_J2EE
SAP_XI_DEMOAPP
SAP_XI_DEVELOPER
SAP_XI_DEVELOPER_ABAP
SAP_XI_DEVELOPER_J2EE
SAP_XI_MONITOR
SAP_XI_MONITOR_ABAP
SAP_XI_MONITOR_J2EE
Thanks in advance!
Why are you trying with service user to create ESR objects, try to create one dialog user and assign SAP ALL roles (if you required all authorizations) and start using that user id to develop objects.
I never used Service user to create objects,i think not possible.
Regards,
Raj
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I changed this two properties:
com.sap.aii.util.server.auth.activation
com.sap.aii.ib.server.acl.enable to true and assigned permissions for the user both in ABAP and in repository.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
We had the same error with namespace creation.
SAP XI expert advised next:
"'com.sap.aii.util.server.auth.activation'
This parameter is used to activate the UME user management on J2EE side
with further authorisation checks. Because there are no authorisations
assigned on the UME, editing is denied for all user in integration
repository when this parameter is set to true.If you do indeed have to
set this parameter you will need to restart the J2EE engine."
After setting com.sap.aii.util.server.auth.activation - false and com.sap.aii.ib.server.acl.enable - unchecked issue gone.
Agree with what Raj said....create one dialog user who needs to have only SAP_XI_CONTENT_ORGANIZER_J2EE role to create a namespace.
Which version of PI are you on?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
84 | |
24 | |
11 | |
9 | |
7 | |
6 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.