cancel
Showing results for 
Search instead for 
Did you mean: 

Write permission for PISUPER?

Former Member
0 Kudos

Hello,

I'm trying to create a namespace definition with PISUPER user but I'm getting error:

Insufficient authorization to create object Namespace Definition

and checking Java log I get the following:

PISUPER | ACCESS.ERROR | W,7f36457071b411e0aa8ae8b9c0a801e6 | | Permission=[write], Principal=[USER.R3_DATASOURCE.PISUPER]

How can I add the necessary read/write/maintain permissions to this user?

PISUPER is service user, not locked and already has the next roles:

SAP_ALM_ADMINISTRATOR

SAP_ALM_CUSTOMIZER

SAP_BC_AI_LANDSCAPE_DB_RFC

SAP_BC_ALM_ADMIN

SAP_BC_ALM_ALERT_USER

SAP_BC_ALM_CUST

SAP_BC_BASIS_ADMIN

SAP_BC_BASIS_MONITORING

SAP_BC_WEBSERVICE_ADMIN

SAP_BC_WEBSERVICE_PI_CFG_SRV

SAP_ESF_ADMIN

SAP_PAF_ADMIN

SAP_SLD_ADMINISTRATOR

SAP_SLD_CONFIGURATOR

SAP_SLD_DEVELOPER

SAP_SLD_GUEST

SAP_SLD_ORGANIZER

SAP_XI_ADMINISTRATOR

SAP_XI_ADMINISTRATOR_ABAP

SAP_XI_ADMINISTRATOR_J2EE

SAP_XI_BPE_ADMINISTRATOR_ABAP

SAP_XI_BPE_CONFIGURATOR_ABAP

SAP_XI_BPE_MONITOR_ABAP

SAP_XI_CONFIGURATOR

SAP_XI_CONFIGURATOR_ABAP

SAP_XI_CONFIGURATOR_J2EE

SAP_XI_CONTENT_ORGANIZER

SAP_XI_CONTENT_ORGANIZER_ABAP

SAP_XI_CONTENT_ORGANIZER_J2EE

SAP_XI_DEMOAPP

SAP_XI_DEVELOPER

SAP_XI_DEVELOPER_ABAP

SAP_XI_DEVELOPER_J2EE

SAP_XI_MONITOR

SAP_XI_MONITOR_ABAP

SAP_XI_MONITOR_J2EE

Thanks in advance!

Accepted Solutions (1)

Accepted Solutions (1)

rajasekhar_reddy14
Active Contributor
0 Kudos

Why are you trying with service user to create ESR objects, try to create one dialog user and assign SAP ALL roles (if you required all authorizations) and start using that user id to develop objects.

I never used Service user to create objects,i think not possible.

Regards,

Raj

Former Member
0 Kudos

Hey,

Thank you for your answers.

I actually tried with one dialog user with the role you mention, plus others for development and administration in general and I got the same message error.

Regards

Answers (2)

Answers (2)

Former Member
0 Kudos

I changed this two properties:

com.sap.aii.util.server.auth.activation

com.sap.aii.ib.server.acl.enable to true and assigned permissions for the user both in ABAP and in repository.

Former Member
0 Kudos

We had the same error with namespace creation.

SAP XI expert advised next:

"'com.sap.aii.util.server.auth.activation'

This parameter is used to activate the UME user management on J2EE side

with further authorisation checks. Because there are no authorisations

assigned on the UME, editing is denied for all user in integration

repository when this parameter is set to true.If you do indeed have to

set this parameter you will need to restart the J2EE engine."

After setting com.sap.aii.util.server.auth.activation - false and com.sap.aii.ib.server.acl.enable - unchecked issue gone.

former_member200962
Active Contributor
0 Kudos

Agree with what Raj said....create one dialog user who needs to have only SAP_XI_CONTENT_ORGANIZER_J2EE role to create a namespace.

Which version of PI are you on?