User not able to access tcode though the role is assigned to him

[sdvarma]

Hi all,

User is not able to access a tcode even though the role is assigned.

Scenario 1:

In EWM prodcution system user is assigned a role to access transactions SPRO & PFCG. User was able to access the tcodes for few days and then it gives an authorisation error.

Steps confirmed:

No changes made to the role

checked the system time.

checked the date format for the role.

Note: compared the role with the role in DEV and able to execute the transaction perfectly.The same thing doesn't work in PRD.

Any Idea folks......

[Former Member]

Hi Dinesh,

"Checked the System time" means that you also checked the start and end date for that role in SU01 for that user?

If so, I would try to regenerate the profile again.

Regards,

Albert.-

[sdvarma]

Hi Albert,

As stated earlier after the roles were re transported it started working and the same tcode doesn't work today.No changes made to the user or the roles.

Regards,

Dinesh Sagi

[sdvarma]

Hi Albert,

I have collated the roles which had the issue and retransported them which resolved the issue.

Note: When the TR was released initially Quality system was going through an upgrade.

[Former Member]

Hi Dinesh,

You could also try resetting the user Buffer.

Regards,

Priyanki

[sdvarma]

Hi Priyanka,

User Buffer has been reset.

[former_member201910]

Hi Danesh,

Have you seen this thread?

https://scn.sap.com/thread/1559410

It says here that maybe a validity period is indicated under USers tab in PFCG.

Have you tried transaction ST01 authorization trace?

Regards,

Jhiosa

[Morley]

What auth error does the user get?

[Colleen]

out of curiosity, if the user is having trouble with PFCG then shouldn't they have the necessary skills to investigate and troubleshoot?

No one is going to be able to assist you beyond a guessing game if you don't explain what error. what are they trying to do that is causing the error. Is it not authorised when trying to execute the transaction, or able to display a specific role, or make changes?

Basic investigation would be to:

1. check user change documents
2. check role change documents for direct update in production
3. check profile generation and user buffer for any corruption
4. check if prg_cust table has values in it that have switched additional auth checks

but if you have re-transported and fix the issue then you should mark this question as solved and close it out.