Question:
We are using Cua, R/3 4.6 and 4.7. We also run Pfcg_time_dependency every night.
We have transported derived roles to prod successfully. Looking at the roles in PFCG, the role auth tab is green and the user tab is also green. Some time later, the role auth tab is red and the user tab is yellow. I have checked change documents, "last changed by" fields or if any transports were done recently looking for clues but no luck. I can't see any changes that may have cause the parent and the child role to get out of synch. In most of the cases the parent role needs to be adjusted also. It seems that some times users lose access but not always. Some times all roles need to be adjusted and sometimes few of them may need to be adjusted.
Has anyone encounter such a problem? Is it pfcg, cua or the pfcg_time_dependency job that is causing the problem?
Answer:
Hi
Do PFCG then go into authorizations and check your ORGANIZATIONAL LEVELS. You will find that the ORG LEVELS is incomplete. Complete the ORG LEVELS and then maintain the authorizations and everything will go back to green.
Answer:
What do you mean by incomplete org levels? THat some org levels have not been assigned values to? If that's what you mean, it doesn't apply in my cases because we always assign values to all org levels in a role.
I know how to fix the problem but i'm looking more for the prevention solution. I need to find out what causes the problem before I can come up with a solution.