Symptom
In the Maintain Business Users app, when uploading a file to mass-assign business roles, roles are assigned to unintended users.
After uploading a template with only a few users and roles (for example, 2 users and 13 roles), the app reports that hundreds of users were changed.
Environment
SAP S/4HANA Cloud Public Edition
Reproducing the Issue
- Open the Maintain Business Users app.
- Choose Upload -> Upload User Role Assignments.
- Download the template.
- Fill the template with user data (for example: User ID, Email) and Business Role IDs.
- Upload the file.
- Validate and import.
- Observe that the system displays a larger number of users changed than those included in the file.
Cause
The "User Name" field is mandatory for role assignment uploads and must be maintained for business users.
If “Upload User Role Assignments” is used for users without a user name (only user id), all roles in the template are assigned to all business users that lack a user name.
Resolution
- Maintain the "User Name" for the target business users before performing the upload (individually in Maintain Business Users or via an API for mass updates).
- Prepare a UTF-8 CSV for Upload User Role Assignments that follows the required pattern: User Name (mandatory), User ID (optional), Email (optional), Global User ID (optional), Role ID (mandatory).
- Populate the User Name column for each intended user and include the corresponding Role IDs.
- Upload and import the CSV again, then verify that only the intended users are updated.
- If many users are missing a user name, use the MANAGEBUSINESSUSERIN web service interface to mass update user names, then repeat the upload.
The interface is documented in the Help Center document APIs for Setting Up Your SAP S/4HANA Cloud.
See Also
- Refer to: SAP Help Portal - How to Maintain Business Users
- Refer to: SAP Help Portal - APIs for Setting Up Your SAP S/4HANA Cloud Public Edition
Keywords
maintain business users, upload user role assignments, mass role assignment, csv template, user name mandatory, unintended role assignment, business roles, bulk upload, maintain business users app, managebusinessuserin, utf-8 csv, role id, user id, mass update user name , KBA , CA-GTF-BUM , Business User Management , BC-SRV-APS-IAM , Identity and Access Management , Problem
SAP Knowledge Base Article - Public