Symptom
- In User Management, users with READ_POLICIES, READ_USERS, READ_GROUPS cannot see the authorization policies assigned to a user.
- When MANAGE_POLICIES or UPDATE_POLICIES is assigned without MANAGE_GROUPS or UPDATE_GROUPS, clicking Add to assign a user to a policy result in “access denied” or “forbidden”.
Read more...
Environment
- SAP Cloud Identity Services
- Identity Authentication Service
Product
Identity Authentication 1.0
Keywords
Identity Authentication, IAS, authorization policies, User Management, READ_POLICIES, READ_GROUPS, READ_USERS, READ_APPLICATION, MANAGE_POLICIES, UPDATE_POLICIES, MANAGE_GROUPS, UPDATE_GROUPS, access denied, forbidden, cannot view policies, only groups visible, policy assignment , KBA , BC-IAM-IDS , Identity Authentication Service , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview