SAP Knowledge Base Article - Public

3833192 - User and role administration menu not visible when delete privilege is disabled in custom role - SAP Datasphere

Symptom

  • A custom role created to allow viewing and updating users and roles, with the delete privilege deactivated for these objects, results in the “Users” and “Roles” menus not being available to assigned users.
  • Despite read and update privileges being granted for “User” and “Role,” the administration menus are inaccessible.
  • No error message is shown; the menus do not appear.
  • The same behavior is reported for the BDC Cockpit (addressed separately).

Environment

  • Product: SAP Datasphere
  • Authorizations: Custom role based on the DW Administrator template with read and update for “User” and “Role”; delete privilege explicitly deactivated for these objects.

Reproducing the Issue

  1. Create a custom role from the DW Administrator template.
  2. Deactivate the delete privilege for the “User” and “Role” objects in role maintenance.
  3. Assign the custom role to a test user.
  4. Sign in with the test user and open administration: the “Users” and “Roles” menus are not accessible.

Cause

Resolution

The solution of this issue is currently under investigation. Please follow this KBA for updates.

See Also

Refer to: Managing Roles and Privileges

Keywords

Datasphere roles, user administration, role administration, delete privilege disabled, read update only, menus not visible, users menu missing, roles menu missing, DW Administrator template, custom role, authorization issue, privilege configuration, access missing , KBA , DS-SEC-AUTZ , Authorizations (Locks, etc.) , Problem

Product

SAP Datasphere all versions