Symptom
- A custom role created to allow viewing and updating users and roles, with the delete privilege deactivated for these objects, results in the “Users” and “Roles” menus not being available to assigned users.
- Despite read and update privileges being granted for “User” and “Role,” the administration menus are inaccessible.
- No error message is shown; the menus do not appear.
- The same behavior is reported for the BDC Cockpit (addressed separately).
Environment
- Product: SAP Datasphere
- Authorizations: Custom role based on the DW Administrator template with read and update for “User” and “Role”; delete privilege explicitly deactivated for these objects.
Reproducing the Issue
- Create a custom role from the DW Administrator template.
- Deactivate the delete privilege for the “User” and “Role” objects in role maintenance.
- Assign the custom role to a test user.
- Sign in with the test user and open administration: the “Users” and “Roles” menus are not accessible.
Cause
Resolution
The solution of this issue is currently under investigation. Please follow this KBA for updates.
See Also
Refer to: Managing Roles and Privileges
Keywords
Datasphere roles, user administration, role administration, delete privilege disabled, read update only, menus not visible, users menu missing, roles menu missing, DW Administrator template, custom role, authorization issue, privilege configuration, access missing , KBA , DS-SEC-AUTZ , Authorizations (Locks, etc.) , Problem
Product
SAP Datasphere all versions
SAP Knowledge Base Article - Public