User profiles not synchronized with updated SAP user roles - Event 5005 (Duet Enterprise)

Applies to: Duet Enterprise for Microsoft SharePoint and SAP

Alert Name:   User profiles not synchronized with updated SAP user roles

Event ID:   5005

Summary

A SharePoint farm administrator synchronizes user profiles in the SharePoint User Profile Store with SAP Roles over a Business Data Connectivity service connector. This synchronization process stores the SAP user accounts and the SAP roles to which they are mapped in the SharePoint User Profile Store. An error during synchronization prevented the update of the user profiles. The SAP Roles of SAP users in the User Profile Store were not updated with the current SAP Roles from the SAP profile store.

Symptoms

The following symptoms might appear:

• User profiles of SharePoint users that have mapped SAP user accounts are not updated with changes to the SAP user roles.

• This event appears in the event log:

  Event ID: 5005 Description: Few profiles couldn't be updated. See the logs for details about the profiles. The exception message is %1.

Cause

One or more of the following might be the cause:

• The User Profile Service application is not running.

• The Timer Job account does not have Full Control permissions to the User Profile Service application. For more information about how to provide managed accounts permissions to a service application administrator for a specific User Profile service application, see Assign administration of a User Profile service application (SharePoint Server 2010) (https://go.microsoft.com/fwlink/?LinkID=204625).

Resolution

Start the User Profile service

1. Confirm that the user account that is performing this procedure is a member of the Farm Administrators SharePoint group.

2. On the SharePoint Central Administration Web site, click System Settings.

3. On the System Settings page, in the Servers section, click Manage services on server.

4. Click Start the Action column for the User Profile Service.

5. Click OK to start the service.

Verify the service account

1. Verify that the user account that is performing this procedure is a member of the Administrators group on the local computer.

2. Click Start, point to Administrative Tools, and then click Services.

3. In the Services snap-in, right-click the Windows SharePoint Services Timer V4 service, and then click Properties.

4. In the Service Properties dialog box, on the Log On tab, type the password for the account, confirm the password, and then click OK.

5. Right-click the service, and then click Start.

Verify access to the User Profile Service Application

1. On the Central Administration Home page, in the Application Management section, click Manage service applications.

2. On the Manage Service Applications page, click the row that contains the User Profile Service Application.

3. In the Sharing group of the ribbon, click Permissions.

4. In the Connection Permissions dialog box, do one of the following:

   • If the Timer Job account appears in the middle pane, click the user account.

   • If the Timer Job account does not appear in the middle pane, type the user account in the top pane, and then click Add.

5. In the bottom pane, verify that the Full Control check box is selected.

6. Click OK.

   For more information, see Restrict or enable access to a service application (SharePoint Server 2010) (https://go.microsoft.com/fwlink/p/?LinkID=202009).