How To Fix CM_SUB_MLI021 - Request cannot be rejected; no authorization for &2

SAP Error Message - Details

• Message type: E = Error

• Message class: CM_SUB_MLI - Messages for Multilevel Inheritance

• Message number: 021

• Message text: Request cannot be rejected; no authorization for &2

What causes this issue?

You cannot reject the inheritance relationship request created by the
specification &V1&. You do not have authorization for the specification
&V2&.

How to fix this error?

INCLUDE EHS_NA_IF_AUTH_IS_NEEDED OBJECT DOKU ID TX

Procedure for System Administrators

INCLUDE EHS_NA_CHECK_AUTH_OF_USER OBJECT DOKU ID TX
<ZH>Additional information</>
INCLUDE EHS_SAF_27A_INHERIT_GENERAL2 OBJECT DOKU ID TX
You require the following authorizations to be able to create
inheritance relationships:
INCLUDE EHS_SAF_27A_INHERIT_AUTH OBJECT DOKU ID TX

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

INCLUDE EHS_SAF_27A_INHERIT_AUTH2 OBJECT DOKU ID TX

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message CM_SUB_MLI021 - Request cannot be rejected; no authorization for &2 ?

  The SAP error message CM_SUB_MLI021 indicates that a user is attempting to reject a request but does not have the necessary authorization to perform that action. This error typically arises in the context of workflow processes or change management within SAP systems.
  Cause:
  The primary cause of this error is a lack of appropriate authorization for the user role attempting to reject the request. This can happen due to:
  
  Missing Authorization Object: The user may not have the required authorization object assigned to their role.
  Role Configuration: The user's role may not be configured correctly to allow for the rejection of requests.
  User Profile Issues: The user profile may not include the necessary permissions for the specific action being attempted.
  
  Solution:
  To resolve the CM_SUB_MLI021 error, you can take the following steps:
  
  
  Check User Authorizations:
  
  Use transaction code SU53 immediately after the error occurs to see which authorization check failed. This will provide insight into what specific authorization is missing.
  Review the user's roles and authorizations in transaction SU01 or PFCG.
  
  
  
  Modify Roles:
  
  If the required authorization is missing, you may need to modify the user's role in transaction PFCG to include the necessary authorization objects.
  Common authorization objects related to workflow and request management include S_WFAR_OBJ, S_WFAR_ACT, and others depending on the specific context of the request.
  
  
  
  Consult with Security Team:
  
  If you do not have the necessary permissions to change roles or authorizations, contact your SAP security team or administrator to request the required access.
  
  
  
  Testing:
  
  After making changes to the roles or authorizations, have the user log out and log back in to ensure that the changes take effect.
  Attempt to reject the request again to verify that the issue has been resolved.
  
  
  
  Related Information:
  
  Authorization Objects: Familiarize yourself with the relevant authorization objects that govern workflow actions in your SAP system.
  SAP Notes: Check for any SAP Notes related to this error message for additional context or updates that may be relevant to your specific SAP version.
  Documentation: Review SAP documentation on user roles and authorizations to better understand how to manage and troubleshoot authorization issues.
  
  By following these steps, you should be able to identify and resolve the authorization issue causing the CM_SUB_MLI021 error in SAP.