How To Fix RSEC021 - User &1 cannot be copied from reference user &2

SAP Error Message - Details

• Message type: E = Error

• Message class: RSEC -

• Message number: 021

• Message text: User &1 cannot be copied from reference user &2

What causes this issue?

The authorization object '&v1&' used does not exist in this system.
&v1&
If, for example, authorizations are to be generated for this user, all
records for this user will be ignored.

System Response

Check whether authorization object '&v1&' is written correctly.

How to fix this error?

As needed, create the authorization object in the system.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message RSEC021 - User &1 cannot be copied from reference user &2 ?

  The SAP error message RSEC021 indicates that a user (User &1) cannot be copied from a reference user (User &2) due to certain restrictions or issues. This error typically occurs in the context of user administration and authorization management within SAP systems, particularly when dealing with roles and authorizations.
  Cause:
  
  Authorization Issues: The user you are trying to copy may not have the necessary authorizations to be copied from the reference user.
  User Status: The reference user may be locked, inactive, or have some other status that prevents copying.
  Profile Assignment: The reference user may have profiles or roles that are not compatible with the user you are trying to create or modify.
  User Type: The user type of the reference user may not be suitable for copying (e.g., system users vs. dialog users).
  Custom Logic: There may be custom logic or enhancements in place that restrict copying users under certain conditions.
  
  Solution:
  
  Check Authorizations: Ensure that the user you are trying to create or modify has the necessary authorizations to copy from the reference user. You may need to adjust roles or permissions.
  Verify User Status: Check the status of the reference user. If the reference user is locked or inactive, you may need to unlock or activate the user before copying.
  Profile and Role Compatibility: Review the profiles and roles assigned to both users. Ensure that the roles are compatible and that there are no restrictions preventing the copy.
  User Type Verification: Confirm that both users are of the same type (e.g., both should be dialog users).
  Consult Documentation: Review SAP documentation or notes related to user management and authorization to identify any specific restrictions or guidelines.
  Custom Logic Review: If there are custom enhancements or logic in place, consult with your ABAP developers or SAP Basis team to understand any restrictions that may be affecting the user copy process.
  
  Related Information:
  
  Transaction Codes: You may use transaction codes like SU01 (User Maintenance) to manage users and SU10 (Mass User Maintenance) for bulk operations.
  Authorization Objects: Familiarize yourself with relevant authorization objects that may affect user management, such as S_USER_AUTH or S_USER_PRO.
  SAP Notes: Check SAP Notes for any known issues or patches related to user management and the specific error message RSEC021.
  SAP Community: Engage with the SAP Community forums for insights from other users who may have encountered similar issues.
  
  By following these steps, you should be able to identify the cause of the error and implement a solution to resolve it.