How To Fix UMG325 - You do not have authorization for this action (see long text).

SAP Error Message - Details

• Message type: E = Error

• Message class: UMG - Message Class for the Unicode Migration Tool.

• Message number: 325

• Message text: You do not have authorization for this action (see long text).

What causes this issue?

The transactions SPUMG and SUMG use the authorization object S_UMG for
the authorization check.
SAP provides two roles which cover the most important activities:
SAP_UMG_ADMIN_ALL
This role has authorizations for all activities in SPUMG/SUMG including
the maintenance of the system vocabulary and "Reprocess Logs"
(transactions SPUMG, SUMG).
SAP_UMG_VOCAB_ALL
This role has authorizations for the maintenance of the system
vocabulary and the maintenance of the "Reprocess Logs" only.
Ask your system administrator to assign the role SAP_UMG_ADMIN_ALL to
all users which are responsible for the Unicode preparation activities
and post conversion activities.
Asj your system administrator to assign the role SAP_UMG_VOCAB_ALL to
all users which are responsible for the maintenance of the system
vocabulary and "Reprocess Logs".

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Please note: users having these authorizations can display client
dependent FI and HR related data. If you want to restrict the access to
such data, please create an own profile. An overview about the
authorization objects and fields used is given below.

System Response

How to fix this error?

The following fields are used for the authorization checks in SPUMG and
SUMG:
ACTVT
Possible values are 02 = Change, 03 = Display, 16 = Execute
S_UMG_ACTVT
Possible values are
ADMIN: Used for all administrative activities in SPUMG
VOCAB: Used for the maintenance of the system vocabulary
REPLOG: Used for the maintenance of the "Reprocess Logs"
REPAIR: Used for the post conversion activities in SUMG
DICBERCLS
Used for the display and maintenance of the "Reprocess Logs". The
DICBERCLS field contains the authorization for tables according to the
authorization classes in table TDDAT. Here, you specify the names of the
permitted classes. Table classes are defined in the table TBRG.
The table below shows the combination of fields and values:
,, ACTVT=02 ,, ACTVT=03 ,, ACTVT=16 ,, DICBERCLS
ADMIN ,, X ,, X ,, X ,, X
VOCAB ,, X ,, X ,, ,,
REPLOG ,, X ,, X ,, ,, X
REPAIR ,, X ,, ,, ,, X
You can use transaction PFCG to create roles which match best to your
needs. For Single Codepage systems the activity UMG_ACTVT=ADMIN is
relevant only.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.