Error deleting ActorRole record in Lawson Security Administration

Problem: When deleting an ActorRole we receive the following error: “Error deleting ActorRole record. Error – (Access Denied for Update on Actor for actor=<ActorName>)”

 

To resolve this issue, follow the steps below:

The root cause of this error is the ALLGenAccess_ST security class was removed from the SecurityAdministrator_ST role.

 

To resolve the issue perform the following steps:

1. Run the adminlaw command to place the Landmark environment in a restricted state.
2. Run the following command to turn security off for the Landmark environments GEN productline: secadm security activate gen ALL_ACCESS
3. Log into the rich client as an administrator, open the RoleSecurityClass business class and assign the ALLGenAccess_ST security class to the SecurityAdministrator_ST role and save the change.
4. Run the following command to turn security on for the Landmark environments GEN productline: secadm security activate gen PROCESS_RULES
5. Run the startlaw command to take the Landmark environment out of a restricted state.
6. Test the S3 LSF Security Administrator.

 

NOTE: You may also see the following error attempting to update a user’s Identity record.

“Landmark error adding Identity – (Access Denied for CreateNewIdentityForActor on Actor for actor=<ActorName>)”

If issues like ActorRole deletion errors, security class misconfigurations, or access-denied conditions in Lawson Security Administration are becoming too much to manage alongside your core responsibilities, Nogalis can assist. We provide expert managed services for Lawson ERP systems in on-prem and cloud environments. Our specialist’s step in where needed without the cost or commitment of additional full-time staff. Contact Nogalis to learn how we can reduce operational burden and keep your Lawson environment running reliably.