SFDX: Setting role for "User User"

Question

The problem is that I cannot set the role for the scratch org user. I get the following error:

Unable to Finish Processing Request

An error has occurred while processing your request. The salesforce.com support team has been notified of the problem. If you believe you have additional information that may be of help in reproducing or correcting the error, please contact [email protected]. Please indicate the URL of the page you were requesting as well as any other related information. We apologize for the inconvenience.

Thank you again for your patience and assistance. And thanks for using salesforce.com!

Error ID: 1017403518-10359 (91723303)

I've used the SFDX CLI to create a scratch org using the following JSON definition (though with a real namespace linked to the dev hub):

{
  "orgName": "Demo",
  "edition": "Developer",
  "namespace": "example",
  "features": [
    "AddCustomApps:30",
    "AddCustomTabs:30",
    "AddHistoryFieldsPerEntity:25",
    "API",
    "AuthorApex",
    "Communities",
    "DebugApex",
    "ExternalSharing",
    "LightningSalesConsole",
    "LightningServiceConsole",
    "MaxApexCodeSize:10",
    "MaxCustomLabels:15",
    "ProcessBuilder",
    "Sites",
    "Workflow"
  ],
  "settings":{
    "orgPreferenceSettings":{
        "networksEnabled": true,
        "chatterEnabled": true,
        "enhancedEmailEnabled": true
    },
    "nameSettings":{
        "enableMiddleName": true
    }
  }
}

The command itself was:

sfdx force:org:create -f the-above-file.json -asomealias -d7 --setdefaultusername country=GB language=en_US

This appears to work fine and I can access the org using the CLI command:

sfdx force:org:open -u somealias

I then pushed my code to the org and tried to run all my tests. Some tests failed. These were consistently those that tried to use System.runAs.

The specific error message either:

Internal Salesforce Error: 196804881-4926 (650451209) (650451209)

Or, more enlighteningly:

System.DmlException: Insert failed. First exception on row 0; first error: UNKNOWN_EXCEPTION, portal account owner must have a role: []

It was the latter that took me to the scratch org user's configuration where I spotted that no role was set.

Using the standard Salesforce UI I attempted to set this user's role to CEO, but on clicking Save I got the error shown at the start of this question.

Anyone got any ideas as to how to resolve this problem?

Answer 1

After what @Raul said in the comments, and with this known issue, it can be seen that there is a general issue with Salesforce SFDX scratch orgs and "Out of the Box" roles. The workaround I have used is to:

1. pre-define a custom role as part of our meta data called "Automation"
2. execute some Anonymous Apex from our Ant build

The Ant script target for point #2 is:

<target name="init-scratch-org-user" depends="sfdx, get-existing-alias">
    <echo output="${anon.apex.file}"><![CDATA[
        // Give the user the required permission set and role
        List<PermissionSet> sets = [SELECT Id FROM PermissionSet WHERE Name = 'Scratch_Org_User'];
        List<User> users = [SELECT Id FROM User WHERE Alias = 'UUser'];
        List<UserRole> roles = [SELECT Id FROM UserRole WHERE Name = 'Automation'];

        if (!sets.isEmpty() && !users.isEmpty() && !roles.isEmpty()) {
            PermissionSetAssignment assignment = new PermissionSetAssignment(
                    PermissionSetId = sets[0].Id,
                    AssigneeId = users[0].Id);
            users[0].UserRoleId = roles[0].Id;

            insert assignment;
            update users[0];
        }
        ]]>
    </echo>

    <exec executable="${sfdx}">
        <arg value="force:apex:execute"/>
        <arg value="-u${sfdx.alias}"/>
        <arg value="-f${anon.apex.file}"/>
    </exec>
</target>

Note that property "anon.apex.file" is generated from a tempfile, the sfdx target determines the CLI tool name as property "sfdx" and the get-existing-alias target obtains the target scratch org's alias in the "sfdx.alias" property.

This snippet of Anon Apex also happens to set a permission set assignment for the same user so we can have all the necessary CRUD and FLS settings initialized for that user as well.

UPDATE: I have subsequently discovered the SFDX CLI command that simplifies this setting up of the permission set assignment:

sfdx force:user:permset:assign -u alias -n PermissionSetName

Answer 2

I was encountering the same issue - mainly as I could not test any of my community functionality without creating a Partner account User successfully.

Seems like it's not possible just to give your user an existing role inside scratch org. you must create a new one.

Been creating new users in my scratch org using sfdx as a prior step :

sfdx force:user:create --setalias qa-user --definitionfile config/user-def.json

Then inside the org manually add new Role (Setup > Roles) and assign it to a new User. seems like no way to select existing roles.

Now its possible to have a User with role meaning that in my unit test I can create a partner User (where account has an Owner with Role)

Answer 3

I also ran into same issue. want to create a community portal user from a Contact. I just created a custom new role by going to Setup -> Roles and created one and it worked. Now I am able to enable portal user from a Contact.