From my great colleague Siwa Soekhoe I received the following tip.
After we had cloned an EBS environment (11.5.9), it seemed some application users were missing some or all responsibilities they had in the original environment.
When checking the EBS, you could see the responsibilities were granted to the specific application users. No end date, nothing strange in the application.
So, why don't they see their responsibilities at login ??
It seems the problem was that the start_date and end_date in WF_LOCAL_ROLES did not match the information in the FND_RESPONSIBILITY table for roles/responsibilities assigned.
This issue is being solved by running the concurrent program FNDWFDSURV "Workflow Directory Services User/Role Validation" on the target environment.