Assigning User to a Group.

Hi All,
We have installed EP 7.0. We need to add the user "xxx" to the group "SAP_HR_LSO_DEVELOPMANAGER".
We searched for the user "xxx" and click on modify button to edit the Assigned groups. But the Add button is disabled for the Admin.
How to enable it ? & How to add the user to the group?
Kindly provide your answers.
Thank You.
Regards,
Eben.

Hi,
I hope the following links will help you,
https://forums.sdn.sap.com/click.jspa?searchID=15809839&messageID=4604222
Re: Add users to a group through programming
Regards,
Harish

Similar Messages

  • Sharepoint 2013 assign users to a group

    In a test sharepoint 2013 sandbox area that is setup for myself and runs in the cloud,  I am working with 3 test accounts.
    I would like to know how to assign these 3 test accounts to the same group.
    I would think I need this in a site mailbox.
    I am asking this question since this is my first project using sharepoint and no one else in my company is using sharepoint yet.
    Thus can you do the following:
    1. I would like to know how to assign these 3 test accounts to the same group hopefully in a site mailbox.
    2. How would I access this group when I am assigning the task using 'start a process'?

    you can achieve this using server side object model which fetches the data from server as below link:
    http://sharepoint.stackexchange.com/questions/104465/create-sharepoint-group-and-assign-permission-sharepoint-online
    http://www.c-sharpcorner.com/UploadFile/sagarp/programmatically-how-to-add-assign-user-to-a-user-group-in/
    you can achieve the same using client side object model which hits server only once using execute query method as below:
    http://www.c-sharpcorner.com/Blogs/8244/add-user-to-the-group-in-sharepoint-2010-using-client-object.aspx
    try this link for second question hope it wiil be useful:
    http://community.spiceworks.com/how_to/show/66248-restrict-a-sharepoint-task-to-its-assigned-user-group
    Please mark as answer if you find it useful else vote for it if it is close to answer..happy sharepointing

  • Please help with assigning user to a group in AD using dbms_ldap

    Dear gurus of Apex and LDAP!
    Please help me a bit.
    I managed to create any user in AD from Apex using dbms_ldap package and set many of his attributes. But I cannot set that my user belongs to specific group, let's say MY_GROUP. I guess the name of attribute for group is 'member' or 'memberOf', so I tried them both in the same way as I've done for other attributes:
    v_vals(1) := 'MY_GROUP';
    DBMS_LDAP.populate_mod_array(v_array, DBMS_LDAP.MOD_ADD, 'member', v_vals);
    I've got LDAP client/server error: CONSTRAINT violation. 000020B5: AtrErr: DSID-031516FC, #1: 0: 000020B5:
    DSID-031516FC, problem 1005 (CONSTRAINT_ATT_TYPE), DATA 0, Att 1f (MEMBER)
    v_vals(1) := 'MY_GROUP';
    DBMS_LDAP.populate_mod_array(v_array, DBMS_LDAP.MOD_ADD, 'memberOf', v_vals);
    I've got LDAP client/server error: DSA IS unwilling TO perform. 0000209A: SvcErr: DSID-031A0929, problem 5003 (WILL_NOT_PERFORM), DATA 0
    After that I've tried to extend group name to string, which is shown in LDAP browser for attribute 'memberOf' (when I've added it manualy):
    v_vals(1) := 'CN=MY_GROUP,OU=GROUPS,OU=Allianz,DC=allianz,DC=com';
    DBMS_LDAP.populate_mod_array(v_array, DBMS_LDAP.MOD_ADD, 'member', v_vals);
    I've got LDAP client/server error: OBJECT CLASS violation. 0000207D: UpdErr: DSID-03150913, problem 6002 (OBJ_CLASS_VIOLATION), DATA 0
    v_vals(1) := 'CN=MY_GROUP,OU=GROUPS,OU=Allianz,DC=allianz,DC=com';
    DBMS_LDAP.populate_mod_array(v_array, DBMS_LDAP.MOD_ADD, 'memberOf', v_vals);
    LDAP client/server error: DSA IS unwilling TO perform. 0000209A: SvcErr: DSID-031A0929, problem 5003 (WILL_NOT_PERFORM), DATA 0
    I've also tried some other variants (without 'CN=' and without 'OU=GROUPS,OU=Allianz'), but still no success.
    Search of this forum and even google didn't help either :(
    Please, help me to find the correct syntax for it or tell me if it's not possible.
    Thanx in advance,
    Vladimir

    Vladimir ,
    firstly the attributes member and memberOf are special attributes in AD having a set of predefined values. Hence an error will be thrown if you try to assign them values like 'MY_GROUP'. There are two basic solutions to this problem : Either you define an OU in your AD which will act as your 'MY_GROUP'. This is a quick fix solution and is not robust at all. The other solution is to add your own property in the tree , something like 'roleCode', you can then assign it any value you want.
    But the problem now is, AD does not allow addition of new attributes in the structure. You have to use ADAM in for this and you can specify a common linking mechanism between AD and ADAM now such as email address can act as the link between both the directories.
    Hope this helps
    Shantanu

  • Trying to assign User to ADS-Group

    Hi,
    i'm trying to assign a User to an ADS group using the script "sap_getGroupDN".
    Unfortunately the mskey given to that method is the mskey from the user and not from the group.
    Any suggestions or ideas?
    How managed you that case?
    Kind regards,
    Achim Heinekamp
    CONET Solutions GmbH

    Hi folks,
    it seems I'm having a very similar problem to Achim, although the sympton is a little different. When I run the task to assign a role (1 AS ABAP, 1 AS Java and 1 AD OU) on the task AssignUserToADSGroupI get an error message that reads:
    PrivDN: !ERROR:No such attribute
    I've assigned the privelege to the role, and it seems to recognize that and create the user, however...the groups don't get assigned.
    The full output s below:
    <?xml version="1.0" encoding="UTF-8"?>
    <mx:EMSLOG xmlns:mx="http://www.maxware.com/EMS">
    <mx:GENERAL>
    <mx:DATE>21.07.2009 20:57:41</mx:DATE>
    <mx:VERSION>DSE.JAR version: 7.10.02.0 Built: 01.07.2009 15:49:23 (c) Copyright 2008 SAP AG. All rights reserved.</mx:VERSION>
    <mx:MACHINE>clklabvm3-disp01</mx:MACHINE>
    <mx:JOBID>045EB0C2-E35B-4AD7-8D0A-84B51594EAAF</mx:JOBID>
    <mx:WORKAREA>C:/Program Files (x86)/SAP/IdM/Identity Center/Jobs/045EB0C2-E35B-4AD7-8D0A-84B51594EAAF</mx:WORKAREA>
    <mx:JOB>jdbc:sqlserver://clklabvm3\idm:1988;responseBuffering=full;encrypt=false;databaseName=mxmc_db;selectMethod=direct;trustServerCertificate=false;lastUpdateCount=true; - MACHINE:clklabvm3-disp01</mx:JOB>
    <mx:PRODUCT>Provisioning</mx:PRODUCT>
    <mx:CUSTOMER>SAP customer : f9c1c5cd66189d133765ac44ea6c127a</mx:CUSTOMER>
    <mx:TIMEUSED>5</mx:TIMEUSED>
    <mx:NERRORS>0</mx:NERRORS>
    <mx:NWARNINGS>3</mx:NWARNINGS>
    <mx:NENTRIES adds="3" mods="0" dels="0" noops="0" markdels="0">3</mx:NENTRIES>
    </mx:GENERAL>
    <mx:PASSES>
    <mx:PASS name="Job Initialization" title="Messages that occurred before the job was loaded" type="init" seq="0">
    <mx:MESSAGES>
    <WARNING seq="1">
    <mx:TEXT>Failed loading JDBC Driver class com.microsoft.jdbc.sqlserver.SQLServerDriver</mx:TEXT>
    <mx:TEXT>java.lang.ClassNotFoundException: com.microsoft.jdbc.sqlserver.SQLServerDriver</mx:TEXT>
    </WARNING>
    <WARNING seq="2">
    <mx:TEXT>Failed loading JDBC Driver class com.sap.dbtech.jdbc.DriverSapDB</mx:TEXT>
    <mx:TEXT>java.lang.ClassNotFoundException: com.sap.dbtech.jdbc.DriverSapDB</mx:TEXT>
    </WARNING>
    <WARNING seq="3">
    <mx:TEXT>Failed loading JDBC Driver class org.gjt.mm.mysql.Driver</mx:TEXT>
    <mx:TEXT>java.lang.ClassNotFoundException: org.gjt.mm.mysql.Driver</mx:TEXT>
    </WARNING>
    <WARNING seq="4">
    <mx:TEXT>Failed loading JDBC Driver class oracle.jdbc.driver.OracleDriver</mx:TEXT>
    <mx:TEXT>java.lang.ClassNotFoundException: oracle.jdbc.driver.OracleDriver</mx:TEXT>
    </WARNING>
    <WARNING seq="5">
    <mx:TEXT>Failed loading JDBC Driver class COM.ibm.db2.jdbc.app.DB2Driver</mx:TEXT>
    <mx:TEXT>java.lang.ClassNotFoundException: COM.ibm.db2.jdbc.app.DB2Driver</mx:TEXT>
    </WARNING>
    <WARNING seq="6">
    <mx:TEXT>Failed loading JDBC Driver class COM.ibm.db2.jcc.DB2Driver</mx:TEXT>
    <mx:TEXT>java.lang.ClassNotFoundException: COM.ibm.db2.jcc.DB2Driver</mx:TEXT>
    </WARNING>
    <WARNING seq="7">
    <mx:TEXT>Failed loading JDBC Driver class COM.ibm.db2.jdbc.net.DB2Driver</mx:TEXT>
    <mx:TEXT>java.lang.ClassNotFoundException: COM.ibm.db2.jdbc.net.DB2Driver</mx:TEXT>
    </WARNING>
    </mx:MESSAGES>
    </mx:PASS>
    <mx:PASS name="6D5485D1-2CF6-4E5B-9972-7141CB9051EA" title="AssignUserToADSGroup" type="ToLDIF" seq="1">
    <mx:MESSAGES>
    <mx:WARNING seq="1">
    <mx:TEXT>PrivDN: !ERROR:No such attribute</mx:TEXT>
    <mx:ENTRY/>
    </mx:WARNING>
    <mx:WARNING seq="2">
    <mx:TEXT>PrivDN: !ERROR:No such attribute</mx:TEXT>
    <mx:ENTRY/>
    </mx:WARNING>
    <mx:WARNING seq="3">
    <mx:TEXT>PrivDN: !ERROR:No such attribute</mx:TEXT>
    <mx:ENTRY/>
    </mx:WARNING>
    </mx:MESSAGES>
    <mx:DELTA>0</mx:DELTA>
    <mx:TIMEUSED>2</mx:TIMEUSED>
    <mx:NENTRIES adds="3" mods="0" dels="0" noops="0" markdels="0">3</mx:NENTRIES>
    <mx:NERRORS>0</mx:NERRORS>
    <mx:NWARNINGS>3</mx:NWARNINGS>
    </mx:PASS>
    </mx:PASSES>
    </mx:EMSLOG>

  • Problems with assigning user to Purchase Group

    Hi all!
    I'm trying to set-up standard workflow WS 20000397 - Handling invoices blocked due to price.
    Somehow I left something out as nothing is sent to my inbox when a invoice is blocked.
    It starts fine but it can't find and agent when I check the log.
    I've created an org. structure with a company, that has one organizational unit under it.
    To this I've assigned a position and thereafter a user to this with my user ID.
    Then I've created an assignment in PFOM whera I assigned SO T024 001 (Purch. Group 1) to my newly created Position.
    I have found Purch group 001 using F4 so no mispellings could be the case.
    In the container I can see that it has found the correct purchasing group (001) with my created position (the S-code for the position is even shown as an agent in the container)
    Any suggestions would be appreciated.
    Regards,
    //Roland
    Edited by: Roland Persson-Aglert on Dec 4, 2008 5:03 PM

    Hi!
    I'll paste the message below, I although found out that I had checked wrong TS, so I checked TS20000661 in PFTC and is set to "General forwarding allowed".
    No agents found for this task -> long text
    Message no. WO590
    Diagnosis
    The system could not establish any agents for the task underlying this work item.
    The key of the task is: TS20000661
    The key of the work item is: 000000404120
    System Response
    The system cannot assign work item 000000404120 to any agents - the work item does not appear in anyone's Business Workplace.
    Procedure
    Assign possible agents to task TS20000661 or declare the task as a general task.
    Refer to your workflow system administrator.
    //Roland

  • Assigned User Profile / AD groups /

    I am new to SGD and trying to figuring out how to give permission to certain AD groups for certain applications.
    I have two AD groups Info_Portal and Info_Survey and five applications let say App1, App2, App3 and App4. I would like App1 and App2 applications available to info_portal only and App3 and App4 available to Info_survy only.
    I kind of got picture for assigne profile for applications but I am not clear how to created this new AD profile with in SGD.
    Since I am new to SGD would prefer options through Admin console.
    Thanks.
    Habib.

    Hi Matt,
    Sorry, you must be wondering what happened to me. Well, I had an injury and end up taking LOA. Just came back to work.
    Thank you for your suggestions. I went through the document and made required changes. I guess I missed something since I can’t login to SGD at all now.
    Here is the output of:
    # ./tarantella config list login-ldap login-ad login-nt login-nt-domain
    login-ad: 1
    login-nt-domain: orgds2.hs.uci.edu
    login-nt: 0
    login-ldap: not found
    My krb.conf file is as follows:
    [logging]
    default = FILE:/var/log/krb5libs.log
    kdc = FILE:/var/log/krb5kdc.log
    admin_server = FILE:/var/log/kadmind.log
    [libdefaults]
    default_realm = HS.UCI.EDU
    dns_lookup_realm = true
    dns_lookup_kdc = true
    ticket_lifetime = 24h
    forwardable = yes
    [realms]
    EXAMPLE.COM = {
    kdc = kerberos.example.com:88
    admin_server = kerberos.example.com:749
    default_domain = example.com
    HS.UCI.EDU = {
    kdc = hs.uci.edu:88
    admin_server = hs.uci.edu:749
    UCI.EDU = {
    kdc = kerberos.service.uci.edu:88
    admin_server = kerberos.service.uci.edu:749
    [domain_realm]
    .example.com = EXAMPLE.COM
    example.com = EXAMPLE.COM
    hs.uci.edu = HS.UCI.EDU
    .hs.uci.edu = HS.UCI.EDU
    uci.edu = UCI.EDU
    .uci.edu = UCI.EDU
    [appdefaults]
    pam = {
    debug = false
    ticket_lifetime = 36000
    renew_lifetime = 36000
    forwardable = true
    krb4_convert = false
    What did I miss?
    Thanks again for all the help.
    Habib.

  • Assigning Users to Groups on LDAP thru EP

    Hi,
    I have configured EP6 SP7 with multiple LDAP(MS-ADS)servers. I can read/write the groups and users to LDAP through EP. But i cannot assign the users to groups through Enterprise Portal. Also if i assign users to a group in LDAP on LDAP server itself, these assignments does not show up in the portal. do i have to configure my dataSourceConfiguration_multiLDAP_db.xml file? if so then which parameter?
    Please advise.
    regards,
    Hassan

    Dear Hassan,
    Need a clarification. If users are assigned to a group in LDAP, Can you see the same thing reflecting in portal?
    I have configured LDAP as UME and I am able to see a group of LDAP appearing in Portal. But when I see the list of users assigned to this group, its empty.
    Any clues or suggestions.
    Regards,
    Sreeram

  • How to use UME API to assign user to group ?

    Hi all:
        I would like to write one jsp/ webservice to assign user to one group . Is there some example code ?
        the function can have 2 import parameter, userid, groupid, after the function is executed, the user and group is assigned
        Thanks a lot.

    Hi,
    Code is IGroupFactory     grpfact               = UMFactory.getGroupFactory();
              IUserFactory     userfact          = UMFactory.getUserFactory();
              IGroup               group               = grpfact.getGroup("GRUP.PRIVATE_DATASOURCE.un:Leave Pilot");
              IGroupFactory     grpFact               = UMFactory.getGroupFactory();
              int                nUserListSize     = strUsersList.length;
              for(int i=0;i<nUserListSize;i++)
                     IUser objUser = userfact.getUserByLogonID(strUsersList<i>);
                     grpFact.addUserToGroup(objUser.getUniqueID(),group.getUniqueID());

  • Bulk move users from one group to another in XI 3.1

    Hi all,
    I have a group that contains approximately 20,000 users. I now need to move around 7,500 of these users into a different group.
    How can I do this programatically in bulk as I don't want to go through and manually change the groups of 7,500 users?
    Thanks,
    Chris

    Hi Christian,
    Assuming you would need to move users from one group to another and remove them from the previous group, you could use the attached java code.
    To run the code, you would need to save it as .jsp file and paste it inside AdminTools application context.
    The pre-requisite to run this code is to create a Text file with all the 7500 user names in it. The text file should contain one user per line
    (example:
    User1
    User2
    User3
    You can get this information from query builder by running the below query
    Select top 20000 si_name from ci_systemobjects where si_kind='user'
    Initially do it for 2-3 users to text the results.
    You would need to edit the jsp and modify these three lines
    1.
                    * Assign user to a group
                   //Query for the group ID
                   boQuery = "Select SI_ID From CI_SYSTEMOBJECTS Where SI_KIND='UserGroup' And SI_Name='UserGroup name'";
    Above in SI_NAME, you would need to provide the usergroup name you want your users to be added to.
    2.
    if (boUserInfoObject.getGroups().remove(Group Id from which it has to be removed)) {
                            out.print("User removed from group successfully. ");
    Above you would need to provide the id of the group you want the users to be removed from(i.e the current group from where you want them to be moved).
    3.
    * Path to file containing User names.
    final String USER_FILE_PATH = "<Path of txt file from which list of users will be imported>";
    Above you need to specify the path of the text file which contains all the user names.
    Incase you require further assistance on SDKs, raise your concerns in the below space
    http://scn.sap.com/community/bi-platform/java-sdk
    Thanks,
    Prithvi

  • Problem in assigning users to groups.

    Hello,
    After upgrading to EP 6.0 when try to add users to the groups we are getting the following error
    #1#com.sapportals.portal.prt.runtime.PortalRuntimeException: Access is denied: com.sap.portal.heartbeats.PortalHeartbeat - user: Guest,
    Caused by: com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): com.sap.portal.system/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.heartbeats/components/PortalHeartbeat)
    #1.#82A8E000B002007300000035001A50D400048912426E7075#1276611423793#com.sap.portal.prt.runtime#sap.com/irj#com.sap.portal.prt.runtime#philippe.lerch#1376##n/a##e1de2253788511df80f482a8e000b002#SAPEngine_Application_Thread[impl:3]_22##0#0#Error##Java###04:17_15/06/10_0052_27056650
    [EXCEPTION]
    #1#com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): com.sap.portal.system/security/sap.com/NetWeaver.UserManagement/high_safety/com.sap.portal.usermanagement.admin/components/UserAdmin)
    Regards,
    Vamshi

    Vamshi,
    It is a permissions issue, your guest user does not have the necessary permissions to do the task that you are trying to accomplish.
    1. Navigate to the path shown in the error com.sap.portal.system/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.heartbeats/components/PortalHeartbeart and add the permissions
        for the guest user here.
    or
    2. Try assigning the groups with a user administrator role.
    Good Luck!
    Sandeep Tudumu

  • Workflow to populate "Assigned to User" with AD group of the "Assigned to User" is empty or Null to user is empty.

    I am updating roles and would like to use the [me] and [my group] tokens for views.  I am planning on updating all the templates to specify an ad group in the "Assigned to User" field that corresponds to the appropriately selected support
    group.  I would like to avoid having the "Assigned to User" blank (this could happen either via using a generic template, or when re-assigning workitems) so I think I need a workflow to remediate any workitems that have no Assigned to Users.
     There does not seem to be an easy way to do this just with a workflow configuration.  Do I need to create a workflow with the authoring tool?  Can I create a workflow that will compare a support group (enumeration?) and assign an appropriate
    AD group?

    probably the easiest way to do this would be to create a console workflow that runs on create (or update, if you want this to be reoccurring) and checks for the looks for the Display Name of the Assigned to user. This would only be populated if there was
    a legitimate user, and would be null otherwise.
    you could create console workflows for each support group (i.e. If Supportgroup = NumberA and AssignedtoUser.Displayname is blank) that applies a template that contains the correct user or group for that support group enum.
    other options are available, so let us know what you're ideal conditions are.

  • Unable to see assign users or groups option under a groupin Shared services

    I have a bizzare issue related to Shared services.
    In Application 1 (on PROD env), after I select the group, right-click and go to properties, under "group members" and "user members" tabs, I do not see the options to assign access to any of the existings groups (we have about 50+ groups). I can only view the existing users/groups, even though I have been given admin/proviosioning rights, while the other admin can assign access to the same application.
    While for Application 2 (on DEV) I am able to see all these options and I am able to assign users and groups to any of the groups. I do not see them as a browser issue, as I have opened both these links on the same IE window, but on different tabs.
    Unfortunately, I can't test App1 on TEST/DEV, as we do not have its copy on here, it is all on PROD and App2 is only on DEV.
    Any ideas?
    Thanks,
    Paul

    I would of thought it was provision related, can you try setting up another user as a test with the correct provisioning such as provisioning manager of the different product areas and see if the new user works.
    If it does then it points an issue with your account or the way it has been provisioned.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • How does one assign a user to several groups?

    I am a student learning Databases, Oracle to be exact, and am trying to install a developer's copy on my MAC G4 running OS X 10.4.11. To do this I need to assign user oracle to several user groups. Trouble is, although I know UNIX fairly well I don't know Sys Adim commands well at all. Can am one help with this one?

    Thank you for your posting, however I did try this before I posted here, can assign a user to one (1) group, but can not figure out how to assign a user to more than one (1+) group. That is the root cause of my problem. Do you know how to assign more than one group? Again thank you for your input.

  • How to create groups and assign users thru program

    Hi,
    I am planning to create groups by program and assign users to them based on some condition.Once users are assigned to those groups we need to change the Language value for those users in User profile
    We are using Central User Administration.
    Please let me know the solution
    Thanks
    Bala Duvvuri

    probably you can use this code to create a group
    IGroupFactory groupFact = UMFactory.getGroupFactory();  
    IGroup group = groupFact.newGroup(wdContext.currentContextElement().getGroup()); 
       group.commit();
    for this required com.sap.security.api.jar

  • Shared Services 11.1.2 Unable to remove assigned user from a security group

    In Shared Services 11.1.2 - trying to remove a user from the assigned users list of a security group. Initially, I am able to remove the user and the assigned users total decreases by one - but when I relaunch the group properties - this user is still in there? The change does not hold. Any suggestions would be appreciated - thanks,
    Paul

    Hello Paul,
    Not sure if this is related to yours, but it might be worth having a look at the following articles on Oracle support --
    External users in EPM Shared Services (e.g. MSAD users) cannot be removed from Native groups if they have multiple IDs in the external user directory. [ID 1526569.1]
    Users from External User Directories Cannot be Removed from Native Groups [ID 1272309.1]
    Thanks,
    hyperionEPM
    Please mark answers as correct or helpful for others to find them easily.

Maybe you are looking for