Hierarchical user management

Hi
I am setting up portal pages and content areas for multiple organisations on an centralized portal. Each organisation needs to have an administrator who can create and manage users only for the company's content (for the company's pages and folders). Is there a possibility to set up this environment in Oracle portal?
Regards
Walter Vandeweyer.

hi
i saw your query in the forum. i am not having the answer of it . but have similar query.
i want to know how i can upload my portal pages so that they can be access by any other machine.
i am dire need of that thing , please if u can help me
my e-mail id is : [email protected]
thank you

Similar Messages

User Management (for dummies?)

reposting from a different forum...
I'm trying to use User Management and my head hurts...
...I'm on 11.5.10.2 ATG RUP5 and I've tried to connect all the dots referencing the User Management Admin Guide. I'm trying to create a role that I could grant to an apps user, allowing the user to grant a subset of possible responsibilities to other users - essentially a delegated user admin, as I understand it. I get close, but I'm always off - either I can't limit the role to just the single 'Search/Edit Users' functions, or I can't get any menu functions to display, or something else. <cry>
In one place, the Admin Guide gives steps for defining user administration privileges for roles; in another place, it talks about role inheritance hierarchies; in another place, separating navigation menus and access control. Via the forms interface, I tried looking at the definition of the menu 'User Management: Top Level Menu' -- it seems to contain submenus that contain redundant submenus. Once again, a bit confusing to me. For example, what do I keep / delete when I only want a delegated user admin responsibility to have an HTML navigation with just 1 subtab for 'users'? Do I use this menu and prevent access to the other 'tabs' or functions by a security policy or do I need to build a new menu?
I'm thinking the seeded roles have all the components needed (functions, security policies, menu navigations, etc.) to demonstrate an integrated example -- but I haven't been able to put it all together.
Could someone help with a clear, simple, example?

Hello,
In one place, the Admin Guide gives steps for defining user administration >privileges for roles; in another place, it talks about role inheritance hierarchies; >in another place, separating navigation menus and access control.
Could someone help with a clear, simple, example? I am working on something relative maybe helpful in which it has decided to make delegate administrators (local administrators) the departmental heads but obviously training them might be a different story.
Normally not many new menus are used as there are many seeded menus that can be used instead atleast in my case it has been. Instead of creating new meuns trying altering the current ones.
Try to understand role inheritance hierarchies as follows there are two roles sales person and a sales manager (this is a simple example), sales manager being the higher role will have (all functions, security policies, menu navigations, etc) of the role sales person. Mangement of users can be much easier.
Normally using on exclusions of functions works for me. Please ask if there any confusions or doubts?
Adith

OIM 9.1.0 with Database User Management: Connector Exception upon Connect

Hi,
I've been struggling with the Database User Management connector (9.0.4) with Sybase, following the steps word-for-word as per the documentation (Oracle® Identity Manager Connector Guide for Database User Manage Release 9.0.4; E10425-0; July 2009).
When defining the IT Resource through the Install Connector wizard, I get the following when it does a connection test:
14:51:52,795 ERROR [WEBAPP] Class/Method: CreateITResourceAction/testConnectivityForDataBase/ClassNotFoundException encounter some problems: No ClassLoaders found for: com.sybase.jdbc2.jdbc.SybDriver
java.lang.ClassNotFoundException: No ClassLoaders found for: com.sybase.jdbc2.jdbc.SybDriver
even though I've ensured jconn2.jar is in the ThirdParty directory, reflushed the cache, and restarted OIM; the connector still can't seem to load the driver.
I've tried the database testing script with similar results.
Any thoughts?
Cheers
Simon
PS: I believe v5.5 of JConnect (as required by the OIM Connector) has been EOL'd and Sybase. They recommend you use v6.0 (v6 is jconn3.jar)), which from what I can see should work as com.sybase.jdbc3.jdbc.SybDriver; I tried that as well but had the same ClassNotFoundException.

I've fixed it; needed to copy jconn2.jar into the $JBOSS_HOME/lib directory and restart the server.

Can not launch user manager

Hello,
I just installed Lookout 6.0 , the OS is Windows 2000, and not install
any NI's DSC module. When choose the menu Options>>user manager
and trying to launch it , there always popup an error message : could
not start the user manager. Please advise what is wrong and how to
repair it. Thanks.
David

This may help you...
http://digital.ni.com/public.nsf/allkb/6ABE5C9554F285D386256E9B0066156E
-Khalid

SAPJSF user cannot log-on to the User Management Engine.

We have a newly installed PI 7.0 system.
SLDCHECK is succussful but if we go to the http://hostname:50100/sld - we are redirected to http://hostname:50100/logon/logonServlet?redirectURL=%2Fwebdynpro%2Fdispatcher%2Fsap.com%2Ftc%7Esld%7Ewd%7Emain%2FMain
When we check the default.trc file, we see the error: User "SAPJSF" is the communication user for the connection between User Management Engine and the ABAP backend system SIDCLNTxyz. This user cannot log-on to the User Management Engine.
The SAPJSF user is not locked in SU01. This user is used by the JCO providers to connect to the gateway service.
We opened Visual Administrator and navigated to Server0 -> Services -> UM Provider
We changed the password property at ume.r3.connection.master.passwd
We then restarted the ABAP and J2EE engine. But we still see this error.
Any help to solve this issue is appreciate.
Jay Malla

Hi,
Please, refer the link below. It says you cannot logon with SAPJSF user to J2EE engine for security reasons.
http://help.sap.com/saphelp_nw2004s/helpdata/en/4e/225b42eeb66255e10000000a155106/frameset.htm
Thanks
R.Murali

User Management - How to submit Additional Access Request on behalf of employee

User Management - how can we configure "Access Requests" so that Managers can submit Additional Access Requests, or Initial Access Requests on behalf of employee?
Have looked at "Manage Proxies" but this seems to allow access to everything - not ideal
Please assist with knowledge and/or experience
Many Thanks
Me

Additional Access Request Registration Process is complete
Giving access to User Management to users is not an option.
What I would like is the scenario below - is this achievable?
When employee goes to iProcurement > Preferences > Access Requests > Request Access | they can submit an access request on behalf of themselves.
Would like an option where a manager, navigates to same UI as above, has option to choose a subordinate, and request additional access on their behalf
The table UMX_REG_REQUESTS has columns REQUESTED_FOR_USER_ID & REQUESTED_BY_USER_ID - so it seems they don't have to be same person (manager can submit request on behalf of an employee)
Can this be achieved through UI for "Access Requests"?

Hiding fields in standard user management view

Hi all,
How to hide fields in user management views.
Like in the create user view, suppose I want to hide the <b>additional information fieldgroup</b>. how can I do it?
I have the par file and tried to comment the code which is related to the additional information field group. But when we try creating an iview from the new par(modified par-i changed changed the name ) I do not c the portal component called <b>create user</b>. I am a bit confused.
Can anyone help me out regarding this.
thanks,
Paul

Hi Paul
Have a look at
http://help.sap.com/saphelp_webas630/helpdata/en/d1/956f8b86b2a949913ed22d253e0012/content.htm
and http://help.sap.com/saphelp_webas630/helpdata/en/91/646d498fd94142a37e90a3b848e45e/content.htm
By setting the default values you can either have them displayed or hidden.
Hope this helps,
Regards
Uma.

BPC Mass User Management Tool in BPC 10.0 NW-Version Component Error

Hi,
We have a problem when importing request K900024.RBP and R900024.RBP.
We changed the UJ_STRING in "DATA: lv_value TYPE uj_value" in the source code as recommended at BPC Mass User Management Tool in BPC 10.0 NW
Unfortunately, when we try to import CSV files we receive a error message "BPC Version Component must be 800". Our is 801.
Where can I find this files or its upgrades? Is there a SAP link?
Can anybody help us?
Best Regards,
Ana Teresa

Hi Ana,
See note https://css.wdf.sap.corp/sap/support/notes/1861347. You should solve this issue.
Best Regards,
Charlie

Problem connection in OIM 9.1 with SAP user managment

Hi!
When I want to provision a sap user management resource to an user, it appeared this problem.
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] Create User Request
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] userId :PRUEBA4803, userGroup:AUDITOR_ARG,lastName:prueba4803,firstName:prueba4803,userTitle:0003,langComm:S,department:,langLogIn:,timeZone:,telephone:,extension:,Fax:,email:,dateFormat:1,decimalNotation:Y,function:,roomNo:,floor:,building:,code:,commType:,alias:,startMenu:000,userType:A,sapUserId:,empId:PRUEBA4803,fromHRMS:
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] SAP Create Connection Request
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] Inside XLSAPUTILITIES
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] SAP Create Connection Requesting****
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] START SAP Connection creation.
It is strange because it was working all right since 3 months ago and in these 2 last weeks, it is frequently this problem. Sometimes it works sometimes it does not.
Of course, I tried the connection between OIM and SAP, with the SAP login, and the connection is all OK.
My oim vertion is 9.1 and the SAP User Management connector is 9.0.4.1.
Did anybody have this problem before?
Bye!

Oh I forget, when I restart the application server, in my case the jboss, the problem is fixed. Strange...

OIM 11g: Error Installing Sybase DBUM User Management 9.1.0.4 connector

Hi All,
While installing Sybase DBUM User Management 9.1.0.4 connector from OIM console, I get the following:
While on Step 2 of the wizard (Connector Installation):
- Configuration of connector libraries: passes
- Import of connector XML Files (using deployment manager): FAILS
The following error message appears:
DOBJ.XML_IMPORT_ERROR
Unresolved dependency{WIN=Reconciliation Manager}
Operating System: Linux
Thanks in advance for any ideas!

which release of OIM are you using.
Did you try to retry the installation of connector?
If not then refrsh your OIM database and then install again.
Seems like some earlier installation has kept some data in OIM DB.

MS SQL DB User Management Connector Unable to Select Multiple Server

Hi,
We are trying to connect to multiple server using MS SQL DB user management connector but receive the error below when selecting server.
<Sep 3, 2012 4:28:59 PM MYT> <Error> <XELLERATE.APIS> <BEA-000000> <Class/Method: tcLookupOperationsBean/getLookupValuesForColumnFilteredData encounter some problems: Lookup.PDBUM.MSSQL.DBNamesis not a valid form field>
Running InitUtil
Running ExecuteStoredProcForAuthTypeUser
Running SetProcessFormData
<Sep 3, 2012 4:30:13 PM MYT> <Error> <XELLERATE.ADAPTERS> <BEA-000000> <Class/Method: tcAdpEvent/verifyServer encounter some problems: IT Resource Type mismatch found for Adapter variable MSSQL_ITRVerify that IT Resource selected on Process Form matches IT Resource type selected for variable>
Running InitUtil
Running ExecuteStoredProcForAuthTypeUser
Running SetProcessFormData
Running COMBINENAMEWITHSUFFIXPA
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
Running COMBINENAMEWITHSUFFIXPA
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
Running InitUtil
Running ExecuteStoredProcForAuthTypeUser
Running SetProcessFormData
<Sep 3, 2012 4:33:13 PM MYT> <Error> <XELLERATE.ADAPTERS> <BEA-000000> <Class/Method: tcAdpEvent/verifyServer encounter some problems: Could not determine IT Resource Key for variable MSSQL_ITR>
delete mds name:/db/MSSQL DB User Privilege Login Requestrecon.profile
Unable to delete profile with mds name:/db/MSSQL DB User Privilege Login Requestrecon.profile
<Sep 3, 2012 4:33:43 PM MYT> <Warning> <Socket> <BEA-000450> <Socket 8 internal data record unavailable (probable closure due idle timeout), event received 17>
<Sep 3, 2012 4:33:48 PM MYT> <Warning> <Socket> <BEA-000450> <Socket 4 internal data record unavailable (probable closure due idle timeout), event received 17>
MS SQL DB connector version is 9.1.0.4
Any ideas on this error above?
Thank you.
Edited by: 950985 on Aug 17, 2012 12:21 AM

verify lookup : Lookup.DBUM.MSSQL.Configuration and provide the required information (eg: provide query property file)
--nayan

Error Installing OIM - Ebiz User Management connector

Hi all,
I am trying to install ebusiness suite user management connector 9.1.0.1.0.
But, while installation, I am getting an exception
Invalid Connector Installation Directory
Ensure that the connector installation files are in the specified directory.
From the server log, I have seen this error.
ERROR,01 Jun 2010 11:29:19,153,[XELLERATE.WEBAPP],Class/Method: ConnectorInstallProcessAction/CopyJarFilesForInstallation encounter some problems: IO exception while copying jar files
java.io.IOException: FileCopy: destination file is unwriteable: /g03/oim/xellerate/JavaTasks
at com.thortech.xl.webclient.actions.ConnectorInstallProcessAction.copy(Unknown Source)
at com.thortech.xl.webclient.actions.ConnectorInstallProcessAction.copyJarFilesForInstallation(Unknown Source)
at com.thortech.xl.webclient.actions.ConnectorInstallProcessAction.completeInstallation(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:280)
at com.thortech.xl.webclient.actions.tcLookupDispatchAction.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcActionBase.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcAction.execute(Unknown Source)
at com.thortech.xl.webclient.actions.ConnectorInstallProcessAction.execute(Unknown Source)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
at com.thortech.xl.webclient.security.SecurityFilter.doFilter(Unknown Source)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3496)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(Unknown Source)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2180)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2086)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1406)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
But, before this, I have done the ebusiness suite employee reconciliation 9.1.0.1.0 in the same way.
Please let me know, if any one has faced this kind of error earlier.
Regards
Vicky

Figured out the error,
When I have installed Ebiz HRMS Employee recon connector, it has imported all the files with root privileges. (Dont know why importing was done with root privileges).
Becuase of EBSCommon.jar and Common.jar having root as the owner, EBIZ UM connector is unable to replace those files. After modifying the owner and group of these two files to oracle.
I am able to succesfully install the UM connector.
Regards
Vicky

OIM - SAP Employee Recon and SAP User Management Connectors vs. OC4J

In reading through the SAP connector documentation I've found that we cannot use OC4J to run OIM if the 9.0.3 SAP User Management Connector or SAP Employee Recon Connector is used. This is all related to a conflict in JDK versions supported between the SAP JCo (Java Connector) library and OC4J. A thought we've had is to use a Remote Manager for these connectors. Can anyone validate this approach? Is it possible to use a different JDK version with your remote manager? Is there another workaround that anyone is aware of?
Thanks

Hi,
The remote manager should work with different JDKs. We are going to be doing the same thing for one of our adapters.
As for SAP, I cannot think of another workaround -- we actually abandoned the SAP JCo approach and are doing web services with XI.
Thanks,
Deborah
http://www.linkedin.com/in/dvolk

Sap UM connector 9.1.2 trouble with "SAP User Management User Recon" task

Hello All,
i have a problem with Sap UM Connector version 9.1.2.
OIM version 11.1.1.5
Windows 2008 R2
Problem is:
Then accounts in Sap are created through direct provisioning feature of connector everything works ok (subsequent update or delete an account).
But if a user account is created in Sap using Sap GUI, scheduled task "SAP User Management User Recon" of connector doesn't create reconciliation event to link user.
Sometimes it does though, but for one user account created using Sap GUI in OIM created two reconciliation events, so corrsponding user in oim have two records for resource SAP.
In this reconciliation events, one have full set of attributes (Login, First Name, Last Name, E Mail, etc), another one - just these 3 attributes: IT Resource, User ID, Lock.
"SAP User Management Delete Recon" scheduled task works ok then user account has been deleted using Sap Gui.
How one can troubleshoot such behavior?
Can anyone advise please?

resolved the issue by updating sap um connector to version 9.1.2.5

OIM - EBusiness User Management Connector

Hello there,
Can anybody please tell me within the Ebusiness connector i.e. provided in 9.1 version connector pack, which one needs to be installed? there are 3 different categories within the same -
1.) For the User Management connector:
Oracle EBS User Management 9.1.0.0
2.) For the User Management with HR Foundation connector:
Oracle EBS HR Foundation User Management 9.1.0.0
3.) For the User Management with TCA Foundation connector:
Oracle EBS TCA Foundation User Management 9.1.0.
I don't know which one resembles to which operations that OIM can perform. Can anybody please throw some light and explain which connector does what?
thanks,
- oidm.

An FND_USER record represents an Oracle E-Business Suite account. This record is the main component of the account data whose management is enabled by the connector. *(Oracle EBS User Management 9.1.0.0)*
Depending on your configuration of the target system, there may be other user data components that must be managed by the connector:
Some applications in Oracle E-Business Suite require a user to have a person record in Oracle E-Business HRMS. *(Oracle EBS HR Foundation User Management 9.1.0.0)*
These users are either full-time employees of the organization or users (such as contract or part-time employees) who have been provided with access that is similar to the access provided to full-time employees. iExpense is an example of an application that requires users to have person (HRMS) records.
Some applications in the Oracle E-Business Suite require a user to have a record in Oracle E-Business TCA. *(Oracle EBS TCA Foundation User Management 9.1.0.)*
Typically, these users are representatives or employees of customers and vendors of your organization. iStore and iProcurement are examples of applications that require users to have TCA records.
For more info
http://download.oracle.com/docs/cd/E11223_01/doc.910/e11203/intro.htm#CHDJCHDC
Thanks
Suren

Hierarchical user management

Similar Messages

Maybe you are looking for