Adding all users under one subtree to a role

Hi,
We have a role call PaymentsGroup under cn=Groups,dc=companyname,dc=com
There are sub trees which contains many users which categorised by city, country.
Example :
cn=michael wood,ou=users,ou=cal,ou=us,ou=dept1,cn=users,dc=companyname,dc=com
cn=harry wilson,ou=users,ou=lon,ou=uk,ou=dept1,cn=users,dc=companyname,dc=com
Can we add the subtree (upper level) onto the group so all users under that subtree will get granted to the role?
Example : ou=users,ou=ny,ou=us,ou=dept1,cn=users,dc=companyname,dc=com
Thanks!

Hi,
To clarify, are you talking about the Role mechanism defined by DSEE as described at Managing Roles - Oracle Directory Server Enterprise Edition Administration Guide?
-Sylvain
When closing a thread as answered remember to mark the correct and helpful posts to make it easier for others to find them

Similar Messages

ITunes Shared library with all users on one computer

I am trying to share my iTunes (version 8.2) library with all the users on my computer. So far, this is what I have done:
1) I have moved the music folder into the shared folder.
2) I have selected "Add to Library" in all three accounts.
3) I have tried checking and unchecking the "Copy files to iTunes Music folder when adding to library."
Since then, I have added some CDs that had some songs that I already had. When I loaded these CDs, I deleted the duplicates that had the worse sound. Since then, everything is unwinding. The additions on one user account are not being added to the others. When I delete a track, iTunes (obviously) says that it can't find the song anymore. What's odd is that I then delete the one that is missing, and both are missing now: the one that I deleted on the original account and the one that I did not delete on the original account.
I am starting to think that I need to start from scratch. So, to make a long story short (too late), how can I share my iTunes library with all users on one computer, where I can make a change in one account that will update automatically on the other accounts. If it can't be updated automatically, how can I add/delete files without causing the headaches I am currently having?
Brian

I actually followed this, but I still had problems that I listed above. Is there any way that when you make changes to one account (even if there is only one main account where changes are made), the changes are automatically (or at least easily) applied to the other user accounts?

Can I put more than one user under one Apple ID account. I want to let other family members use imessage on their own Apple device. Or is there another way to get this end result?

Can I put more than one user under one Apple ID account. I want to let other family members use imessage on their own Apple device. Or is there another way to get this end result?

You can seach the net for solutions like this one http://appletvvpn.com/how-to-connect-apple-tv-2-to-vpn/ another idea is to use a PC as the control and fit that with a wireless card and set up a ad hoc wireless network that the Apple TV uses.

How to get all users under an organizations?

Hello everyone.
Just want to know if anyone knows how to get all users under a particular organization.
From the Search User form, I found they may kind of user such attribute conditions:
MemberObjectGroup
is in
XXXX(organization)
But unfortunately, the "is in" is not a valid AttributeConditionOperator, so besides using "recursive" self-written function, anyone knows any possible buit-in trick?

Here is my solution:
<Rule'>
    <RuleArgument name='organization'/>
    <RuleArgument name='context'/>
    <block>
        <defvar name='orgs'>
            <new class='java.util.ArrayList'/>
        </defvar>
        <invoke name='getChildObjectGroupNames'>
            <invoke name='getObject' class='com.waveset.ui.FormUtil'>
                <ref>context</ref>
                <s>ObjectGroup</s>
                <ref>organization</ref>
            </invoke>
            <ref>orgs</ref>
        </invoke>
        <append name='orgs'>
            <ref>organization</ref>
        </append>
        <invoke name='getUsers' class='com.waveset.ui.FormUtil'>
            <ref>context</ref>
            <map>
                <s>conditions</s>
                <list>
                    <new class='com.waveset.object.AttributeCondition'>
                        <s>MemberObjectGroups</s>
                        <s>in</s>
                        <ref>orgs</ref>
                    </new>
                </list>
            </map>
        </invoke>
    </block>
    <MemberObjectGroups>
        <ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
    </MemberObjectGroups>
</Rule>

How do I set Firefox to be usable for all users on one computer?

How do I set Firefox to be usable for all users on one computer?

I would think the about:config entries discussed are ex-factory set to values each user has to change individually, after the installation has run its course. The solution could be to have patched files ready to install post factum:
[https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/A_brief_guide_to_Mozilla_preferences A Brief Guide to Mozilla Preferences - MDN]

My children got Itunes cards for christmas. There devices are all on my imac. Do they each need a separate account or is there a way to keep them all separate under one account.

My children got Itunes cards for christmas. There devices are all on my imac. Do they each need a separate account or is there a way to keep them all separate under one account.

I need an answer to this too.

Manual bypass to view all history entries of all user for one report

Test have been performed on standealone BIP 10.1.3.4.1 (Patch 11931697). May be it can be reproduced with previous versions and/or other J2EE container.
Problem is now described in Oracle Support with bug ID : 12412334
Bypass solution may be helpful for people who use work directly in BIP web interface or who integrate this web interface using HTTP URLs or HTTP/REST like custom app (and may be other cases...)
When logged with an admin username, you can view OR filter "ALL" history of one all users for one report by typing an url like :
http://BIP/xmlpserver/servlet/reporthistory?report_url=/REPORT_DIR_PATH/XDO_NAME/XDO_NAME.xdo&tfilter=all
Where :
BIP is BIP Server DNS
REPORT_DIR_PATH is report directory path in BIP web interface
XDO_NAME is report's name

I don't think there is a way. There should be, but I've never seen it.

Sharing library/playlists etc. All users on one computer STEP BY STEP guide

ok i recently installed a new hard drive and when I set up iTunes I found I needed to set up iTunes the way i used to have it... which was that all users shared the same library... and if one user added a song we all had it... without manually modifying anything... also playlists created by one would appear for others.
A scan of the forum caused me headaches and little help.
SO... a couple of hours palyng around and I am where i want to be!!!!
please note... save time and modify permissions at the correct stage... or it won't work!!!
Step By Step...
Go To...
Main users iTunes folder (iTunes Library, Album Artwork, iTunes Music Library.xml, iTunes Music)
AND... do a get info...
Under... Ownership & Permissions...
Change the group to admin and give this group 'read & write' and others the same or leave it at read only.
Hit the 'apply to enclosed items' button!!!
THEN... drag this folder to a shared location... IE Users / Shared.
THEN... make an alias and drag it back to the Music Folder in your own home library. (where the original folder was previously)!
DELETE the word ALIAS.
Log in as another user and get rid of the iTunes folder. (if the other user has different songs etc... then save them to a separate location for re-importing later!
Go to the Shared location... Make another Alias... drag it to the music folder and again DELETE the word ALIAS.
Do this for all users...
Any user who adds a song to iTunes... is shared by all.
Any user who creates a playlist... is shared by all.
One downside to this... if a user is logged in using iTunes and you switch users iTunes will not be available to the new user... unless the application is quitted...
G4 iMac 20 1.25ghz / G4 iBook 14 1.33ghz Mac OS X (10.4.9)

That steps above are far too much (and unecessary) work.
Drag the iTunes folder to a shared location.
Make sure all users have REad/Write permission to the iTunes fodler.
Each user start iTunes holding the Option key, select Choose existing library and pick the iTunes folder in the Shared folder.

Can I direct all users in one OU to share a common desktop/my document? (Folder Redirection)

Say we have a few OU's, each OU will only have 1 active user at any given time. Lets call it OU: A,B,C,D. When a person leaves, I want the new user to be able to access all of the same desktop/documents of the previous user. I don't want to have to come
in and copy the desktop/my documents folder each time for this.
Say if User in OU "A" leaves and there's a temp/replacement, can I just copy the existing user's profile and create a new one in OU A and have the new user be able to log in with their new account but have all the desktops and my documents
of the previous user. Of course if this can be achieved, even when the machine gets replaced, the desktops/my documents are there.
At the moment, we have shared folder for those groups of people but we're not enforcing them to save to the mapped drive. Lots of them have no idea what a mapped drive is. :( I want to simplify this process and get away with spending hours of backing up/restoring
people's my documents and desktops when they come and go.
Danny

Hi,
I don't think we can set multiple users to a same redirected folder.
Under Basic - Redirect everyone's folder to the same location, there is only one option seems close to your purpose which is "Redirect to the following location". However to get it work, the user need to be the owner of the target folder, and it will not
work even we set Everyone as the Owner.
Meanwhile I do not understand why you would like to share a redirected Desktop with all users. If you would like to share files or folders, you can map a folder for all users. If you would like to publish applications to all users, you can deploy application
through Group Policy.
If you have any feedback on our support, please send to [email protected]
Yes you can and I confirm this works. The key is to uncheck
"grant user exclusive rights"
here's an example of what I did.
Created OU A and B
OU A - Added user A1 and A2
OU B - Added user B1 and B2
Created Security Groups A and B
Share folders \\PDC1\A\Desktop and \\PDC1\A\Documents grant permission to security group A (repeat for group B)
Use basic folder redirect and the option to redirect everyone to the same shared drives as above. In the setting tab, uncheck "Grant user exclusive rights"
And to answer your question, we do you mapped folders. Each user have their own mapped drives but no one is using it. They don't even know what mapped drives are in most
cases. They tend to like to save everything to their desktops or their whatever the default saved location is, in this case it's "Documents". There are plenty other reasons why I want this.
Danny

Adding multiple users into one security group at one shot

Hi,
Is there any way we can add multiple users into one security group at one shot into PWA.
For example: I want 100 create 100 users in EPM and Providing them with custom define Team defined permissions and can I add Time sheet Manager as well while creating bulk user through resource template in Project server 2010.
Thanks,
Prashant

Hi Prashant,
In order to add users in a security group, you can open the group, select all the appropriate resources (pressing CTRL key) and add them to the group. There is no other easy way. Otherwise a powershell script could do the job.
For the timesheet manager, if all the 100 resources have the same timesheet manager, you can go to the resource center, select the resources (sorting by resource ID will give you together the latest resources added), bulk edit the resources and select the
timesheet manager for the selected resources.
Hope this helps,
Guillaume Rouyre, MBA, MVP, P-Seller |

How to combine the files, photos of two users under one admin

I got a new computer and downloaded the files, photos, etc, from my old computer to the new one. Now, however, I have two users, both me, on my new computer and would like to combine all the stuff under one user name.

Transferring files from one User Account to another

How to diable delete button in PO for all users excepting one

Dear All
Please guide how to disable delete button in PO for all users excepting only one.
Thanks

Hi,
check following link
[Disable fields at item level in ME22N;
[Disable Delete Button;
Regards
Kailas Ugale

PO delivery date field to be made display for all users except one user

Hi All,
I have a specific requirement:
The delivery date field in PO should be made display only at the time of changing the PO. I know pretty well that this can be achieved thru Define Screen Layout at document level, which inturn will make this field disaply mode to all users.
But it should be in changeable mode only for one user. how can we achieve this.
Any ideas, please
/R
Antony

Hi ,
You can create a authorization object(Z one) which can be assigned to the user id who need authorization of change .
In the exit , you can specify the logic that if SY-USER (current user) has the authorization id , the system will allow to change . If the user doesn't have the object in his roles , the system would not allow to change .
This will help in providing / removing access to any user id .
Regards,
Hari.

Query to find all users under specific MO: Security Profile (per_security_profiles)

Hi Folks,
Could you please help me out to get list of users under the selected MO: Secuirty Profile.
Requirement:
I have a parameter in which i can select MO: Security profiles those are under responsibility level. So based upon this parameter i need to populate all organizations under selected MO Security Profile and in third parameter i need to fetch all users which are under selected MO: Security Profile.
So please help me to sort out this problem.

Pl do not post duplicates - How to Fetch organizations under specific MO: Security Profile
Pl continue the discussion in your original thread

JWS installed client application for all users on one PC

For a PC (or Mac), Can one install a client application using Java Web Start & JNLP for all users on
that particular machine? If so, how do you do it?
thanks,
Phil

This is a new feature in the 1.5 version of Java Web Start (seperate system cache) see:
http://java.sun.com/j2se/1.5.0/docs/guide/jws/enhancements-1.5.0.html, and
http://java.sun.com/j2se/1.5.0/docs/guide/deployment/index.html
Normally, applications are installed in each users cache.
/Dietz

Adding all users under one subtree to a role

Similar Messages

Maybe you are looking for