Adding the group SAP_J2EE_ADMIN to one user

Hi everybody. I have NW2004s Enterprise Portal and I have some users that need this group to manager some things. But when I try to add the group SAP_J2EE_ADMIN to one user, appears the message: User attributes successfully modified. You are not authorized to assign one or more entities. Perform a new assigned entities search to see the correct status. Everybody can help me? Thanks a lot.

Hi Marcos,
It is clear that your UME is on ABAP stack , if you have to assign any group to a user then it has to be done through ABAP
Refer to these threads
http://help.sap.com/saphelp_nw2004s/helpdata/en/38/116e424925c253e10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/42/e4f0dfe4cc3ee1e10000000a1553f6/frameset.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/50/50c43dac1bcf51e10000000a114084/frameset.htm
Thanx
Pankaj

Similar Messages

How can I see the last logon of one user?

Hi experts!
I need to check the last logon of one user.
How can I check that?
Thanks a lot!

Hi Carlos,
You can check the users last logon to SAP from :-
SE16N - Table USR02
<b>Last login is TRDAT - Last logon date
LTIME - Last logon time</b>
Thanks,
Vinay

Get the groups name of a user in openldap authenticator

Hi,
I am using an openldap for user authentification. How can i retreive the groups name of a user ? I read that i must use the GroupManagerControl class.
What is the way to specify the openldap authenticator using the above class ?
Thanks for help.

If you are referring to a user's group membership in the Active Directory, then indeed JNDI & LDAP can be used to retrieve these values.
If you are referring to a user's local groups on their own workstation, then you may want to investigate either the JNDI NTLM provider or perhaps the Samba JCIFS stuff.

How to get the group name of a user

Hi,
I am using an openldap for user authentification. How can i retreive the groups name of a user ? I read that i must use the GroupManagerControl class.
What is the way to specify the openldap authenticator using the above class ?
Thanks for help.

Re,
Here is a screenshot of this functions...
If you really own LV DSC 8.2 the best thing to do is to reinstall it.
Regards,
Message Edité par Richard K. le 04-02-2007 04:00 AM
Richard Keromen
National Instruments France
#adMrkt{text-align: center;font-size:11px; font-weight: bold;} #adMrkt a {text-decoration: none;} #adMrkt a:hover{font-size: 9px;} #adMrkt a span{display: none;} #adMrkt a:hover span{display: block;}
>> Découvrez, en vidéo, les innovations technologiques réalisées en éco-conception
Attachments:
security.jpg ‏3841 KB

How to see the group membership for a user in oidadmin

how to see the group membership for a user in oidadmin?
I see the memberships in oiddas, but I would like to know if its possible to see them in oidadmin? Thanks.

Hi,
For what I understand, you know the user and want to know the groups that the user is member of (am i wrong?)...
With this query you pass the user's DN to the ldapsearch and the search gives you back the list of groups the member is a member of, all you need to do is change the value "uniquemember=cn=orcladmin" in the query for your own user.
For example:
$ORACLE_HOME/bin/ldapsearch -h localhost -p 389 -D "cn=orcladmin" -w oracle10g -b "dc=acme,dc=com,dc=au" -s sub "uniquemember=cn=orcladmin" dn
will give you the list of groups that the user "cn=orcladmin" is a member of.
$ORACLE_HOME/bin/ldapsearch -h localhost -p 389 -D "cn=orcladmin" -w oracle10g -b "dc=acme,dc=com,dc=au" -s sub "uniquemember=cn=smithj,cn=Users,dc=acme,dc=com,dc=au" dn
will grive you all the groups that the user smithj is a member of.
if you don't want to get the DN of the group you can change the last parameter of the query like this
$ORACLE_HOME/bin/ldapsearch -h localhost -p 389 -D "cn=orcladmin" -w oracle10g -b "dc=acme,dc=com,dc=au" -s sub "uniquemember=cn=smithj,cn=Users,dc=acme,dc=com,dc=au" cn
will give you the CN of the groups the user is member of.
let me know if this is what you need.
Regards,
Juan

LabVIEW 8.0:: How to get the group name of a user logged to a NI Security Domain?

Hello all,
I am using LabVIEW 8.0 PDS.
I created a new local domain called "MyDomain" in the "NI Domain Account Manager" . I added a new User called "MyUser" and a new group called "Maintenance". I set "MyUser" to be a member of the "Maintenance" group. Then, I configured LabVIEW to invoke the login dialog at start-up in order to log "MyUser" with the correct password.
I would like to get the group name of the current user logged programmatically in a VI. I tried with the VI Server >> Application >> Security properties and methods and also with the properties and methods of the NI Security Class but it seems to be not so simple as I believed at start.
I do not find any informations or KB on this (all the documents I found deal with LV DSC or TestStand).
The final goal is to be able to manage a list of user for my application. Each user is a member of a group ("Administrator", "Operator", "Maintenance") and depending on the group, the user can or cannot access to some parts of the application.
Thanks for your help.
Matthieu
Eurilogic

Re,
Here is a screenshot of this functions...
If you really own LV DSC 8.2 the best thing to do is to reinstall it.
Regards,
Message Edité par Richard K. le 04-02-2007 04:00 AM
Richard Keromen
National Instruments France
#adMrkt{text-align: center;font-size:11px; font-weight: bold;} #adMrkt a {text-decoration: none;} #adMrkt a:hover{font-size: 9px;} #adMrkt a span{display: none;} #adMrkt a:hover span{display: block;}
>> Découvrez, en vidéo, les innovations technologiques réalisées en éco-conception
Attachments:
security.jpg ‏3841 KB

Error accessing the UWL only with one user

Hi,
We have a problem only with one user, when the user access the UWL get the following error:
Runtime error in the portal
Exception in processing request, send the ID of exception to your portal ADMINISTRATION
ID exception 10:54_21/10/11_0037_8766350
The other user does not have problems accessing the mailbox.
The user is assigned the role of the mailbox correctly.
Any idea what may be the problem?
Thanks and regards

Hello,
The best way to see what these issues are is to check the trace for when the run time error has occured:
Log on to the portal, recreate the runtime error. Then follow:
1596214 How to find the latest default trace from right after
reproducing an issue. Please ensure that you have reproduced the
issue with a user that is experiencing the issue that you have reported. When you find the most recent default trace file, copy and paste the numbers from the portal screen and do a ctrl + F with the trace file opened and paste in the runtime error. Now you should be able to see what is causing this issue.
Then when you get this information, please paste or attach the file here that contains the runtime error for the user. From this we should be able to figure out why the user is getting this.
Also as an admin user, try clearing this users personalizations on the Universal Worklist first.
Please clear all personalizations with the affected user and retest.
Here is the help link to show you how to clear the personalizations:
http://help.sap.com/saphelp_nw70/helpdata/EN/29
/441f6f09364bcab17f94490555bee4/content.htm
If clearing the personalizations does not help this user, please attach the trace file showing the runtime error.
Beth Maben
EP - Senior Support Consultant II
AGS Primary Support
Global Support Centre Ireland
Please see the UWL Wiki @
https://www.sdn.sap.com/irj/scn/wiki?path=/display/bpx/uwl+faq ***

HT4796 Will the account merge to one user

I've had problem setting up my new iMac. I've migrated from a mac book pro and some applications don't work or can't find other files to load.
I didn't migrate on 1st set up so when i did I had two user accounts then I had problems trying to delete one to try and merge to gether but after that some files are missing and some of my music program's don't load. So I'm going to try and start from fresh. All I need to know is will I have the one user and can I change the name of the drive from christoffs mac book pro to christoffs iMac? And do you think all my stuff will load.

If you use Setup Assistant when you first boot, then the user and all files will migrate and you will only have one user.
Any PPC applications will not work and should be removed before migrating if possible.

How do I transfer files on the same iMac from one user to another?

I recently transferred files from my Macbook Pro to my iMac. Now I have two user profiles on my iMac. How do I transfer files from one user to the other user on the same iMac?

Choose Go to Folder from the Finder's Go menu, provide /Users/Shared/ as the path, drag them there, and then to the desired location.
(115866)

Find out the group and time a user was added to deleted from specific AD group

have a project that I need to find anyone that has been added to or removed from an AD selected groups that begins in APP_RMS in the last three hours.
I need to product a file the has this information
group| sAMAccountName|<ADDED/DELETED>|date and time
I know very little about AD and just a little more about powershell. I know this should be written in powershell, do not want to use outside tools like repadmin.

Hi Cchart3,
In addition, this function written by Boe Prox is for your reference, which can look at an Active Directory group's metadata using repadmin to determine who was added or removed from a group and the time this modification occurred.
Find the time a user was add/removed from a group
Best Regards,
Anna Wang

Adding the organization level to one Role

Hi Experts,
                I have one role in PFCG, this role contains
some authorizations.
These role maintain the role.organization level values also.
now i want to include one organization level to this role
for example
                   company code----
> *
                   purchasing group------> *
                   division----
> *
now i want to add "Work center"
how can i include? is there any option is there?
Thanks is advance
sundar.c

Thanks for the Doc. This will be my Plan B.
I am still researching on How to Directly publish to Portal. I was able to do that from Query Designer using Publish to Portal and the report shows up as an iview in a PCD folder in the Portal. The Endusers have only Business Explorer Role and all they can see is the the Busineess Explorer tab of the Portal. So, I need to figure out a way to assign the iview to End user role.
In one of the threads,
Prakash Darji suggested
"The "publish into Role" from WAD saves to BI Roles which doesn't help you in web deployment, so I typically don't use this. I usually "Publish to Portal" and then will add my iView on the portal to a portal role that users are assigned to. This would make these iViews available to users on the portal. "
I am going to assign points for your suggestion though.

Initiator Task not visible to other users in the Group

Hi
JDeveloper 11.1.1.6, WLS 10.3.6, BPM 11.1.1.6
I have a Process and the swimlane containing the Initiator Task is assigned to a Group.
All the users in the group are able to Initiate the Task.
But when the Task is initiated, the Task is assigned to the User specifically, but not to the Group. I guess this is the default behavior.
The Human Task Assignee - defaultPerformer for the Initiator Task is uneditable in the initiator.task file.
What I was expecting is that, since the Initiator swimlane is assigned to the Group, All the users in the Group should be able to see the Tasks initiated by anyone in the Group.
I want this behavior in the Initiator type of tasks specifically. (The normal Tasks other than Initiator tasks are working as expected.)
The reason why we want this is, let us say after the task is created, and before it is submitted, there is a lot of work to be done, for example, data entry, should be done by many people in the Group.
If all the users in the Group are able to see the Initiator Task, then it will help to share the responsibility of data entry among the users of the group.
I tried Reassigning the task to Group, and it works, but we am looking for something automatically assigning to the Group when the Process is created. (We may not be using the Oracle BPM Workspace at all).
Can anyone please tell us if there is a way to make the Initiator Task automatically assigned to the Group instead of just the user?
Thanks for any help
Sameer

Hi Ashwini
Thanks for replying.
I did the same and it was working for me even if the Type is Single.
I just gave the Group name and all users were able to see the task. This is fine with me.
I just observed one more thing.
When the task is created, all the users in the Group are able to see it in 'Me & My Group'.
But the data entered by the creator is not seen by other users.
There is an action 'Save' in the Task. If the creator clicked on it, then the task is automatically 'Acquired' by the creator.
Other users in the group are able to see the task and the saved data, but are not able to Submit.
What I expected the Save button to do is only to Save the data in the Payload. Not Claim it.
Is there a way to make the payload data only to save but not to claim the task?
Thanks and Regards
Sameer

User in 2 user groups always picks the rights from the group with least access -BOBJ 4.1 SP2

We have BOBJ 4.1 SP2 installed.
Lets say User1 is in a role1(User group) that has restricted access(no access to design menu for WEBI report in launchpad). Works fine when User1 logs into the launchpad. Cannot see the Design menu in Launchpad.
User1 is also in another role2(user group) that has Design access for WEBI report (more like Power user access).
Now when logged into a launch pad via SAP portal, and opening WEBI report on which role2 (user group) is applied that has Design access, user1 cannot see the Design menu of WEBI report. This is probably happening because User1 is also part of role1 that has restricted access. So it looks like it is always picking
the role with least access and applying it no matter which report I am opening.
I would expect the role to regulate the authorizations on the report. And one user could be a simple end user for one report and a power user for another report.
Please advise if this is a Known issue or expected behavior. Is there a work around?
Thank you very much
Suman

Hello Suman,
Try avoid denial based security rights assignment instead you can specify the unspecifed. As Greg said
Denied + Granted = Denied
Denied + Not Specified = Denied
Granted + Not Specified = Granted.
You should not deny rights for HR End User usergroup, Instead make them as unspecified. If you do so the whenever the user part of both the groups , your security rights aggregation would be
Granted + Not Specified = Granted.
Make sure you follow the approach as above. You can refer the blog below for how to structure the folder, report and User group hierarchy and effective maintenance of security
BusinessObjects Administration - Content Management Plan
Regards
Mani

How to limit the max dialog no that one user can use at the same time?

Hi,
I meet one performance problem that one user can open 6 sessions in the GUI and he/she can run 6 reports at the same time witch could occupy 6 dialogs in the sap R/3 instance. It makes poor performance for other users.
Would you pls tell me how to limit the no. of sessions one user can create at the same time or how to limit the no. of dialogs one user can occupy at the same time?
Thanks a lot!
I used this parameters in the default profile as blew:
rdisp/rfc_check 1
rdisp/rfc_use_quotas 1
rdisp/rfc_max_own_used_wp 20 (means: 20%)
It still didn't work.
Sean

Hello,
We can reserve DIA W.P by giving value to the parameter :- rdisp/rfc_min_wait_dia_wp=1(default)
that have to necessarily remain free for other users.
This parameter is used to reserve a number of dialog work processes for Dailog mode.
For eg. If 10 dialog w.p. are configured for the instance(rdsip/wp_no_dia=10) and the parameter rdisp/rfc_min_wait_dia_wp=3 is set,parallel RFC's can occupy a maximum of 7 DIA W.P.3 DAI W.P. always remain free for dialog mode.
But now the question is how we assign/restrict this free dialog w.p. to the specific user.
Reply...
Regards,
JUNAID

I have two users on my iMac, i want to transfer the font book from one to the other ?

I downloaded a bunch of fonts on my first User profile, now I don't use it because of problems and I now use a new profile.
How can I get the font book from one user to over ride the other one ??
thanks in advance

Font Book is an application available to all accounts.
There are three Font folders (provided by OS X)
/System/Library/Fonts
Contains fonts essential to the proper working of the OS and various included applications.
/Library/Fonts
Contains the standard set of fonts provided with the OS version, and is where you should put any fonts that you want to be shared by all accounts
~/Library/Fonts
Is the folder in each account. Fonts in here will be available only to that account.
Log into your old account and transfer the fonts from
~/Library/Fonts to /Library/Fonts
"/" indicates the root (Macintosh HD), "~/" is shorthand for your user folder.

Adding the group SAP_J2EE_ADMIN to one user

Similar Messages

Maybe you are looking for