Administrative roles for one of several clusters in SCVMM 2012 R2

Hello!
I have a SCVMM 2012 R2 server in my infrastructure. There is 4 Hyper-V clusters managed by VMM. One of them situated in another city (for example, call it as "Cluster4").
Cluster4 has own host group in VMM.
Can I give administrative privileges only for this cluster to its administartor?
When I tried to create user role for host group, administrator of "Cluster4" could change configuration of other 3 clusters and its VM in other host group. But he's shouldn't do this!
So, can I delegate privileges only for one of cluster in VMM?

The user role you are looking for, is "Delegated administrator". This role let you specify user permissions at the host group level, so you can move your virtualization hosts and/or clusters to different groups in order to isolate the administration.
Before you create new hosts groups and move your hosts, please make sure that logical network mapping is correct to support the workloads running there.
-kn
Kristian (Virtualization and some coffee: http://kristiannese.blogspot.com )

Similar Messages

Creating several roles for one partner

Hi everyone !
I have created a partner with a role (=employee) . Then I wanted to create a second different role ( = physical person) for that same partner, but when I try to save the role in BP, I get an error message ;
the message is "Enter at least one tax number for the business partner"
Normally there is no tax number requirements for physical persons, only for organizations, so I don't understand where that message comes from. Is it due to the fact that I tried to create 2 roles for the same partner?
Any helpful hints on this will be rewarded !
Many thanks.
C.K.

Hi,
Its definitely not because of 2 roles . You can assign as may roles. This message is because in the customzing there must be some setting for physical person role.
You can get rid of this by follwoing steps
go to transaction spro
Cross application components->sap business partner -> business partner ->field grouping -> configure field grouping per role. Double click on the role Physical person. Double click on dataset BUTC01. On the right side choose the radio button hide or optional. Now the message will not come.
Wram regards,
Smita.

SMSY//Logical component definition - multiple roles for one system?

Dear all,
as our client has a divided system landscape (three-tier operational line as well as two-tier development line) some systems have more than one role to fill. The development system on development line is source system for all developments, as well as post-processing system for retrofit purpose from operational line. The maintenance system on operational line is target system for developments from development line, as well as source system for maintenance activities on operational line.
--> What are the consequences of assigning multiple roles to one system?
--> Is there anonther option than assigning multiple roles?
Best regards
Nick

We have Event Manger 7.0 installed into a stand-alone SCM 7.0 system. When trying to set this up in SMSY, the only options given for setting up the Logical System is to associate with with EHP3 or EHP4 for in ECC 6.0.
Obviously we have not installed EM into ECC. So where are the other appropriate entries in SMSY for recognizing that EM is installed in SCM?
1) This system must be maintained as SCM 7.0 in SMSY and not as SAP ERP 6.0 or EHPX for SAP ERP 6.0, this is the reason as you can see this system SCM 7.0 can be assigned just to SAP ERP 6.0 or EHPX for SAP ERP 6.0.
2) There's no Main Instance available to be selected when you have a SAP SCM 7.0. You must select one or more of the following main instances below.
BI Content
SCM Server
cFolders on SCM Server
GEOCODING
Portal Content
SAP LiveCache
SAP NW - Adobe Docu. Service
SCM Optimizer
SCM WCL
XI Content
These are the main instances available to SCM 7.0

Live Migration between two WS2012 R2 Clusters with SCVMM 2012 R2 creates multiple objects on Cluster

Hi,
I'm seeing an issue when migrating VM's between two 2012 R2 Hyper-V Clusters, using VMM 2012 R2, that have their Storage provided by a 4 Node Scale Out File Server Cluster that the two clusters share.
A migration between the two clusters is successful and the VM is operation but I'm left with two roles added to the cluster the VM has moved to instead of the expected one.
For example: Say I have a VM that was created on cluster A with SCVMM, resulting in a name of : "SCVMM Test-01 Resources"
I then do a live migration to Cluster B which has access to the same storage and then I end up with two new roles instead of one.
"SCVMM abw-app-fl-01 Resources" and "abw-app-fl-01"
The "SCVMM abw-app-fl-01 Resources" is left in an unknown state and "abw-app-fl-01" is operational.
I can safely delete "SCVMM abw-app-fl-01 Resources" and everything still works but it looks like something is failing during the process.
Has anyone else seen this?
I'll probably have one of my guys open a support ticket in the new year but was wondering if anyone else is seeing this.
Kind regards,
Jas :)

In my case the VMs where created in VMM in my one and only Hyper-V cluster (that's been created and is managed by VMM).
All Higly Available VM:s have a FCM role named "SCVMM vmname" where vmname is the name if the VM in VMM. On top of that a lot
of VM:s, but not all, have a second role name named vmname. Lots of name in that sentence.
All VMs that have duplicates are using the role named vmname.
I thought it had to do with whether a VM had been migrated so I took one that never had been migrated and did. It did not get a duplicate.
Is there any progress on this?

Administrator Role for "Create Travel Expense Report"

Hello Everyone,
I would like to know if there is any ESS "Role" that is provided by SAP for ESS which allows an administrator to "Create Travel Expense Report" for employees who doesn't have access to computers.
I would appreciate your help.
Kind Regards,
Gopal.

Hi Sandeep,
Thanks a lot for your reply. My client wants to completely remove the process of filling in forms for travel expenses claims. So, they are asking us to provide an alternative for the people who don't have any access to computers. Could you suggest a good solution for this scenario. I would appreciate your help.
Kind Regards,
Gopal.

Administration Role for SLD

Hi Gurus,
I want to create a new user ID for the administration of the SLD.
As my Web AS's UME is config to abap datasource. I created a SLD_ADMIN via SU01 (I cannot create a UME-based ID via portal's "User Administration")
After that I edited the UserID(datasource ABAP)'s portal role. I included the following:
Assigned Groups: SAP_SLD_ADMINISTRATOR(UME DATABASE)
Assigned Roles: LcrAdministrator(UME DATABASE)
Assigned Actions: LcrAdministrator, LcrInstanceWriterAll, LcrInstanceWriterCR (UME Type)
But whenever I try to access to the SLD administration link of my instances' SLD
http://<hostname>:5XX00/sld/cimom
I get an error : " 403 Forbidden: You are not authorized to view the requested resource."
What did I do wrong? Are there anymore group/roles I need to assign? My "administrator" ID runs well with the same assigned group.
Thanks,
Jansen

Hello Jansen,
You should also certain groups that you can find in the SLD Configuration guide to the user. Also in Visual admin you need to add this use to the administrator group under the following path
services -> security provider -> Policy configurations tab -> Security roles tab -> administrators -> add the user in it
regards,
Anand

Creating guest clusters in SCVMM 2012 R2

I’m very new to SCVMM so please bear with me.
I have a basic lab environment consisting of two hosts clustered using some cheap shared storage.
I’ve installed SCVMM and deployed a few highly available VMs.
I want to deploy a guest cluster using with a shared VHDX.
Is the only way to do it by using a a service template, or can I do it another way?
If I do, do I need to create a VM template first to then include it in my service template?
As part of the pre reqs outlined here -
http://technet.microsoft.com/en-us/library/dn249412.aspx it says I need to have the shared VHDX already available.
How do I go about creating this vhdx file on the shared storage?
Thanks

Thanks,
Is using a service template the only way to do it? Do I need to create a VM template first to be used in my service template? Also, do I need create the shared
VHDX disk manually somehow or does this get created as part of the service template side of things?

Scoped roles for JNDI resources

I have resources bound to my server via JNDI. In the console, I configure a scoped role for one of the resources. I set the role up to allow users that are in the group Administrator to access the resource. However, configuring this scoped role seems to have no effect on the operation of the system. I am still able to access the resource without credentials or even with credentials that aren't valid for the Administrator group. I am using WebLogic 8.1b. Any suggestions?
Thanks,
Joel

You should post this to the security newsgroup.
cheers
mbg
"Joel" <[email protected]> wrote in message
news:3e8a0687$[email protected]..
I have resources bound to my server via JNDI. In the console, I configurea scoped role for one of the resources. I set the role up to allow users
that are in the group Administrator to access the resource. However,
configuring this scoped role seems to have no effect on the operation of the
system. I am still able to access the resource without credentials or even
with credentials that aren't valid for the Administrator group. I am using
WebLogic 8.1b. Any suggestions?
>
Thanks,
Joel

Required permissions for SCVMM 2012 R2 Library Share - SOFS on Clustered Storage Volume

Setup / Notes:
SCVMM 2012 R2
SCVMM Library Server - SOFS Role on 2 Nodes of Clustered Storage Server 2012 R2
Library Server and Nodes show up under Fabric->Infrastructure->Library Servers
Server and Nodes show no errors or problems
Shares have been added in SCVMM and able to refresh properly
Problem:
I cannot do any job which involves writing to these shares. Import Resource, Create VM Template, etc. Everything fails with Error (2910) VMM does not have appropriate permissions... Access Denied.
Solutions Tried:
I have setup FULL CONTROL Share and Security permissions for Administrators Domain and Local, SCVMM Service Account, SCVMM Run as Account, Everyone Account, SYSTEM, Hyper-V Computer Accounts basically everything in my domain. I still get access denied to
the Library Server Shares.
Other Notes:
I do have shares configured for VM / shared storage for hosts. These are working great and appear to be configured completely by SCVMM.
What are the required permissions? Are they manually setup or controlled by SCVMM? Why does it appear that nobody has had this problem before me on the interwebs? Am I an idiot?

More Information:
It would appear that Failover Cluster Manager doesn't immediately change the permissions related to a share. I have manually gone in and set the FULL CONTROL Share and Security permissions for the Everyone Account on the Cluster Volume and the share is now
working. I do need to lock this down for security purposes so what account/accounts does it need?
Scratch That:
I was able to Import a Physical resource but the saving of a VM to the library does not work... 2904 or 2910.
Anybody?

Requesting to remove roles for the direct report's in OIM 11g R2

Is it possible to have the manager log into OIM and request to remove roles for one of his/her direct reports? You can only add roles from the catalog interface.
Thanks

Search the user
Go to the Roles Tab
Select the Role
"Remove Role" link will get enabled
Click that link
Submit
Request ID will be generated
For SELF REQUEST:
Go to My Access Form
And do the same thing

Howto setup a simple network in SCVMM 2012 R2 and HyperV for test-Lab /Private Cloud

Howto setup a simple network in SCVMM 2012 R2 and HyperV for test-Lab /Private Cloud
I have domain controller on my laptop (i5 core 8gb) en one hyperV machine running also scvmm 2012 r2 on it. (i3 core 16gb)
both runung windows server 2012 r2 x64 on it.
I want to install a easy "Test Lab" for Scvmm 2012 r2 and hyper-V r2 for mine Private cloud exams. (70-246 & 70-247).
howto arrange networking and clustering for this mine network and cluster is 192.168.1.0/24.
ThanX anyway!!

Also, I have tried to redeploy other test VM networks, VMs, and the PA Network itself and it still doesn't work.
Any ideas?

HT201177 My mac os frequently freezes for one to two minutes at a time. I have uninstalled and reinstalled flashplayer 11.3 several times because I sometimes get a crash report on flashplayer. I would like other suggestions as to what I can do.and re

My mac os frequently freezes for one to two minutes at a time. I have uninstalled and reinstalled flashplayer 11.3 several times because I sometimes get a crash report on flashplayer. I would like other suggestions as to what more I can do.

The next time you have the problem, note the exact times when it starts and ends: hour, minute, second.
If you have more than one user account, these instructions must be carried out as an administrator.
Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities, then Console in the page that opens.
Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left.
Scroll back in the log to the time you noted above. Post any messages timestamped during that interval – the text, please, not a screenshot.
Important: Some private information, such as your name, may appear in the log. Edit it out by search-and-replace in a text editor before posting.

Requesting more than 10 system roles in SMSY for one landscape

Hi everyone
We are looking to have the possibility to create more than 10 customer defined system roles in SMSY for one landscape. The current limitation prevents us to fully take advantage of our multi-client landscape designed to accept a dev path and a data load path at the same time as a testing path. For one data load server, we might have up to 9 or 10 different clients being used. This permits us to manage several cycles of data loads at a single time.
Has anyone else ever requested to have more than 10 customer defined system roles per landscape created?
Happy new year and thank for the prompt responses
Nelson Julien
Project manager, Solution Manager

Hi Udo
For our logical component ECC 6.0, here are the items
Configuration (client 020) (client defined)
This is used for configuration
Configuration target (client defined)
This is used as a target for transport groups
Development system (SAP delivered)
This is used for ABAP work
Development Target (client defiened)
This is used as a target for transport groups
Development UTC (client 040) (client defiened)
This is used for unit test work from the 020 and 030 clients
Object repository (D01 030) (client defiened)
This is used to store development objects, we relocate object ownership from here and to here once work has gone to production
QI1-320 / HRQ-130 / HRQ-141 (client defiened)
This regroups clients from our R/3 logical componant (QI1-320) used for initial tests, our ECC 6.0 logical componant (HRQ-130) also used for initial testing and our ECC 6.0 data load logical componant (HRQ-141) used for the data initial testing
Evaluation system (SAP delivered)
This is for the sandbox
Quality assurance system (SAP delivered)
This is used for the initial testing
CI4-320 / HRQ-132 / HRQ142 (client defiened)
This regroups clients from our R/3 logical componant (QI1-320) used for integration tests, our ECC 6.0 logical componant (HRQ-130) also used for integration testing and our ECC 6.0 data load logical componant (HRQ-141) used for the data integration testing
Production system (SAP delivered)
well, you know...
Training system (SAP delivered)
This is used for training
Dev security (client 900) (client defiened)
This is used for security work
Security target (client defiened)
This is used as a target for transport groups
Dataload 1 (HRQ 140) (client defiened)
Initial client for data loads
SAP reference system (SAP delivered)
This is the reference system for this landscape
In the future, we are looking to add to these in order to accomodate projects and production support.
Thank you
Nelson Julien
Project Manager, Solution Manager

Role for CRM HTML Administration

Hi,
Can you please tell me the Role that needs to be assigned to a person in order to enable creation of User Types, Roles, Enrollments, etc.?
Currently, we are assigning every single Role out there, in order to enable users to perform such setups. We would like to assign only the specific Role that enables users to perform such setups.
Thanks in advance for your help.
Regards.

From the user guide:
http://download.oracle.com/docs/cd/A99488_01/acrobat/jta115ug.pdf
Roles are groupings of permissions, which are page level or function level granular
privileges used to maintain application security. A single user can be granted
several roles, each of which separately determines access rights to the user interface
details, the ability to perform certain transactions and the ability to access certain
data sets. During the registration process, users are granted the appropriate set of
roles that map to their job function. Although Oracle User Management contains the
following predefined roles, users with the appropriate access privileges can also
create and customize their own roles.
49.7.3.1 JTA_UM_DELEGATION_ACCESS
The JTA_UM_DELEGATION_ACCESS role is assigned the
JTA_UM_DELEGATION_ACCESS permission and provides users with all of the
access privileges associated with this permission.
49.7.3.2 JTA_UM_SETUP_ADMIN
The JTA_UM_SETUP_ADMIN role is assigned the JTA_UM_SETUP permission and
provides users with all of the access privileges associated with this permission.
49.7.3.3 JTF_APPROVER
The JTF_APPROVER role is assigned the JTF_APPROVER permission and provides
users with all access privileges associated with this permission.
49.7.3.4 JTF_PRIMARY_USER
The JTF_PRIMARY_USER role is assigned the JTF_PRIMARY_USER_SUMMARY
permission and provides users with all access privileges associated with this
permission.
49.7.3.5 JTF_SYSTEM_ADMIN_ROLE
The JTF_SYSTEM_ADMIN role is the global system administration role and
contains all permissions required to access and operate the System Administration
Console including JTF_SECURITY_ASSIGN_ROLE and JTA_UM_SETUP.

Using multiple desktops with a 4 finger swipe on a Mac Book Pro running Lion- is there a way that I can allow Safari open on several but not all?? Looks like I can set it for one but not others. All, one, or nothing

Using multiple desktops with a 4 finger swipe on a Mac Book Pro running Lion- is there a way that I can allow Safari open on several but not all?? Looks like I can set it for one but not others. All, one, or nothing

Hey Eric,
Thanks for taking the time. Unfortunately no that does not solve it. Same as swipe it will get me there and it will show separate programs spaced out. The issue I am having is that all my open word files are bunched up in a pile on top of each other. I can see the edges of each one but I want them to be separated from each other enough that I can visually identify what file is what.
Again, thanks for trying, it is appreciated.

Administrative roles for one of several clusters in SCVMM 2012 R2

Similar Messages

Maybe you are looking for