Approval For User Attribute Change

Hi All,
In OIM is it possible that an approval process can be called on change of user's particular attribute (let's say Department and Location). Also is there any provision where we can defined a rule which is able to find out user's manager as per certain attributes while self registration so that no need to mention user's manager explicitly.
Thanks!

Hi,
1. Find the Exit / BADI/ ENHANSMENT POINT in the mainprograme of the respective infotype.
2. Create a custom table to temporarily store the data.
3. From the EXIT trigger the workflow and save the data in the custom table.
4. Approval from MANGER.
5. Once the approval over then Write a background step in which it needs to retrive the data from the
Custom table and Update the Infotype .
6. Delete the data from custom table once the process is over.
Reward points for useful answer.
Richard A

Similar Messages

EXIT/ BADI/ Enhancement point for User Status change in Order

Hi all,
I am looking for an EXIT or a BADI or an enhancement point specifically for user status change in an order thru IW31/IW32.
I have the exit names for Order PBO, PAI, 'SAVE' event etc. so m not looking for generic answers.
I have to put some validations for the Order on USER STATUS CHANGE. Let me know if any of u have any pointers on that.
Thanks and Regards,
Sonal

Hi,
Use this Enhancement IWO10009 and call these function module to change the User Status
STATUS_TEXT_EDIT --> To Read the existing status.
STATUS_CHANGE_INTERN_VB --> to change the status.
Regards,
Satish

Authorizations for users to change their own data

Hi
All the employees are given the userids to logon to sap when these employees log on to sap with the particular userids they should be able to change /Display only the details pertaining to them not others
We have not implemented ESS but this is in pipeline but only after 3 -4 months But Authorizations are required for users now only
How to design role which should apply to all user requirements and they should get their Personnel no by default
Kind Regards
Vinod

Hi,
   For your requirement goto transaction SU21 and select the object P_PERNR and click DOCUMENTATION. Refer the Documentation for the steps to be followed.
(i.e) For a user to be able to maitain his or her own data. You should assign the user an authorization for the HR: Master data - Personnel number check object (P_PERNR), with the following specificatons:
1. Authorization level: *
2. Interpretation of assignment
   User - personnel no: I
3. Infotype           : 0002
4. Subtype            : *
A related link http://www.sapfans.com/forums/viewtopic.php?p=502235&sid=cd1bde22eb24059e4d5a2eae086b7c96

Spend Limit Approver for User in Organisation structure

Hi All,
User X is having 'A' as SLAPPROVER in organisation. Business wants to include 'B' and 'C' also as SLAPPROVERS for User X in organisation structure.
Is this feasible?Please let me know.
Regards

Hi,
For the single step spending limit workflow (WF10000276), if the approval limit of the manager1 of the employee is exceeded, then the workitem will be sent to the spending limit approver of manager1 and so on. So each user should have only one SLapprover maintained in the org structure.
However for the n-step value limit approval workflow, WF14000109, the system determines the first approver based on his approval limit, if this approval limit is exceeded then further approvers will be determined until the last approver has been found with an approval limit that is higher than the value of the shopping cart.
Kind regards,
Siobhan

Event.value = Math.round (a.value * 5.00) / 100; Replace this with an input field for user to change

I have a taxe calcul script in a field with a annulation check box like this:
if (this.getField("CheckBoxHST").value=="Off") {
// no tax
event.value = 0;
} else {
// calculate the amount of tax to be paid
var a = this.getField("pricehorstx");
event.value = Math.round (a.value * 5.00) / 100;
I like to able the user to change the percentage —> (a.value * 5.00) with a simple text field — Say they enter 6% or any other percentage in there and the calcul become (a.value * 6.00) / 100;
Not to sure how to acheive that....

Work perfectly thanks...
I feel so bad, everything work perfect, almost —
— I just want when I check off (checkbox) the tax calculation to put whatever is in the tax percentage input box to zero and I can’t

LDAP connection for user attribute via webdynpro code

Hello,
Kindly help for below issue
point1
While connecting to LDAP exception of simple bind failed is coming. code is as below
 try {
 Hashtable env = new Hashtable();
 env.put("java.naming.factory.initial", "com.sun.jndi.ldap.LdapCtxFactory");
 env.put("java.naming.provider.url", "ldap://10.77.16.220");
 env.put("java.naming.security.authentication", "simple");
 env.put(Context.SECURITY_PROTOCOL,"ssl");
 env.put("java.naming.security.principal", "sapuser");
 env.put("java.naming.security.credentials", "voda@12345");
 DirContext ctx;
 ctx = new InitialDirContext(env);
 // Create search controls
 SearchControls controls = new SearchControls();
 controls.setCountLimit(0);
 controls.setTimeLimit(0);
 controls.setSearchScope(SearchControls.SUBTREE_SCOPE);
 // Create filter
 String filter = "(sAMAccountName= *)";
 // Run search
 NamingEnumeration results = ctx.search("OU=OUs,DC=mycomp,DC=com", filter, controls);
 //wdComponentAPI.getMessageManager().reportSuccess(results);
 } catch (NamingException e) {
 // TODO Auto-generated catch block
 //e.printStackTrace();
 wdComponentAPI.getMessageManager().reportSuccess(e.getMessage());
point 2
is there any method available in this API to reset pasword of user in LDAP ?
thank you in advance
B

Hello,
If you need this info, you will have to create a password policy that log last logon time.
But be carefull with this function, it can create a lot of cpu load.
<http://docs.sun.com/app/docs/doc/820-4809/fhkrj?l=en&n=1&a=view>
Regards
Eric.

Missing user attributes

Hello Team,
We are facing an issue of missing user attributes on SRM system when there is a change in user position on HR system and got replicated to SRM system. We have verified for user attributes in tables HRT1222 and HRP1222 but these tables are empty for those users. Please guide us how can we retrieve those user attributes in SRM.
Thanks in advance.
Regards,
Kiran

I am also getting exactly the same issue.
STrange as this has only just started to happen.

User status change in inspection lot

sir,
when i am doing ud in qa11 that there is compulsary a USER STAUS must be QAA Aprroval by QA manager if user staus is QCNA not approvewd by QA manager then it gives error for user status changes must be compulsary.
so where we can change that user status of .I have a one option in qa02 is there any another options.
Please guide me

Dear Prakash
If you want to manualy change the status in QA11, you can change there itself. Near to the user status there is a change where you can change the user status ( Set status button - tick and change button)
Regards
Gajesh

Migrating from server 2003R2 to 2008R2 User cannot change password box unchecks after being checked.

After Migrating the domain controller from server 2003 R2 to 2008 R2 the check box for users cannot change password wont stay checked. This is happening to ALL users and no they are not a member of any Protected Groups. I have searched for a solution
for months but cant not find.
And now after migrating the exchange 2003 to 2010 I have to keep applying the inherited permissions every hour until a user finally makes an active sync.
Now having more AD issues, cant remove users from Exchange 2010...And again have to go to the DC and applying the inherited permissions, then I can remove the user.
I really need help with this...
John

Hi,
Did you use the migration tools to do the user migration?
Permissions on a user that is migrated from an Active Directory domain are reset to default values during migration.
I think this is by design:
http://technet.microsoft.com/en-us/library/cc974359(v=ws.10).aspx
Regards.
Vivian Wang

Attribute change run---imp--urgent

hi experts,
when i am trying to run attribute change run for master data infoobject, always it gets cancelled, the reason system shows for cancelled attribute change run is "Hierarchy/Attribute change cancelled (protocol/Shortdump)"
what is the reason for this and secondly when i try to do the manual activation of that particular infoobject, it gives a pop-up window saying " The infoobject XXXX is already active" which means that though we are doing the manual activation, it is not doing the activation. Why i am strong in saying this is beacuse there were new records entered into that infoobject and after the data loading when i activate it manually because attribute change run is not running successully, it shows that infoobject data is already active.
why is it so ? what could be the reason?
would appreciate your quick responce

Hi,
Are you able to schedule the Attribute change run from Tools-> attribute Hierarchy change run? I hope you still able to see your Info object in the list.
Check the shortdump. May be you can find a clue as sometimes some aggrgetaes cause problem while adjusting. If you find such aggrgeate, deactivate it and run teh change run.
You can also check in the Attribute change run monitor. There also youw ill find clues as which aggrgeate is causing the problem.
Regards
Srini

User attributes are not available for not root organizations

Hello,
my scenario: I have following organizations in IDM: Top; Top:Economy; etc...
I created Admin role "Economy director" with this settings:
Controlled Organizations - "Top:Economy"
Capabilities - "Account Administrator" and "Waveset administrator"
Now I assign this role to user A. This user A is in organization "Top:Economy" and he tried to edit user B in "Top:Economy". When I log in as user A I see in admin interface "Accounts->List Accounts" only Economy organization. In this organization I click on user B and select tab "Attributes". But here is no global attributes to change.
When I change "Economy director" role - Controlled Organizations to "Top" then user A can change global attributes of user B. But now user A can change everybody attributes in whole organization tree.
It's correct? I need to set user A to change attributes only for users in organization "Top:Economy".
Thanks for advice.
Petr

This sounds like a question for forum: Sun Java System Identity Manager
But anyways... the "Attributes" tab is a collection of all the unreferenced attributes of all the resources assigned, it has some special behaviors.
You should have been able to change fname, lname, email of User B as User A (UserA is assigned AdminRole with Org & Capabilities assigned as described, without Top assigned). If not, something basic is not wired between User A and the AdminRole. Possibly it's the version in use?? But, if attempted against Oracle Waveset 8.1.1, this should be functionally straightforward to get working...
The Attributes Tab would only have attributes listed if there were roles or resources assigned with attributes the admin was able to see "in-scope". A resource with attributes (e.g. LDAP resource with a groups attribute) must be scoped for the administrators in the AdminRole to see/manage them per assigned capabilities.
In the example, a resource with attribute "country" scoped into Top:Economy would allow UserA to edit UserB, update the "Attributes" Tab "country" attribute.
Edited by: gregoatwaveset on Oct 13, 2010 8:09 PM

Attribute for user contains errors. Inform system admin

Hello,
We've got an issue with shopping carts created by a user that was deleted from system. When trying to see in Monitoring Shopping Carts header or item details of a given sc. A web error occurs:
The URL http://srp.srm.gruposalinas.com.mx:8000/sap/bc/gui/sap/its/bbpsc11/! was not called due to an error.
Note
The following error text was processed in the system SRP : Attribute for user contains errors. Inform system admin.
The error occurred on the application server srm-pro_SRP_00 and in the work process 2 .
The termination type was: TH_RES_FREE
The ABAP call stack was:
Form: OUTPUT_EXPRESS_MESSAGES of program SAPLBBP_SC_UI_ITS
Form: EXTERNAL_SCREEN_DETERMINE of program SAPLBBP_SC_UI_ITS
Module: EXTERNAL_SCREEN_DETERMINE of program SAPLBBP_SC_UI_ITS
We've cheked SAP NOTE 312058-BBPPU99: Error: Attribute for ... is missing. Inform ...
But it seems that none of the information applies to us, since this issue is only present for Shopping carts that were created by this deleted user.
So we tried to re-assing one of this sc, chaning PARTNER_NO,ADDR_NR
ADDR NP data in table CRMD_PARTNER according to a new given user, but it didn't work. So we need to know how to re-assing this sc or perhaps how to find what specific attribute is missing.
Any advice is welcome.
Thanks in advance.

Hi
Which SRM version are you using ? This is an SRM error message.
The manager role should be enough to change user attribute. The transaction is BBPATTRMAINT. Employee role should have BBPUM02 or BBPAT05 to change their own attribute.
Please check whether the User ID you are using to Log into BBP_PD (and seems to be assigned in the org structure also)is consistent and has no errors in tcode USERS_GEN. You should check the user, it's not set up properly in USERS_GEN Transaction, Else repair the user.
To maintain the user attributes you must have the Administrator role.. Your user should have role SAP_BBP-STAL_ADMINISTRATOR and be integrated in the org structure. your user must be integrated in SRM organizational structure. To see which attributes are missing, you can click on the user in PPOMA_BBP to see details, and go to last tab "Check". This will list all required attributes depending on used scenarios (so you may not require all of them). You can also use transaction BBP_ATTR_CHECK to check user's attributes for a particular scenario.
Please go through the following links as well ->
bbp_mon_sc attributes
Re: FM for attribute's value assignation in PPOMA ?
Note 751022 - Monitor Shopping Cart: Item deletion causes termination
Re: User Settings are not saved
Re: Not able to generate user users_gen
Re: SRM organization plan...
Re: User creation error
Hope this will definitely help. Do let me know.
Regards
- Atul

Configuring approval for update of some profile attributes

Hi All,
I need to configure approval when some of the profile attributes are updated.
1. How do i know which attribute is updated?
2. How do i configure approval ?
Thanks in Advance.
Shrinath

The standard strategy for detecting which attribute has been updated is to add a hidden "shadow" attribute for each attribute.
Implementing your scenario turns out to be a bit complex but I think the following approach should work.
To implement your scenario you also need a boolean flag for each attribute kept in a db table or lookup table (not on the USR form). This flag is normally set to false.
When a change comes in the shadow attribute is used to detect which attribute is updated through a post insert event handler (or entity adapter). This adapter sets the flag to true, resets the main attribute to the value kept in the shadow attribute and kicks off the request. The entity adapter always checks the flag as the first step in the flow and if the flag is set the entity adapter does nothing.
This will trigger the event handler but as the two attributes now are identical nothing happens.
When the approval is done either the change is approved or denied.
In the case of approval the provisioning code sets the flag to false and writes the new value to the main attribute, next to the shadow attribute and finally sets the flag.
In case of denied you need to reset the flag to false. Not exactly sure if you can do this as part of the deny workflow or if you would have to create a scheduled task that does this.
A bit complex but should solve your problem.
Hope this helps
/Martin

Problem in maintain attributes for position in maintain user attributes

Hi All ,
I am facing a problem in Maintain User Attributes
I should get only 5 values for any user in attributes dropdown of attributes for position
But for some users I am getting as 10 values
and for some users I am getting it as 20 values ..
What my doubt is
will it be based on role dependency or anyother one ..
Pls let me know if u have any idea ..
Thanks
Kumar

Hello,
The ability of changing attributes via User settings depends on the role
assigned to the user and whether this role has the appropriate rights to
change the attributes.
In this regard, check the customizing below:
SRM -> SRM Server -> Cross Application Basic Settings -> Roles ->
Maintain Attribute Access Rights by Role.
Here you define which parameter can be changed depending on the role
assigned to user in question.
Regards,
Ricardo

Change label of Standard user attributes in Create user page

Hi,
Can any one tell me where I must change labels names for standard attributes like "Form of address" and "Position"
in the Portal.
Please, I am aware of adding custom attributes. I do not need Information on that.I need to rename only standard labels. So the method getSalutation() UME API will return values for the new label (used in place of the old label"Form of address"). "datasource configuration database only.xml" does not have any fields where I can edit this Information. Can this be done anywhere in Portal Content translation.
I have seen an existing scenario,where this was implemented. Can you provide information ,As I am not sure how exactly this was done.There does not seem to be any major modification on the useradministration par file either. Where should I modify.
Regards,
Harish
(helpful answers will be suitably rewarded)

Hi,
1.Get com.sap.portal.usermanagement.admin.par.bak from PCD .
2.Rename com.sap.portal.usermanagement.admin.par.bak to com.sap.portal.usermanagement.admin.par
3.Create a project from com.sap.portal.usermanagement.admin.par
The form labels are defined in the property file adminlabels_*.properties within the umeuseradminbase.jar. umeuseradminbase.jar resides in Portal-inf/lib folder.
4. change the values for the required key.
5. deploy the file with the name com.sap.portal.usermanagement.admin.par.
6. restart the server
Please refer this thread for more.
how to change the text "form of address" while Create User in EP6.0??
Regards
Ganesan S

Approval For User Attribute Change

Similar Messages

Maybe you are looking for