Approval process to disable user

Hi,
I need to have an approval process before disabling the user and the approver not being user's manager.I am not quite sure as how to implement it. Please guide.
Thanks

Hi All,
Can we use the Request API to create the request (and then Approval) for other than ADD (object type like Disable, Enable etc) of a user like below
long lRequestKey;
long UserKey=1;
long ObjectKey=201; //testro1
HashMap reqMap = new HashMap();
reqMap.put("Requests.Target Type", "U");
reqMap.put("Requests.Object Request Type", "Disable");
reqMap.put("Requests.Type", "U");
lRequestKey = reqObj.createRequest(reqMap);
System.out.println("Created request and got key :" + lRequestKey);
reqObj.addRequestUser(lRequestKey, UserKey);
System.out.println("Added the request user");
reqObj.addRequestObject(lRequestKey, ObjectKey); // I am not sure if this part is right but without this it is giving me the error.
System.out.println("Added the request object");
reqObj.completeRequestCreation(lRequestKey);
System.out.println(Completed and submitted the request");
I gave it a try but the Resource detail is not getting populated in the request due to which request hang up in "Request Initialized" state. I tried by passing the Process Instance Key also but no luck.
Any chance if anyone crack it before. Please tell me. Thanks

Similar Messages

OIM 11g - Approval workflows for disabled user accounts

Hi,
We have a scenario wherein a user will be created in OIM with a future start date resulting in a Disabled Untill Start Date user status. Once the user is created, we should let anyone submit a New Hire form for the user and the submitted form needs to be approved by the Manager. Once the Manager approves the form, the target accounts should get created with disabled status. These accounts should get enabled on the start date.
As submission of New Hire Form is not a straightforward process, we came up with the following design.
A dummy resource object corresponding to the New Hire Form will be created and can be requested for a newly hired person by anyone who has OIM access. An approval workflow will be configured for the New Hire Form Resource object and provisioning of target accounts will be based on Manager's approval for this resource object.
However the challenge that we see with this design is, it wasn't possible to place a request for New Hire Form dummy resource object for a disabled user. But the requirement is to complete the New Hire Form submission process befor the user becomes active.
How can these workflows be invoked for a disbaled user? Is there any other way to implement this requirement?
Any kind of help/guidance is greatly appreciated.
Thanks and Regards
Deepa

911709 wrote:
If I create a dummy resource, called "Group Membership" for example, and use this to show the groups that are available in AD, how can I have the request be routed to different approvers? For example, group cn=HR Users,cn=Users,dc=company,dc=com needs to be routed to HR for approval. Group cn=IT,cn=Users,dc=company,dc=com needs to be routed to IT for approval. How can I change the approvers dynamically?
Re: Spawning multiple approval tasks in parallel in OIM11g SOA Composite
You can have dynamic task assignment in BPEL; where you defne a variable in the task assignment and update the variable with the approver group name before triggering the task assignment task. Check BPEL docs for same.
If every group needs a different approver, and there are 5000 groups, can I make 5000 resources and use the built-in routing of approvals? Or, use the dummy resource approach and handle the management of the approvals in some other way.Just make one resource with one field attached to it which takes in the group name and handle approval in SOA by reading a lookup which has AD group to Approval Group mapping.
>
Thank you.-Bikash
Edited by: Bikash Bagaria on Feb 18, 2012 1:00 AM

Approval process in update user workflow

Hi
I have read in the document Administrative Guide that by default, the approval process is set only for user creation. and the same does not work for update and delete operations on user, unless we customize the code.
Does any one of you have any idea as to what customization needs to be done for successful approval process for updates also. I have set approvers for resources.
Thanks
Bushra

1. backup the existing Update user workflow as an xml file
2. Copy paste the same in the BPE.
3. Save the copy as a new object with a different name.
4. Edit the new workflow as follows:
4.1 Create new activity
4.2 In the new activity, add a variable with some name
4.3 create a new action, and let that action be a subprocess. For that subprocess, browse and choose 'Approval' as the action.
4.4 Add a argument as name=approvalForm and value=<name of approval form>
4.5 Include argument user=$(user), etc. (Check the original approval workflow to see what the names of the arguments are)
4.6 For return to=name of the variable declared, from=approved
4.7 Add a 'isTrue' condition for the variable declared.
5. Make the appropriate transitions, and ur ready to go.
Let me know if this helps. I can post some skeleton code tomorrow. I need to work on it. Drop a line at [email protected]

Approval Process in the workflow

Hi, in the current approval process, where the user receives a notification and then when the user clicks the approve button, it will build up another email and with all the messages and the user needs to click "send" to send the email, this is in Microsoft Outlook. Has anyone ever tried to customize so when the user clicks " Approve" button, it is automatically processed behind the scene without opening another mail and click "Send" button? Thanks.

I don't think this is possible.
When you click on the approve button and send an email, a few things happen.
An email is formulated with the notification id and a code that corresponds to the action the user took. The email is sent to your Oracle EBS.
Oracle EBS has a process that reads the incoming emails; deciphers the notification id and the action_code from the email and processes the workflow accordingly.
Making changes to this architecture will be tough if not impossible.
Hope this helps,
Sandeep Gandhi

How to create Request programmatically to trigger Approval Process

My scenario is dificult... I need to start Approval Process when the user want to assign AD Resource to other user without Request service. So I want to create Request programmatically from Event Handler to start Approval Process for Provision Resource request type.
Is this right Way?

If you talk of request, you will have to use RequestService. You can use code to work with the RequestService to create the request and the approval for you.
-Bikash

Delivery approval process   sap b1

Hi expert,
i want to insert an approval process based on   user field:
this is the query but the system doesn't   give any messagge and insert the delivery
SELECT DISTINCT 'TRUE'   WHERE $[ODLN.U_XTIPODOC] = 'BLM' and ODLN.DocNum = $[ODLN.Docnum]
where is my error?

Hi,
Have u tried running the query on document ?
Is your query returning you the value ?
Try this,
SELECT distinct 'TRUE' from odln where $[odln.U_NAT_OF_CON.nvarchar] = 'BLM'
and $[odln.docnum] = $[odln.docnum]
I tested it in my tes tDB and it worked. The query is giving me the result.
thanking you
Malhaar

Creation of auto approval process for assigning role for a user in oim11g

currently i'm doing a scenario like a user must be automatically assigned to a role by using approval policy where the user is already there in oim and then we use csv file in that we take 2 columns like userlogin and role name so by running this scheduled task user must be automatically approved to that role.But i have to use the default auto approve policy in oim without creating any bpel process for that so can any one suggest me how to proceed with this scenario.
Thanks in Advance for quick response.

If I understand correctly, You have users and their respective roles in csv file. Users are present in OIM. You want to assign those roles in csv file to respective users?
If this is the scenario, you need to write a custom code for schedule task which will read data from your csv file, create roles and assign them to respective users.
to create custom schedule task in OIM 11g, you may refer to:
http://docs.oracle.com/cd/E21764_01/doc.1111/e14308/scheduler.htm
regards,
GP

Approval process - 2 users in stage

Dear all,
Question about the approval process.
I have a stage where 2 users can approve, but only one is required
It works fine when they approve document. As soon as one user approve, the originator user receive alert and can create the document.
However when they want not to approve , the system ask for both user to not approve the request before changing the status of the request from pending to rejected and sending the alert to the user.
If only one say no, the status remains pending, and an action of the second user is required to make the system change the status.
Why to approve, only one is required, and to reject, both are required? is there a way to have the same process in approval than in reject ?
Thank you
Sébastien

Dear Sébastien,
This is in the initial design of this process. We can do nothing about it.
You may post a DRQ here http://forums.sdn.sap.com/forum.jspa?forumID=265 or on Idea Place for this request.
Thanks,
Gordon

How to catch rollback in Disable user process task in Xellerat User Process

hi ...
I want to send an email to manager group of the user, once the user is disabled from the OIM (when end date is reached). I created an adapter and attached it to the ‘Changed User Disabled’ process task in the ‘xellerate user provisioning’ process and add a new row in the “Lookup.USR_PROCESS_TRIGGERS” Lookup definition. (code key: USR_DISABLED and Decode: Change User Disabled ). This adapter executes only when the user status is equal to “disabled”.
This works correctly when the OIM user disabling process execute without any errors. But sometimes while disabling the user it gives an error (“resource is not configured properly”) and rolls back everything and make the user active. But at the same time my adapter runs and sends the mail informing user is disabled but yet user is active.
My problem is how can I find or catch rolls back transaction in the “Disable User” process task (which is in “Xellerate User” process”) ??? If I can get to know that a roll back is occurred then I can send a mail to OIM administrator, informing that user disable process is failed.
Can someone please help me to find this..
Thanks in advance :)
Regards,
i.k.

Hi Rajiv,
Error occurs while disabling the user due to resource configuration problems. ( error message is : DOBJ.RESOURCE_NOTCONFIGURED_PROPERLY -- One or more provisioned resource is not configured properly) In this case i know the problem and how to solve it. But what I want to know is in any case if disable process get fail and if things get roll back again, then how can I track that situation and send a mail to OIM Admin(informing the failure) instead of sending a mail to user managers saying that user account has been disabled.
I think now my problem is clear…. Can u please help me to find this.
Regards,
i.k.

Disabling user through API call -process task-followed by an Enable User...

Hi,
I am running on OIM 9.1 BP11. I implemented a process task to disable the user based on a URS form field change.
I can confirm from the log file and the resource that the Disable user (xellerate user) happened. But the user got enabled back right away. The log file showed that a scheduled task named "Enable User After Start Date" ran and enable the user. So, I disabled that scheduled task.
Then I repeated the test again. I observed the same behavior of user being disabled and enabled again but this time, OIM called an adapter. This is what I observed in the log file:
20988 INFO,20 Oct 2010 12:21:56,519,[XELLERATE.DATABASE],DB read: select evt.ev t_key, evt.evt_name, evt.evt_package, mil.mil_name from mil mil, evt evt w here evt.evt_key = mil.evt_key and mil.mil_key=10
20989 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.DATABASE],select evt.evt_key, ev t.evt_name, evt.evt_package, mil.mil_name from mil mil, evt evt where evt. evt_key = mil.evt_key and mil.mil_key=10
20990 INFO,20 Oct 2010 12:21:56,519,[XELLERATE.PERFORMANCE],Query: DB: 0, LOAD: 0, TOTAL: 0
20991 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.SERVER],Class/Method: tcBusiness Obj/getSqlOperationFromMembers entered.
20992 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.SERVER],Class/Method: tcBusiness Obj/getSqlOperationFromMembers left.
20993 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/getClassLoader entered.
20994 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/getClassLoader left.
20995 DEBUG,20 Oct 2010 12:21:56,520,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/findClass entered.
20996 INFO,20 Oct 2010 12:21:56,530,[XELLERATE.ADAPTERS],Adapter: Enabling the User was initiated for the task: Enable User.
20997 INFO,20 Oct 2010 12:21:56,531,[XELLERATE.JAVACLIENT],System Event Handler : Enabling the User
I did exactly the same disabling user process at another client and it worked fine. I don't understand what causes OIM to call this system Event handler to re-enable the user.
Please help.
Thanks
Khanh

Do you have any Entity Adapter or Event Handler or Trigger which enables user for some condition ?
Check your environment. If you have please remove that and try.
Does this user has and provisioned resource ? If yes, try for some other user which doesn't have resource provisioned.

Create APG ( approval granted) status in process order through user status

Dear Gurus,
My business requirement is to create APG ( approval granted) sytem status in process order through user status functionality, if possible.
This needs to be activated while creating process order itself. Any help is greatly appreciated.
Warm Regards,
Satish

As of this date, we have still not implemented a fix, but I did get some information from someone else who has.
I'll post his information here for all to see. Hope you find it helpful.
From: Joe
Yes we managed to do it.
After several false starts and CMOD/projects which suffered because only the default keys (for order number, aufpl etc) were in place and not the actual, we coded up the IN_UPDATE method in the WORKORDER_UPDATE badi. This gives us the final format after the DB save (but before the commit). The update of the STATUS using the SAP std function module was actioned successfully but the status profile was not actually passed through. We assumed that this was because of the update task - so we introduced an INSERT into JSTO instead (a bit naughty I know, but desperate needs etc). If you require anything more let me know.
Best Regards
Joe

Approval process is skipping with update user

Hi,
I have approval process before updating a user (the oganization in which the user exists has approvers assigned to it). I am using the default Lighthouse Approval subprocess.
But when i try to update a user, the workflow is going inside the "Lighthouse Approval" subprocess but the "getApprovals" activity (in the approval subprocess) is returning null. So the approval workitem is not being created.
Can anyone help me out in this? Am i missing anything here.
Thanks

I belive the approvals only works for when someone is assigned the role, not when they are updated.
Dana Reed
Senior Identity Management Architect
AegisUSA
Denver, Co

Can we disable Archive step in Approval process

Guys,
I wanted to know if I can disable Archive step in the Approval process. Right now the issue is I do not want the people to Archive the document by mistake.
1) Is there a way to disable the Archive step?
2) Or is there atleast a way to restrict it based on roles?
Please help me.
Thanks a lot,
Deepak

Hi,
you cannot configure anything on the Approval process.
If you want to change something you need either modify the standard (if you get the source code) or develop your own process.
The only things you can try, if remove or restrict UI commands.
There are several UI command groups involved.
For example there is the StatemanagementMassGroup with the command statemanagement_archive_mass inside. This you could remove, so that in the layout sets where this group is used, the archive command is gone (e.g. AdminExplorer menu)
But the StatemanagementGroup command group is just a java class and references no commands. So you cannot get rid of the single archive command from the resource context menu. But maybe it is enough for you to remove the whole command group and do approval actions only from a mass menu.
I guess thats the only thing without developing which can be done here.
Regards,
Sascha

How to disable an out of the box disable User process task from resource?

How should I disable the out of the box disable User process task that is assigned to a particular resource? If I disable this disable User process task, when the user is provisioned to the same resource will I be able to stop this disable User process from running?
My requirement: I need to disable the disable user process task from three resources x, y and z. Whenever a user is provisioned to one of these resources I should stop this disable user process task an out of the box process task from running. How can this be accomplished?? Please help me out on how to configureto remove the process task in the OIM Admin console to stop the process task.

You can avoid the disable task from triggering by removing the Disable Process Or Access to Application from the task effect drop down in the process task. But this task is triggered once the user is disabled. But still I didn't understand the exact scenario.
By the way the disable task is triggered when the user gets disabled and not when the user is provisioned.
Edited by: vindla on Aug 1, 2011 10:26 PM

Approval Process in OIM

Hi All,
I am new to OIM. I tried creating an approval process for SUN Java System directory server.for this i create an task assignment adapter and added it to the Approval process. the problem here is that when i tried to assign the "Resource" through Requests tab on Admin interface to any user it goes to approver inbox but after approving the request user is not provisioned in the target resource.It shows nothing in the Resource profile page of the user also.
Any pointer or help will be appreciated.

Aaah....i think i was not able to explain my problem properly...let me explain you what i did...
1. i have imported the connector for SUN java system directory server as explained on oracle site in Oracle by example.
2. This connector have created the iPlanet user (provisioning) process for iPlanet User object name automatically having create process and no. of conditional processes (Disable user, enable user etc..).
3. Now i wrote one Adapter having approval logic and attach it to one custom process of Approval type and assign it to iPlanet User as Object type. There is no table definition attached to it and when i tried to attach the available Form "UD_IPNT_USR" to it, it gives me some sdk error.
After this i have tested the approval process in two ways...
1. Through admin console (as xelsysadm), i have created a test user and assign this user to resource "iPlanet User" through Resource Profile combo tab. The user is successfulll provisioned with no approval required but i was expected that it should go to approver as per logic.
2. In second scenerion, i assigned the resource through Request tab (Requests-->Resources-->Grant Resource). It goes to xelsysadm Pending approval items first and after this approval it goes to the other approver as per logic defined in adapter. After this approver approved the Request, it goes complete with no provisioning. I am wondering if i need to attach the Approval and Provision Process so that first it goes to approver and after approver approves it, gets automatically provisioned.
Please look into the problem and suggest some solution. I am sure it should not be as tedious as i made it, but i don't have other option :(

Approval process to disable user

Similar Messages

Maybe you are looking for