Assign a user to multiple groups?

Hi everyone,
suppose we have around 500 groups and we want to add a user to all this 500 groups at a time. how can we do that???
(Note: i know adding into each group sequentially but i want to add all groups in a single shot)

Its pretty straight forward:
1) You have to create a table with two columns, one for the Login Id's of the user's and second for the group Name.
2) You should populate this table with 500 different login ID's that you are trying to assign to a group, and in the group information in the group column.
3) Create an init block in the RPD that users "GROUP" variable as the data target.
4) As GROUP is a system variable, once the user logs into the OBIEE analytics, he will be assigned to the groups that are populated into this session variable.
Hope that helpful.
Thanks,
-Amith.

Similar Messages

  • User in multiple groups gets multiple copies of one mail

    I have a user who is the manager in a department with multiple groups in it.  There is an email group in eudora set up for each administrative group (logical), and the manager's user is in each of those groups (also logical).  Frequently it will be logical to send an email to 2, 3 or 4 of those groups, and then (just as you would expect) she gets 2, 3, 4 copies of the email in her inbox.  Which falls into the "just what we asked for but not what we want" category...
    Does anyone know how to get mac mail or eudora to do "de-duplicating" ?  Or are we just stuck with this?

    Hi..
    Ok, so forget group mapping from AD. What you have here are two seperate network services that require individual provisioning... what I call "Service Differentiated Provisioning"
    This is where Shared RADIUS Authorisation Profiles come in (I know because I deisgned them :)
    Create a NAF for each device - simplest by using their IP addresses.
    Next create two shared RACs - one for each service (mobile & home). Inside use RADIUS attributes to assign the ip pool depending on your RADIUS vendor (Cisco?)
    eg cisco-av-pair = ip:addr-pool=poolA
    Next create the two NAPs - one for mobile access and the other for home access by selecting the appropriate NAF to activate on. Select the authentication types (MSCHAP) and databased (Windows)
    Next, edit the Authorisation part of each NAP. Uncheck the tick boxes "Include attributes from user & group records" - this will merge attributes from group, RAC and user... gets MESSY. Anyway you should see a default rule displayed "If a condition is not defined...." - in the Shared RAC dropdown select the RAC that is appropriate for the NAP (ie mobile or home). Then submit.
    At this point to avoid clashes... remove any ip allocation settings in the ACS groups A & B.
    You should now be able to authenticate users on each network service. They will still map to an ACS group (as before). However the ip pool allocation will now come from the relavent RAC instead of a group.
    It may look complicated (um, guess it is) and the NAP pages are not very friendly, but if you work through these steps it should work a treat.
    If you run CSRadius -z -p from the command line you'll see all the extra helpful debug I put in :)
    Now all you need to do is download the trial of extraxi aaa-reports! (www.extraxi.com) so that you can generate reports to audit the fruits of your labours!
    Good luck
    Darran

  • ACS USER IN MULTIPLE GROUP

    Dear all
    I have an ACS running 4.2 ver.We have integrated this with AD as well.
    We had created some groups in acs for vpn and its is dynamically mapped with respective department.Its working fine know.
    We have designed wireless implementation here with dynamic vlan assignment.
    This is not working beacause user is already a member of one group in acs.I know that i can edit that group and do the wireless parameter settings.
    But i would like to know wheather the user can be a member of multiple group or user will be associated with first  group.
    If we have an option for the user to be in a multliple group how can we do this.
    If any one has faced this issue pls reply me at the earliest.
    regards
    -Danish

    Its a bit long winded, but by using multiple Network Access Policies (NAP) in ACS 4.2 you can create specific windows group mappings per NAP.
    The NAP is selected dynmically by NAS IP, or NDG or any content within the incoming RADIUS packet. So usually its possible to match on something. NAPs may also have chunks of re-usable RADIUS attributes (Shared Radius Authorisation Components) which can be used instead of setting RADIUS attributes at group level - can reduce the management overhead.
    Its not a perfect solution, but should get to where you need to be without having to upgrade.
    Facing an ACS audit? Find out how aaa-reports! can help at www.extraxi.com

  • Workflow to populate "Assigned to User" with AD group of the "Assigned to User" is empty or Null to user is empty.

    I am updating roles and would like to use the [me] and [my group] tokens for views.  I am planning on updating all the templates to specify an ad group in the "Assigned to User" field that corresponds to the appropriately selected support
    group.  I would like to avoid having the "Assigned to User" blank (this could happen either via using a generic template, or when re-assigning workitems) so I think I need a workflow to remediate any workitems that have no Assigned to Users.
     There does not seem to be an easy way to do this just with a workflow configuration.  Do I need to create a workflow with the authoring tool?  Can I create a workflow that will compare a support group (enumeration?) and assign an appropriate
    AD group?

    probably the easiest way to do this would be to create a console workflow that runs on create (or update, if you want this to be reoccurring) and checks for the looks for the Display Name of the Assigned to user. This would only be populated if there was
    a legitimate user, and would be null otherwise.
    you could create console workflows for each support group (i.e. If Supportgroup = NumberA and AssignedtoUser.Displayname is blank) that applies a template that contains the correct user or group for that support group enum.
    other options are available, so let us know what you're ideal conditions are.

  • How does one assign a user to several groups?

    I am a student learning Databases, Oracle to be exact, and am trying to install a developer's copy on my MAC G4 running OS X 10.4.11. To do this I need to assign user oracle to several user groups. Trouble is, although I know UNIX fairly well I don't know Sys Adim commands well at all. Can am one help with this one?

    Thank you for your posting, however I did try this before I posted here, can assign a user to one (1) group, but can not figure out how to assign a user to more than one (1+) group. That is the root cause of my problem. Do you know how to assign more than one group? Again thank you for your input.

  • Assign R3 users to AD groups

    Our 4.6C system assigns user roles indirectly based upon org unit or HR position ID.  When R/3 roles are assigned indirectly, we would like to assign the user ID to a Microsoft Active Directory Group.  Does anyone know how this can be accomplished?  The R/3 roles and the AD group naming conventions are not the same so there will need to be a mapping from the R/3 role to the AD group.
    Message was edited by: Pamela Sanders
    Message was edited by: Pamela Sanders

    The ObjectClass should be configured in this lookup Lookup.Configuration.ActiveDirectory
    Check below
    http://docs.oracle.com/cd/E22999_01/doc.111/e20347/extnd_func.htm#sthref221
    4.6 Configuring the Connector for User-Defined Object Classes

  • How can point single user to multiple groups in ACS

    Hi,
    we are having almost 150 NDG groups in my ACS Server, in that one group is specifically for Security devices like pix & ASA's.
    Now My requirement is that i want to Restrict this Security NDG group to one Specific Group under Group setup menu in ACS.
    is it possible in ACS Server.
    If it possible how can i point multiple multiple groups to single user.
    Because not all users required access to this Security NDG group. only few users require the access.

    Give a read to how NAR works, then apply it to the security group on ACS.
    http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a00801a8fd0.shtml
    Regards,
    Prem
    Please rate if it helps!

  • How to list users under multiple groups and users sub groups

    Hi, I am stump, which is not hard to do. i have a list of groups and i want to list the users in those groups and then in the next column lists all the citrix only groups for each user. hopefully im describing that correctly. Heres what i have but it is
    not listing the users groups. I am not sure how to proceed.
    $CurrentDate = Get-Date
    $CurrentDate = $CurrentDate.ToString('MM-dd-yyyy_hh-mm-ss')
    $Groupname = "Distribution Lists"
    $excel = New-Object -comobject Excel.Application
    $excel.visible = $True
    $wbook = $excel.Workbooks.Add()
    $wsheet = $wbook.Worksheets.Item(1)
    $wsheet.Cells.Item(1,1) = "Groupname"
    $wsheet.Cells.Item(1,2) = "Member"
    $wsheet.Cells.Item(1,3) = "ACID"
    $wsheet.Cells.Item(1,4) = "Department"
    $range = $wsheet.UsedRange
    $range.Interior.ColorIndex = 19
    $range.Font.ColorIndex = 11
    $range.Font.Bold = $True
    $intRow = 2
    $groups = get-adgroup -Filter * -properties * -Searchbase "OU=Citrix,OU=Permission,OU=Groups,OU=Home Office,OU=domain,DC=Domain,DC=com"
    $targetFile = "c:\temp\$groupname $CurrentDate.csv"
    Add-Content $targetFile "Group;Member;ACID;Department"
    foreach ($group in $groups){
    $groupMembers = get-adgroupmember $group -Recursive | Get-ADUser -Properties Department, DistinguishedName| Where-Object { $_.Enabled -eq 'True' } | Select-Object Name, samaccountname, department, distinguishedname, @{n='MemberOf';e={$_.MemberOf -replace '^cn=([^,]+).+$','$1' -join '; '}
    foreach ($groupMember in $groupMembers){
    $groupName = $group.Name
    $memberName = $groupMember.Name
    $acid = $groupMember.samaccountname
    $groups = $usergroups
    #$department = $groupMember.department
    $department = $groupMember.memberof
    #$DistinguishedName = $gropmember.distinguishedname
    $line = "($groupName)--------($memberName)-----($acid)-------($department)------($usergroups)"
    add-content $targetFile $line
    $wsheet.Cells.Item($intRow,1) = $groupName
    $wsheet.Cells.Item($intRow,2) = $memberName
    $wsheet.Cells.Item($intRow,3) = $acid
    $wsheet.Cells.Item($intRow,4) = $groups
    $wsheet.Cells.Item($intRow,5) = $DistinguishedName
    $intRow++
    $WorkBook.EntureColumn.AutoFit()
    $excel.SaveAs("DL" + "name.xlsx")
    $excel.Close()

    Hi Glacket,
    Below codes should give you headsup.
    This command will give you estimate the result count for each group:
    PS C:\Users\Administrator> Get-ADGroup -Filter {Name -like "TestGroup*"} | Select Name, @{Expression={get-adgroupmember $_ -recursive | Measure | Select -ExpandProperty Count};Label="Count"}
    Name Count
    TestGroup1 7
    TestGroup2 8
    Note that as said earlier we are getting duplicated results(12,13,14) for users belonging to multiple groups. Result is in order as per earlier code's count and order.
    Get-ADGroup -Filter {Name -like "TestGroup*"} | get-adgroupmember -recursive | Select Name,@{Expression={Get-ADPrincipalGroupMembership $_ | Select -ExpandProperty Name};Label="GroupMemberOfName"}
    Name GroupMemberOfName
    User100 {Domain Users, TestGroup1}
    User14 {Domain Users, TestGroup1, TestGroup2}
    User13 {Domain Users, TestGroup1, TestGroup2}
    User12 {Domain Users, TestGroup1, TestGroup2}
    User11 {Domain Users, TestGroup1}
    User10 {Domain Users, TestGroup1}
    User1 {Domain Users, TestGroup1}
    User19 {Domain Users, TestGroup2}
    User18 {Domain Users, TestGroup2}
    User17 {Domain Users, TestGroup2}
    User16 {Domain Users, TestGroup2}
    User15 {Domain Users, TestGroup2}
    User14 {Domain Users, TestGroup1, TestGroup2}
    User13 {Domain Users, TestGroup1, TestGroup2}
    User12 {Domain Users, TestGroup1, TestGroup2}
    Use below to export to CSV:
    Get-ADGroup -Filter {Name -like "TestGroup*"} | get-adgroupmember -recursive | Select Name,@{Expression={Get-ADPrincipalGroupMembership $_ | Select -ExpandProperty Name};Label="GroupMemberOfName"} | Export-Csv C:\ListGroups.csv
    Regards,
    Satyajit
    Please “Vote As Helpful”
    if you find my contribution useful or “Mark As Answer” if it does answer your question. That will encourage me - and others - to take time out to help you.

  • Remove user from multiple groups

    Hello everyone, first time posting here with a question and I apologize if I'm asking in the wrong location.
    To give an idea of what I'm attempting to do, I've recently been developing a vbscript that will take a nightly csv export from my student information system and either create or deactivate student accounts based upon their enrollment status.  I have
    this function working great now, another function I've been developing is to have accounts moved between OU's based upon the school building code assigned to students which I have working as well.  The problem I'm running into right now is having students
    removed from existing active directory groups when they move between OU's.  Essentially what I would like to do is have the script load the users group membership into an array and then remove any groups that end with STUDENTS, below is the code I have
    been working on to accomplish this but have literally hit a brick wall.  If it helps all my student groups for each location runs in this fashion.
    ABCD_STUDENTS
    ABCE_STUDENTS
    Any suggestions would be greatly appreciated.
    ' Student changing OU then we need to update their account to reflect appropriate group memberships.
    Set UserObj = GetObject("WinNT://server.domain.net/" & ADusrname) 'This must be hardcoded to domain controller
    strUserDN = DN
    strUserCN = objuser.cn
    'Add user to the school group if not correct
    Set objGroup = GetObject(varSchoolGroup)
    strUserDN = DN ' Bind to the user object.
    strGroupDN = varSchoolGroup ' Specify group Distinguished Name and check for membership.
    Set objADObject = GetObject("LDAP://"& strUserDN)
    objmemberOf = objadobject.GetEx("memberOf")
    If Not (funIsMember (GetObject("LDAP://" & strUserDN),varSchoolGroup)) Then
    objmemberOf = objadobject.GetEx("memberOf")
    For Each objGroup in objmemberOf
    Set objGroupDelete = GetObject ("LDAP://" & objGroup)
    If Mid(objgroup,7,8) = "STUDENTS" Then
    msgbox "test remove"
    objGroupDelete.PutEx ADS_PROPERTY_DELETE,"member",Array(strUserDN)
    objGroupDelete.setinfo
    subUpdateLogFile studentcounter & " - Removed from student group " & objgroup,student_guid,student_username,student_fullname,"removed group"
    End If
    Next
    'Add user to school group
    Set objGroup = GetObject(varSchoolGroup)
    objGroup.PutEx ADS_PROPERTY_APPEND, "member", Array(struserdn)
    objGroup.SetInfo
    subUpdateLogFile studentcounter & " - Updated school group to " & student_schoolgroup_ldap,student_guid,student_username,student_fullname,"school group"
    objUser.SetInfo
    updated = "yes"
    End If
    Any suggestions would be greatly appreciated.

    With Bill.  This can be done with AD and PowerShell in a couple of lines for reach item.
    You are taking an incorrect approach which is making this much harder than it needs to be.  Your question is also hard to understand.
    Each AD usre object obtained via ADSI will have a list of groups the account is a member of.  You use this to remove the user from the group.  How you choose this is up to you.  You can use an array or a file.  You can also =just use
    OU associated groups.  A user then is added to all or some groups associated with the OU and removed from the groups associated with the OU by just returning the OU associated group list from the OUs.
    Designing AD systems is a specialty.  Once you fully understand the features and capabilities of AD these things are usually simple and painless.  If the design is not done well they are painful and faulty.
    We can answer specific questions.  Understaning the design and capabilities of AD is mostly up to you.
    Start with a tool that is designed to work well with AD like PowerShell. VBScritp is onluy useful to those who are skilled with AD and scripting in VBSdcript.  From your script we can see you are a beginner at both.  As Bill notes...do yourself
    a favor and switch to PowerShell.
    ¯\_(ツ)_/¯

  • Assigning a user to multiple workspaces ans schemas

    All,
    Is there a way to assign multiple workspaces and schemas to a single user? If so, how?
    Thanks in advance.

    The way it works is...a workspace can be associated with multiple "parse-as schemas". An application developed in that workspace can use any one of those schemas. An application can use only 1 parsing schema.
    When you create a developer userid in a workspace, you can either give him access to all the schemas associated with that workspace or restrict to a subset of schemas.
    Hope this helps

  • Remove user from multiple Group

    Hi All,
    Can any one help me on this . 
    we have around 100 different  SSLVPN AD security groups. Need a script or command to remove 790 users
    from all these groups.
    we have list of user in excel sheet we want to remove from group only. 
    Regards, Triyambak

    Hi,
    Just checking in to see if the suggestion was helpful. Please let us know if you would like further assistance.
    TechNet Subscriber Support
    If you are
    TechNet Subscription
    user and have any feedback on our support quality, please send your feedback
    here.
    Regards, Yan Li

  • Adress list custom attribut user in multiple group

    Hello,
    I am trying to configure some distribution group in exchange 2007
    I wanted to have list based on my OU but i cant find how so i went with custom attribut
    I put my member in the correct service BUT i have the manager that need to be on all the group and some user in2 or 3 group.
    I cant figure how and where to do this!
    Can you help?

    So you're trying to use Dynamic Distribution Groups?
    If you're creating the DDG using the Exchange Management Console just be sure to select the "recipient container" in the second dialog box (the one labeled "Filter Settings").
    Sometimes its easier to create a "normal" static distribution group and then add the DDGs as members. You can add the DDG that selects the managers to as many different groups as you like. You may wind up with more groups, be the filter on the DDGs will
    be much easier to understand (or to create if you must use Powershell to construct the DDG).
    --- Rich Matheisen MCSE&I, Exchange MVP

  • Assigning Portal Users to Groups

    Hi,
    Is there a way we can assign portal users to portal groups through a sql or through a form interface? Right now, it is only possible to create users and go into individual groups and assign users to them. If a user should belong to multiple groups, then we need to go into each and every group and assign the user. Instead of this, is it possible to write a query or create a form interface and assign the user to all groups that he belongs to?
    Thanks for your response.

    Dear Hassan,
    Need a clarification. If users are assigned to a group in LDAP, Can you see the same thing reflecting in portal?
    I have configured LDAP as UME and I am able to see a group of LDAP appearing in Portal. But when I see the list of users assigned to this group, its empty.
    Any clues or suggestions.
    Regards,
    Sreeram

  • How can HelpDesk manage users in multiple Organizations in OIM R2

    Hi All,
    I looking to satisfy a requirement for OIM 11g R2 where a helpdesk administrator can only manage users that belong to a particular institution. However, there are approximately 50% of users that belong to more than one institution, where helpdesk staff from each institution should be able to manage the user. Customer is currently
    doing this in Waveset by assigning users to orgs dynamically through rules which allows multiple virtual orgs. OIM unfortunately has no way to assign a user to multiple orgs, making OOTB authorization management very difficult.
    How can a administrators from different org manage same User. If that user belongs to different org?
    How to achieve this in OIM R2?
    Thanks
    Akshat

    Hi Adr,
    I know the OIM Authorization is around the Organization, and a user can present in only one org in OIM.
    I wanted to know, can we force the authorization based on Department/Institutions rather than Org. I am thinking in reagards of OES Authorization policies.
    OIM unfortunately has no way to assign a user to multiple orgs, making OOTB authorization management slightly difficult.
    I am looking to determine the best approach to accommodate this requirement. Due to the high number of users that reside within multiple institutions, leveraging organizations will not work. Asa far i know OES APM should be able to accommodate this, but could not find any solid guidance in the Oracle training or Oracle by Example documentation.
    Any thoughts?
    -Ak

  • Portal Activity Reports for multiple groups

    Hi,
    Can the report display the count of users belonging to multiple groups or would it have to be created seperately for each group. I have tried to use wild cards and commas and nothing worked, the field does not accept more than one valid group name to be entered. Any ideas how to work around this without having to create a different report for different groups?
    Thanks

    Hi EAmin,
    You can only show information about users who belong to a specific group and not multiple groups. But if you want to show users in multiple groups, you can create a new group (say temp) and add the other groups to temp. Now, configure the report to display users in group temp.
    Rajiv

Maybe you are looking for