Assigning a named search to existing users

Hello everyone,
I set up a named search and wanna assign this named search to an existing users. Any idea how can I set this up in MDM? Thanks in advance.
Leo

Leo,
Unfortunately I don't think there is a way to currently do this.
You can set up Local Searches. These do not need to be created first in the Named Searches table, but provide a similar functionality. In the case of Local Searches they must be created in each individual users session and they cannot be transferred to other users. They are specific to the user that creates them.
Thanks,
Tim

Similar Messages

Cannot assign sysadmin role to any existing users?

Hi,
I am having some problem with authentication. i lost my sa password. i was able to create user account with sysadmin roles, now problem is sql server is not mixed mode. i am using this sql server for sharepoint. i have other service accounts but none of
them are sysadmin role. how can i assign sysadmin role for existing windows authentication or how can i reset sa pwd?

One more
http://blogs.msdn.com/raulga/archive/2007/07/12/disaster-recovery-what-to-do-when-the-sa-account-password-is-lost-in-sql-server-2005.aspx
Best Regards,Uri Dimant SQL Server MVP,
http://sqlblog.com/blogs/uri_dimant/
MS SQL optimization: MS SQL Development and Optimization
MS SQL Consulting:
Large scale of database and data cleansing
Remote DBA Services:
Improves MS SQL Database Performance
SQL Server Integration Services:
Business Intelligence

Named Searches in SRM-MDM

Dear Experts,
I try to create Named Searches On the SRM-MDM Catalog.
I created named searches and assigned each named search do CATALOG_ID.
I assigned the relevant CATALOG_ID to the organizational unit in the organizational stracture.
In the Search UI the user sees the link to the named search I assigned, but he still see all the Items and not only the items I assigned to the named search.
I guess I did not assign the items I picked properly.
Can someone help?
Thanks & Regards,
Keren

Hi,
In SRM MDM data manager select the current table as Named search in record mode.Right click -Add -Say NamedSearchS1.Then Select your main table as current table.Select the records which you want to display to particular user.Then go to menu Search-Add to named search S1.
Go to Console under roles table-select the particular role-under tables and field tab-Named search-add constraint as S1.
MDM support 400 named searches.
In EBP then add the s1 in call structure.
Regards
Nisha

Shopping list with named searches

Hi! I have created a shopping list under the name of a specific user and share the shopping list. Now, when I logged in as a different user and call up a catalog that does not contain the items in the shopping list (i.e. named searches excluded those item), I can still see the shared shopping list and I can still shop for the items in that shopping list. This is clearly not right? I can't seem to find an OSS note for that.
Has anyone encountered such issue before?
Cheers!
SF

Hi Dheeraj,
I have already assigned the named searches in the definition of the web service. Wouldn't that be sufficient? Anyway, I did try what you suggested, create a role and assign the named search to that role and then assign this role to the user id. I still get the same problem, i.e. I was able to see the items in the shopping list that should not be included in that named search. The shopping list was previously shared by another user who has access to the items.
Regards
SF

Restrict users from saving own search in existing Named Searches

Hello,
I have created some Named Searches that will be used by the MDM users. These users are only allowed to use these named searches (in their search selections) but they are not allowed to 'overwrite' any of the named searches by their own search criteria.
How can I prevent the user from 'overwriting' the Named Searches?
Because even when I set the user role to "None" for all functions and "Read-Only" for all tables and fields, the user can still make their own search and Save that as Named Search (and thus 'overwriting' the existing Named Search which impacts also the other users that make use of these Named Searches).
We are using MDM 5.5 SP5 (5.5.42.106).
Or is this an autorisation bug in MDM?
Thanks for your answers!
Regards,
Marcel

All,
Just for your information:
We have upgraded to MDM 5.5 SP06 Patch 3 (build 5.5.63.57) and they have introduced new role feature to protect named searched to be overwritten (see also release notes of patch 3 - OSS Note 1234675).
So you can now change the Role (in MDM Console) and under section MDM Data Manager, you can set None or Execute for the function of Saving a Named Search.
If you set it to None, then the menu option in the MDM Data Manager of saving an search as a Named Search (and hence overwriting the named search) is greyed out. Only when you set it to Execute (which is automatically set during upgrade to thi snew version when the role has set it's Default function to Execute), then the user can overwrite the named search with his own search.
So, issue solved!
Regards,
Marcel

User-Specific Configuration for different named search role

We need different user specific layout settings for each user. i have duplicated catalog user role for each user and maintained specific named search for that particular user in constraint. but when we want to configure specific layout for individual user. its not showing that catalog user in the catalog config UI for the layout configuration. please advice. if it shows that specific user then we would configure each specific user layout with individual look and feel ( like shopping lists, search fields, images, etc., ). thanks for your inputs.

Answered

Using named Search has constrainst on user roles

Is there a standard way to use named search as a constraint for a user role. There are constraints related to flat files and masks but I can't find any on Named search file. Anyone have an ide how to solve this?
Regards
John-Kjell

Hey John,
Why dont u save a named search in Data Manager with whatever field ie. on prices field.
And then u configure the User having that role in the Config UI ie. make all the configurations for that user like whichever fields u want to show to that user and than while passing the url for search ui in that u specify the user and the named search in the url itself.
For eg:
http://localhost:50100/SRM-MDM/SRM_MDM?sap-locale=EN&HOOK_URL=&mask=&namedSearch=&username=Admin&password=admin&catalog=SRM_MDM_Catalog_2.0&server=localhost&datalanguage=EN
In &namedsearch=<Specify the Named Search u saved>
and in &username=<Specify the user for which it is configured>
Try dis out
Regards Tejas................

Error while assigning the fallowing role to the user

Hi,
ERROR 2007-01-18 14:13:25
CJS-30196 Role SAP_BC_JSF_COMMUNICATION_RO is not assigned to user SAPJSF
i am getting the fallowing error while trying to assigning the fallowing role to the user any body through some light in to it.
Thanks
kiran.B

Hi,
Standard roles are not assigned to users directly.Make sure that copy the role from standard roles then change naming convention like your company specification.
Ex: standard role : SAP_BC_JSF_COMMUNICATION_RO
Step:1: go to t-code: PFCG and give the role name in role tab SAP_BC_JSF_COMMUNICATION_RO
Step:2: press copy button and change the naming convention.
Step:3: Assign to the user.
I hope it will help you.
kiran kumar.v

I canu00B4t do a formatted search in a user table

Hye, I'm trying to do a formatted search over a user table using and I get the error -2006, why?
I use "report generator" and my selecc is :
SELECT T0.U_grupo, T0.U_CODE
FROM T0
WHERE T0.U_grupo ='[%0]' FOR BROWSE
If I do the same with standar table ( e.j OITM), all is right:
SELECT T0.ItemCode, T0.ItemName
FROM OITM T0
WHERE T0.PrchseItem ='[%0]' FOR BROWSE
unless, with user tables no, whyyyy?
thank´

I have seen this, though I don't have an official answer, I have my own theories. SBO matches up the variable with the previous field name and looks up the description for that field. The description for user fields is not stored in the same place as standard fields.
In a previous thread, named "SQL Syntax in SBO" (number 7144) another user showed a way to do dummy selects with the variables to get the names of standard fields. Then the variables can be used for the real work.
That is awkward, and it limits you to the descriptions of standard fields.
Bruce

CUP - No control of existing user for a new account request

Hello everybody,
I have an issue with CUP tool.
When you want to create a new user with a new account request and the user ID that you specified is already used in the backend system (user already exists), there is no control in CUP and the provisioning is done. Only a short and wrong error message appears after provisioning in Audit information part of the global review screen. This message is: Provisioning failed, user already exists, but, however, CUP assign the new roles to the user.
Do you know a way to solve this problem?
For information, only the reciprocal issue is managed by CUP: if you try to change a user that doesn't exist in the backend system, CUP propose you the parameter Create user if it doesn't exist in the auto-provisioning section of configuration tab.
Thanks in advance for your help.
Best regards,
Wassim BEN MANSOUR

Hello Ben,
This is one of the requests which should and i guess would definately be taken up by SAP for it's next versions as an enhancements. Since the tool does not have the correct procedure, as it should be, in place; what I can suggest you as a workaround is to have a manual step in between, when the request for a user creation comes.
This step would involve the task which is to be carried out by the Security guy to manually look if the user ID requested already exists, for every request for User ID creation. This looks a tedious task but considering this can lead to more trouble than actually performing it, untill it is rectified; we need to be careful with this.
Regards,
Hersh.
http://www.linkedin.com/in/hersh13

Change display name for existing users

Hi,
We have alot of users in our Active Directory. After an migration our existing users are displaying their name wrong. When we create a new user the display name is set FirstName LastName. But all of our old users have their User logon name as display name.
Is there a way to change the display name of our old users to FirstName LastName instead of the user logon names they are displaying now? Doing this per user is a hell of a job so this really isn't an option.
Example:
Full name: Peter Peterson. User logon name: pepeter. Display name: pepeter. (old user)
Full name: Tom Thompson. User logon name: tothomp. Display name: Tom Thompson. (new user)
Greetz,
Tom

I have found a script for Powershell that may be the answer to my question. There is only one thing that is not in the script. The script runs for all users. The PageSize is set to 2000 so it runs 2000 entries. Is there a way that I can run this script for
all Users in AD that start with the letter "A" or with an other letter. :P
$previewMode = $true #change value to $false ONLY after you have verified the preview!!!
$CurrentDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
$Domain = [System.DirectoryServices.DirectoryEntry]"LDAP://$CurrentDomain"
$Searcher = New-Object System.DirectoryServices.DirectorySearcher
$Searcher.PageSize = 2000
$Searcher.SearchScope = "Subtree"
$Searcher.Filter = "(&(objectCategory=person)(objectClass=user)(!(objectClass=computer)))"
$Searcher.PropertiesToLoad.Add("userPrincipalName") > $Null
$Searcher.PropertiesToLoad.Add("givenName") > $Null
$Searcher.PropertiesToLoad.Add("sn") > $Null
$Searcher.PropertiesToLoad.Add("distinguishedName") > $Null
$Searcher.SearchRoot = "LDAP://" + $Domain.distinguishedName
$SearchResults = $Searcher.FindAll()
$dnsSuffix = $CurrentDomain.Name
foreach ($Result in $SearchResults){
               $firstName = $Result.Properties.Item("givenName")
               $lastName = $Result.Properties.Item("sn")
               $newLogonName = "$firstName $lastName"
                [System.DirectoryServices.DirectoryEntry]$userObject = $Result.GetDirectoryEntry()
                $oldLogonName = $userObject.sAMAccountName
    Write-Host "Changing $oldLogonName to $newLogonName..."
    try {
        if (!($previewMode)) {
                   $userObject.cn = $newLogonName
           $userObject.CommitChanges()
        Write-Host "$oldLogonName successfully changed to $newLogonName."
    catch{
        Write-Host "Error changing $oldLogonName to $newLogonName."

Reapply Rules for existing users

Hello All IDMers;
We have a group called Seasonal for which the member access is based on rule that has two fields one is set to true and also based on employee type which is "Seasonal".
There are other users who are of different emp type BUT with the other field set to true.
Now what we decided is to put all those who have field set to true into the this group irrespective of their employee type.
So going forward for new users we can easily implement this because I am going to delete the Emp Type = Seasonal condition from Rule designer.
But Can you please tell me if there is a easy way jus by using design or admin console to apply this condition to all existing users.
I hope i didnt confuse you all.
Regards;
VSN

oh.. my bad. I looked mainly the Subject and was thinking about the rules all the time...
In your case, you can use the following function to add a user to a group. Please check in the Forum, there are lot of sample code for searching a user with a particular attribute value - then if you have the user key and group key, then you can use the below function to
Map usermap = new HashMap();
usermap.put("Users.User ID", User_id );
usermap.put("Users.Status", "Active"); //put only active users in the hashmap
Map grpmap = new HashMap();
grpmap.put("Groups.Group Name", Group_Name);
tcResultSet ts = userClient.findUsers(usermap); //find users - to get the ukey
tcResultSet tg = groupClient.findGroups(grpmap); //find requireq group
long ukey = ts.getLongValue("Users.Key");
long gkey = tg.getLongValue("Groups.Key"); //find group key
System.out.println("User Map: " + ts);
System.out.println("User Key: " + ukey);
System.out.println("Group Key: " + gkey);
int usrNumRec = ts.getRowCount(); //get number of all user records in OIM
System.out.println("There are: " + usrNumRec + " user records in OIM Dev");
//ADD the Member now
groupClient.addMemberUser(gkey,ukey); //add user back to a group
System.out.println("GROUP Added");
Search in google for the OIM functions such as addMemberUser - you will find better code in this forum or somewhere else...
Regards
Vijay Chinnasamy

Script to assign licenses to bulk AD synced user's office 365

i have dirsync so all my local ad users are synced with office 365 tenant
Now I am migrating mailboxes and I need to assign licenses to a bulk migrated users using csv
This process requires 2 steps ‘cmdlts’
$usagelocation = “SA”
Set-MsolUser –UserPrincipalName user@domain -UsageLocation $UsageLocation
After defining the location above time to assign the licenses
Set-MsolUserLicense –UserPrincipalName user@domain -AddLicenses company:ENTERPRISEPACK
So how can I script this and use a CSV file?
Also strange thing, I have ran the above to about 13 users manually, I placed the command on a notepad
Copied all lines and past on the PS, after that other users who already had licenses had their licenses removed! So what did I do wrong? I am asking this to make sure the script you will provide will not remove the currently assigned licenses

this script will work for you given the below conditions
1- you have csv file with only one
Column named "UserPrincipalName" and has all users need to be licensed
2- all users in the above file in the format of [email protected]
3- All users are having the same license
$path= Import-Csv -Path "usersFiles.csv"
foreach ($item in $path){
$MSOLUserName= $item.UserPrincipalName
$password = ConvertTo-SecureString "password here" -AsPlainText –Force
$credential = New-Object System.Management.Automation.PsCredential("your username here",$password)
$cred = Get-Credential -cred $credential
Import-Module MSOnline
Connect-Msolservice -cred $cred
$AccountSkuId = "tenantdomain:ENTERPRISEPACK"
$UsageLocation = "SA"
$LicenseOptions = New-MsolLicenseOptions -AccountSkuId $AccountSkuId
Set-MsolUser -UserPrincipalName $MSOLUserName -UsageLocation $UsageLocation
Set-MsolUserLicense -UserPrincipalName $MSOLUserName -AddLicenses $AccountSkuId -LicenseOptions $LicenseOptions

Assigning siteminder resource to an IDM user

The IDM URL is currently protected by siteminder so that we can initiate single signon. My requirement is to have only the SSO login page and remove the IDM login module. I cerated a siteminder LDAP resource pointing to our siteminder server and a login module. I assigned this login module to the end user interface so that the user needs to login only once on the SSO page.
I created one identity user within IDM and the same user existed in SSO ldap also. I assigned the LDAP resource to that user and tried to save the record. On saving, here is the error I get "Resource 'ESSOQA-SiteMinderLDAP' is not accessible at this time. Correct the resource access problem or remove this resource from the user before attempting any updates".
PS: The entry DN for the LDAP account starts with ssouid=XXX,ou=XXX,o=test.com. The uid field is not used for entrydn attribute and the ssouid field is a random text . However the uid field in LDAP and the IDM account ID will be the same.
Please help figure out what the issue could be.

All you need to do is to link the IDM users with the SSO LDAP resource, don't call the reprovision.
Also make sure you have SM_USERDN in the pass-thru authentication variable to allow passthrough authentication.
If you are using Siteminder resource just for authentication then all you need to have is just the LDAP connection parameters.
-Aravanan

Named Search option is not activated

Hi,
I want to save a search as Named Search in my repository.
It is possible to save it as Local Search but the Named Search is de-activated.
Regards
Kaushik Banerjee

Hi Kaushik,
If you want to save any search as Named search; then first you need to create a record in Named Searches table in data manager.
Go to data manager --> select table Named Search --> create record in that table --> go to main table --> apply the serach criteria which you want to save as named search --> go to search tab --> select save as Named search and select the name of your named search (you will see the same record here, which you created in Named search table).
This will definitely solve your problem.
Note: Named serach will be visible to all users on all machine whereas Local search will be visible only on your machine.
Regards,
Varun

Assigning a named search to existing users

Similar Messages

Maybe you are looking for