Assigning a resource via a role

I have a read only resource that is being assigned via a role. If the user, being assigned the role, exists in the resource then link the user to the resource and update 1 resoruce attribute. If the user, being assigned the role, does not exist in then do something else.
I've tried adding various resource attribute but without any success.
What's the best way to achieve this?
I'm using:
siebel crm adapter
idm 8.0
cheers
ck

Thanks for the replies.
I sorted this problem by checking <ref>waveset.roleInfos[*].name</ref> contained the required list of roles. If this condition was satisfied I then called a rule that called a static method that checked that the account existed. If the account existed then the following attributes were set:
<Field name='waveset.accounts[ResourceName].created'>
<Default>
<s>true</s>
</Default>
</Field>
<Field name='waveset.accounts[ResourceName].identity'>
<Default>
<ref>global.accountId</ref>
</Default>
</Field>
<Field name='waveset.accounts[ResourceName].accountId'>
<Default>
<ref>global.accountId</ref>
</Default>
</Field>
Thanks again

Similar Messages

  • Retrieve responsible resources for a role in cProjects

    Hey all,
    I would like to display a list of assigned/unassigned resources corresponding to a role for tasks grouped under individual projects. I am not sure how I can find a relationship between the roles and resources using the tables. It would be really helpful if you could give some pointers on how I can approach this issue.
    Thanks
    Vin

    Hi
    Please check, if the report   DPR_GET_ALL_PROJECT_ROLES available in your system or not, it is delivered by a hotpackage.
    Otherwise, you can use the selections direct of the tables, briefly it should be like following.
    dpr_project : get the guid of the project
    cgpl_hierarchy.  using project = guid, object_type = MTG, you get all roles of the project.
    dpr_part : details about the roles.
    dpr_bupa_link: assigned business part guid.
    KInd regards,
    Zhenbo

  • Allocating multiple accounts on a resource through multiple roles

    Is there anyway for IdM to cater for the following scenario
    Role 1 -> Allocates accounts on Resources A & B
    Role 2-> Allocates accounts on Resources A & C
    Such that when a User is given both Roles, their account list is
    (1st) account on A, account on B, (2nd) account on A, account on C
    rather than the aggregate of (1 only) Account on A,account on B, account on C.
    And if, say, Role 1 is revoked for the account on Resource A as provisioned by Role 1 is the only account to be revoked on the resource allowing the 2nd account on Resource A (as provisioned through the still active Role 2) to still be managed
    Thanks
    --Calum                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           

    Yes, it should be possible, but messy.
    The easiest way would be to create separate resources for the roles. So you'd have two configured resources for the same target, and the roles would assign the separate resources. You'd have to make sure that the target resources account names are different because usually they are required to be unique.

  • Problem while assigning multiple staffing to project role.

    Dear All,
    I am facing problem while assigning multiple staffing to project role.
    In the project role, we are doing staffing ( assigning BP). While assigning the BP's getting below errors.
    Resource assignments overlap
    Message no. DPR_BUPA_LINK004
    Diagnosis
    The validity period '10.02.2008'-'01.03.2008' for the assignment of project role Product Manager and ' Rakesh Pradhan' overlaps with the validity period of the assignment ''.
    However, the project role type does not allow several staffings to be edited at the same time in the project role.
    System Response
    The system does not allow this constellation of data when saving.
    Procedure
    Check and correct the start and finish dates of the staffings affected.
    Request you to advise in fiixng the issue.
    Thank you for your cooperation.
    Regards,
    Ranjan

    Hi Biplab,
    For multiple staffings in the same time frame, check the option of 'Edit in Parallel' in the Role Type settings in SPRO.
    Let me know if that helps.
    Regards,
    Vivek Pandey

  • Unable to Modify Resource Notes and Roles Responsibility in 8.2

    hi there
    I am unable Unable to Mopendify Resource Notes and Roles Responsibility in 8.2. Whenever i click modify it just open new window with some option of font and other on top ribbon but in the main pane i am not able to write down any thing
    any suggestion

    Did you go to the Resources page itself?
    Try going to resources page from Enterprise-Resources and then select the resource then Modify, subsequently in the window opened you should be able to enter the text. It should work it because am also using V8.2 itself.

  • OES MAPI problem of "Assigning Principals to an Administration Role"

    Hi,
    I meet the problem of programmatically Assigning Principals to an Administration Role using Oracle Entitlement Server Management API. I can successfully run the sample code following the <Developer Guide>, Chapter 5.4.3 Assigning Principals to an Administration Role
    My code snippet is like this:
    List<PrincipalEntry> principals = new ArrayList<PrincipalEntry>();
         principals.add(new BasicPrincipalEntry
           ("weblogic.security.principal.WLSUserImpl", "Lisa"));
         //Grant the users in the list the role
         admManager.grantAdminRole(adminRole, principals);
    And no error or exception occurs in java app side or oes_admin side. But when login to http://vmware.localdomain:7001/apm admin GUI, I could not login with Lisa.
    I also tried manually assign app1 with delegated admin role, and then Lisa can successfully login to admin GUI.
    Then I run the app program to programmatically assign app2 with delegated admin role to Lisa. Login with Lisa could not see app2.
    I have checked the system admin "weblogic" login to admin GUI and it can see that app2 already have Lisa listed on the external user of delegated admin of app2.
    I even checked the DEV_APM.JPS_CHANGELOG in the oracle database schema for oes. I can see the changelog of java app assiging operation.
    Can anyone tell me the reason why programmatically assign user to an delegated admin not work correct? Is there some mistake steps in my java app code or there is a bug in OES product?
    I use the OES 11.1.1.5 version with Oracle Database 11.2.0, Weblogic 10.3.5 on Oracle Enterprise Linux 6 32bit.
    Thanks very much.

    Thanks very much for all the reply posts. With the suggestions from yours, I tried distribute the policy and finally it works!
    The code snippet is from 4-8 Using the distributePolicy() Method  , listed below:
    //get the PolicyDistributionManager
    PolicyDistributionManager pdm =
      app.getPolicyDistributionManager();
    //distribute policies
    String distID = pdm.distributePolicy(true);
    DistributionStatusEntry status = pdm.getDistributionStatus(distID);
    System.out.println("Start distribute policy");
    while (status.getPercentComplete() != 100) {
      Thread.currentThread().sleep(200);
      System.out.print(".");
      status = pdm.getDistributionStatus(distID);
    System.out.println("Finish distribute policy");
    There is another trick that I discovered from DEV_APM.JPS_CHANGEBLOG:
    If this is the first time that user be assigned as a delegated admin, you should also grant user with applicaionRole "APMViewer" to the application "oracle.security.apm"
    You can refer to the sample code from 2-9 Assigning Principals to an Application Role  , also listed below:
    ApplicationPolicy app = ps.getApplicationPolicy("oracle.security.apm");
    AppRoleManager roleMgr = app.getAppRoleManager();
    //Construct the list of users to be granted
    List<PrincipalEntry> principals = new ArrayList<PrincipalEntry>();
    principals.add(new BasicPrincipalEntry
      ("weblogic.security.principal.WLSUserImpl", "Nick"));
    //Grant the users in the list the role
    //admManager.grantAdminRole(adminRole, principals);
    AppRoleEntry appviewerRole = roleMgr.getAppRole("APMViewer");
    roleMgr.grantAppRole(appviewerRole, principals);

  • OBIEE 11g issue - same user assigned to the multiple application role

    Hi All,
    We are facing an issue when assigning a user to the multiple application role and applying the data level filter on the different column of the same table.
    For example, we have a table Department with three columns Department No, Department name, Department location.
    Application Role A1 and A2 are created.
    Data Level security Applied on the application role A1: Department Name='Finance'
    Data Level Security Applied on the application role A2: Department location='US'
    The user "User1" is created in LDAP and is assigned to both the Application roles A1 and A2.
    When logged in with "User1", none of the filters of Role A1 or A2 is applied in the report. If this user is assigned to only one role, either A1 or A2, then the filter is applied. It seems the filter will not be applied if a user belongs to multiple roles with data filter applied on the same table across these roles.
    Please reply if anyone has faced similar issue.

    Hi All,
    Regarding the above issue to update the analysis we came up that the user if assigned to the multiple group with the data filter applied on the same column of the table is getting an *"OR"* join.
    We had a requirement to get an "AND" in the query condition. Please let us know if any one faced the issue and the resolution of the same.
    Regards,
    Jyotshna

  • How to assign possible agents at security role / CAG level?

    Hi Experts, How to assign possible agents at security role / CAG level?

    Yes, that's exactly what I'm talking about. In your task maintenance, goto additional data -> agent assignment -> Maintain
    Click on th task, click on the assign button. Choose object type 'Role', enter role.
    Cheers,
    Mike

  • Which authorizations are required for assigning a query to a role?

    Hi everybody,
    we try to set up some roles for "reporting power users". These guys should be alble to define new queries using BEx (works fine) and also should be able to assign these new defined queries to a role, so other users can use these roles.
    The idea is simple, but we're searching for the right authorization object (or - as i suppose - set of authorization objects) that enables the user to assign a query to a role (using that "enter to a role" button in the open / save dialog).
    At the moment, the user can user that button, and the role, he should the query assigned to is shown. After selecting the role and clicking button "create" it take some seconds and a message "error when saving. entry has not been created" is shown.
    Obviously, there is a problem with writing the role (or adding the new information to that role).
    So, could anyone help me and provide me with a list of authorization objects that are required.
    Thanks in advance,
      Alfred

    S_RFC
    S_TCODE
    S_USER_GRP
    S_BDS_D
    S_OD_SEND
    S_RS_AUTH
    S_RS_BCS
    S_RS_COMP
    S_RS_COMP1
    S_RS_FOLD
    S_RS_ICUBE
    S_RS_MPRO
    The above mentioned authorization objects are enough to add in the role and required for the accessing a query.
    particularly, S_RS_COMP, S_RS_COMP1, S_RS_MPRO, S_RS_ICUBE are the most important auth objects which are directly getting involved in authorization of a query in a role.
    SO, you have to assign the respective info area, info cube and info providers names in these auth objects.
    The same scenario , i am using in my project to give access to the queries in all the areas for my end users.
    The values and access/authorizations restrictions is up to your project requirement.
    Hope this would help you.

  • Assigning Group(of users)  to Role when starting a process programmatically

    Hi All,
    I m starting a process programmatically(using startProcess()).
    Process initiation is working fine, but i need to assign a 'Group' to the role, and not a user. It is a portal group, available at portal end only. How can this be done?
    Please guide.
    Thanks and Regards,
    Sakshi

    you can use the following code
    import com.sap.caf.eu.gp.process.api.GPProcessFactory;
    import com.sap.caf.eu.gp.process.api.IGPProcess;
    import com.sap.caf.eu.gp.process.rt.api.IGPProcessRoleInstanceList;
    import com.sap.caf.eu.gp.process.rt.api.IGPRuntimeManager;
    import com.sap.security.api.IUser;
    public void startProcess( java.lang.String processId )
       // retrieve the Runtime Manager
       IGPRuntimeManager rtm = GPProcessFactory.getRuntimeManager();
       // create an empty role assignment list
       IGPProcessRoleInstanceList roles = rtm.createProcessRoleInstanceList();
       // get the process role number
       int rolenum = process.getRoleInfoCount();
       // iterate over the required roles
       for (int i = 0; i < rolenum; i++) {
          // create a new role instance by specifying the role's unique name
          IGPProcessRoleInstance roleInstance = roles. createProcessRoleInstance(process.getRoleInfo(i).getRoleName());
          // add a user to the role instance
          roleInstance.addUser(roleUser);
          // add the new role to the assignment list
          roles.addProcessRoleInstance(roleInstance);    
    Thanks and Regards
    shanto aloor

  • The security-role-assignment references an invalid security-role: Certifica

    In Oracle Enterprise Pack for Eclipse, I failed to deploy an application in debug mode. The error I noticed in my domain log is:
    weblogic.management.DeploymentException: [HTTP:101168]The security-role-assignment references an invalid security-role: Certificate.
         at weblogic.servlet.security.internal.WebAppSecurity.setRoleMapping(WebAppSecurity.java:180)
         at weblogic.servlet.security.internal.WebAppSecurity.registerSecurityRoles(WebAppSecurity.java:155)
         at weblogic.servlet.internal.WebAppServletContext.prepareFromDescriptors(WebAppServletContext.java:1181)
         at weblogic.servlet.internal.WebAppServletContext.prepare(WebAppServletContext.java:1120)
         at weblogic.servlet.internal.HttpServer.doPostContextInit(HttpServer.java:449)
         at weblogic.servlet.internal.HttpServer.loadWebApp(HttpServer.java:424)
         at weblogic.servlet.internal.WebAppModule.registerWebApp(WebAppModule.java:910)
         at weblogic.servlet.internal.WebAppModule.prepare(WebAppModule.java:364)
         at weblogic.application.internal.flow.ScopedModuleDriver.prepare(ScopedModuleDriver.java:176)
         at weblogic.application.internal.flow.ModuleListenerInvoker.prepare(ModuleListenerInvoker.java:93)
         at weblogic.application.internal.flow.DeploymentCallbackFlow$1.next(DeploymentCallbackFlow.java:387)
         at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:37)
         at weblogic.application.internal.flow.DeploymentCallbackFlow.prepare(DeploymentCallbackFlow.java:58)
         at weblogic.application.internal.flow.DeploymentCallbackFlow.prepare(DeploymentCallbackFlow.java:42)
         at weblogic.application.internal.BaseDeployment$1.next(BaseDeployment.java:615)
         at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:37)
         at weblogic.application.internal.BaseDeployment.prepare(BaseDeployment.java:191)
         at weblogic.application.internal.EarDeployment.prepare(EarDeployment.java:16)
         at weblogic.application.internal.DeploymentStateChecker.prepare(DeploymentStateChecker.java:155)
         at weblogic.deploy.internal.targetserver.AppContainerInvoker.prepare(AppContainerInvoker.java:60)
         at weblogic.deploy.internal.targetserver.operations.ActivateOperation.createAndPrepareContainer(ActivateOperation.java:197)
         at weblogic.deploy.internal.targetserver.operations.ActivateOperation.doPrepare(ActivateOperation.java:89)
         at weblogic.deploy.internal.targetserver.operations.AbstractOperation.prepare(AbstractOperation.java:217)
         at weblogic.deploy.internal.targetserver.DeploymentManager.handleDeploymentPrepare(DeploymentManager.java:723)
         at weblogic.deploy.internal.targetserver.DeploymentManager.prepareDeploymentList(DeploymentManager.java:1190)
         at weblogic.deploy.internal.targetserver.DeploymentManager.handlePrepare(DeploymentManager.java:248)
         at weblogic.deploy.internal.targetserver.DeploymentServiceDispatcher.prepare(DeploymentServiceDispatcher.java:159)
         at weblogic.deploy.service.internal.targetserver.DeploymentReceiverCallbackDeliverer.doPrepareCallback(DeploymentReceiverCallbackDeliverer.java:157)
         at weblogic.deploy.service.internal.targetserver.DeploymentReceiverCallbackDeliverer.access$000(DeploymentReceiverCallbackDeliverer.java:12)
         at weblogic.deploy.service.internal.targetserver.DeploymentReceiverCallbackDeliverer$1.run(DeploymentReceiverCallbackDeliverer.java:45)
         at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:516)
         at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
         at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
    What I do not understand is that this error remains even though I modified weblogic.xml to remove the following lines:
    <wls:security-role-assignment>
    <wls:role-name>Certificate</wls:role-name>
    <wls:externally-defined/>
    </wls:security-role-assignment>
    I also deleted <MYDOMAIN_HOME>/servers/AdminServer/cache and <MYDOMAIN_HOME>/servers/AdminServer/tmp but this error still showed up when I attempted to deploy the application in Eclipse.
    If I exported the EAR file and deployed it using Admin Console, the application was deployed successfully. But when I deleted it in Admin Console and attempted to deploy it in Eclipse again, the same error occurred and the deployment failed. What could be the reason for this behavior? Is there anything cached somewhere when deploying it in Eclipse? Thanks in advance for your help.

    Hi,
    I know that is an old thread, but just in case... Maybe you could try setting up the DEBUG_OPTIONS in your startManagedWeblogic script and configure a remote debug in Eclipse:
    DEBUG_OPTIONS="-Xdebug -Xnoagent -Xrunjdwp:transport=dt_socket,address=8003,server=y,suspend=n"
    Hope it helps,
    Luis

  • How to assign container resource to routing

    Hi,
    We have three container resources representing 3 storage tanks with capacity in kilograms. I am not able to assign the storage resources to routing. We are using discrete routing.
    Please help.
    Thanks,
    Andy

    Hi andrew3,
    Container resource functionality is available only in PP-PI manufacturing and not in Discrete manufacturing, because of which you are not able to assign this resources in routings
    Thanks and regards
    Sravan maturu

  • Context based assignment - context filter to display roles

    Hi!!
    I would like to make a guided task with a context named SYSTEM that contains values such as SAP ECC / SAP BW... and once the user selects the system (s) he wants (step 1), the appropriate roles (corresponding to the value of the context SYSTEM) display in step 2.
    I assign the MX_CTX_TYPE to the roles. Roles having context type SYSTEM were well display. Then I add the MX_CTX_CONDITIONAL (by modifying the attr to allow assignment to MX_ROLE entrytype) to the same roles. But it seems that the filter is made at contexte type level and not value context level.
    1 : Do you think if it's possible to use context value as filter for displaying roles in step 2?
    2 : Do you know a way to filter on system for displaying roles in order to assign them to a user even if it's not a guided task? I tried to use the FIELD functionnality but it seems that it's not allow with the attribute type of MX_ASSIGNMENT.
    Thanks,
    Guillaume

    Also suggest that you have a look at the MX_ASSIGNMENT attribute on the user, for use in the WebUI. This attribute will allow you to see both role and privilege assignments in a WebUI task. This also has the "context" setting as you mentioned.
    Regards
    John Erik Setsaas
    Development Architect IdM

  • Assigning a workbook to the role

    Hi Gurus,
    We are using NW2004s and are in front end patch 12.
    We have created a workbook role to assign all our workbooks, however Iam unable to find an option to assign these workbooks to the role. In earlier versions (3.x) there was a role icon in Bex Analyzer which we use to use to assign the workbooks, Iam not seeing this icon anymore in BI7. Can someone quide on how to assign this.
    Thanks!

    I can see publish query To Role, To Portal & BEx broadcaster, this will publish my query. My need is to publish or assign workbook to a role. When you log in through Bex Analyzer, you have two options 1). Open Query, 2). Open workbook., If you choose Open workbook, you can see all workbooks created. I would like to assign these workbooks to a role. Otherwise these workbooks will be saved in the favourites and no one else can view this other then me.

  • IIS - assigning a userid to a role

    When we use IIS as HTTP proxy we can retrieve the complete correct
    userid. Is it possible to assign this userid to a role in the filerealm
    without having to define a password for it. This way we can assign the
    correct role for that user without the need for prompting for a
    password. (If we use NTRealm we also have a problem, we can't have
    several Windows Primary Domain Controllers in 1 cashinf realm).
    Regards,
    Merg

    I can see publish query To Role, To Portal & BEx broadcaster, this will publish my query. My need is to publish or assign workbook to a role. When you log in through Bex Analyzer, you have two options 1). Open Query, 2). Open workbook., If you choose Open workbook, you can see all workbooks created. I would like to assign these workbooks to a role. Otherwise these workbooks will be saved in the favourites and no one else can view this other then me.

Maybe you are looking for

  • How to pass variable in a function

    I would like to ask how to pass the value "char" into the "onSoundComplete" function? many thanks! many thanks! _root.playVO = function(pageNum, char){ var myVO:Sound = new Sound(); myVO.loadSound("vo/vo" + pageNum + ".mp3", true); _root.myVO.onSound

  • HT4528 How do I erase contacts in a bulk without deleting all my contacts?

    I need help trying to delete contacts in a bulk without deleting all my contacts.

  • Meet the Agents

     The members of the Verizon Technical Support Blog's team are part of an elite group of technicians whose goal is not only to ensure that all our customer's issues and questions are addressed, but to educate our customers on the best ways to take adv

  • How to make a subform expand AND contract?

    Newbie here. Maybe I'm approaching this from the wrong direction. Hopefully someone can provide me with the proper method. I have created a series of subforms which I'd like to initially display as hidden with only a "header/button" visible for each

  • How to undo typing errors on an iPad?

    How do I undo typing errors on my iPad without deleting backwards through several words? Jean