Assigning Mobile Group to a User

I plan to use the <i>Mobile Group</i> filter for a SyncBO, to avoid too large data volumes on clients - BUT I find it very hard to administer through MEREP_PD and impossible to assign a user to a mobile group in advance of application deployment.
We are dealing with approx. 30 users and they should be allocated to 6 different Mobile Groups. Is there a way to allocate Users to Mobile Groups in advance of application deployment ?
Thanks.
Lars

after creating user in OID (which creates a user for portal also) You shold run the procedure in the portal schema:
PROCEDURE setdefgroup (
p_username varchar2,
p_groupname varchar2) IS
v_group_id number;
BEGIN
v_group_id := WWSEC_API.GROUP_ID
(p_name => upper(p_groupname));
wwsec_api.set_defaultgroup
(p_groupid => v_group_id,
p_username => upper(p_username));
END;
to asign the default group to a user.

Similar Messages

Assigning Material Group per User

Hi SAP Experts! =)
Pls Help! does anybody have an idea how can I assign a Material Group per User. This is for authorization purposes. What I just know, is to Assign just one Material Group per user through Parameter ID MKL. This will only solve my problem if a User will only have access for a Single Material Group.
Do you know a way how to Assign access for Multiple Material Groups? I would want to use this for the PR/PO process, so a User will only purchase Materials under his/her assigned Material Groups. =)
Mik

HI,
Usually we give a star symbol for the authorisation object of material groups means the user is authorised for all the material groups.
In case if you want to give multiple material groups for the user then we have to specify the material groups instaed of the star symbol.
You can check the users authorisaion against the user ID in tcode SUIM.(Users with complex selection)
Thanks & Regards,
Kiran

Assigning authorization group to users or roles.

Hi
How do I assign authorization group I created for ECM digital signature approval to users

Hi,
Provide the authorization group and the role details to which it needs to be linked to your basis team and they should be able to do this for you.
Regards
Sreekanth

Can we overcome the limited # of users in mobile groups?

Why is 10 contacts the limit in a given mobile group?
For crying out loud, I have more than 10 friends and family members!
Databases have LONG had the ability to have nearly an endless number of recors, so why is this so chintzy?

When editing my contacts online at Verizon I am able to add people to mobile groups.
However I am not able to add more than 10 contacts to a group. I receive an error that tells me I must delete someone from the group in order to add a new person.
There are only 10 persons in the group Family.
And then again I have been able to add more than 10 persons to a single group when there were no persons in any other group.
I have not been able to find the details relevant to editing contacts in backup assistant plus.
Later this evening I'm going to try and editing the contacts on the phone to see if the updates from the phone to the website will add all the persons I want to the groups I want.
I'll post the results later and let you know.

Wireless 5508 WLC's in a Mobility Group

All,
Scenario: Would like redundancy on 2 x 5508's but unable to utilise HA (SSO) due to internal WLC DHCP requirements.
Mobility groups - Can 2 controllers in the same mobility group share a DHCP scope? I.E overlapping addresses or would the scope need to be split across controllers?
If scopes are slit hat happens to DHCP requests once the primary DHCP server has allocated all leases? Also what happens if a clients joined controller A receives valid IP address then controller A goes off line? AP's re-establish with controller B but client has invalid scope IP?
Cheers,
Jay

Hi,
Actually in the Mobility Group you enable the user to move form one WLC APs coverage to other WLC APs coverage with same client IP configuration.. so if we make groups then obviously we should make different DHCP scope to avoid network address range exhausted.
As far as controller A is up, IP configuration on wireless client would be remain same, but if your controller A goes off then the client will acquire the new IP from different DHCP scope which is assigned to controller B.

Error while assigning an application to a user

Hi All,
I am new to Oracle Database Lite. I have created a new user and i want to assign a Sample application which comes while installing the mobile server. But while assigning the Sample application to a user through the application page, i got "ERROR: VIRTUAL PATH IS NULL" and when i wanted to assign the Sample application to a user through the user page, i got "Error in executing " Save application ":oracle.lite.web.resource.ResourceException: CONS-10050: Rollback failure: java.sql.SQLException: Io exception: Connection reset by peer: socket write error "
So can any one help me how to resolve this error so that i can assign the application to a user?
Any help is welcomed.
Shrikant

Thanks Scott. I've also been looking for a pattern of consistency that would point to the cause of the problem but have been unable to find one. I was hoping that others may have experienced the same error and could help to shed some light here.
I dug around some and found that the wwv_flows_alias_idx constraint is a unique index on the alias and security_group_id columns of wwv_flows. My application has an alias that is the same for all installations so I thought that somehow a previously used value for security_group_id was being generated causing the unique constraint violation. Can you tell me how that value is generated during the install process? Is it some sort of hashing function?
Thanks

Get all Groups for current user

Hi I try to get all groups for the current logged on user. This is what I do:
First I try to search with the IGruopSearchFilter to obtain all unique Group IDs. I always get an proxy error by doing this, maybe the query is to much.
Then I want to use the method group.isUserMember(user.getUniqueID() to check whether the user is a member of that group or not.
Is there a better way to obtain all groups for a user (without using a query IGroupSearchFilter)?
Thanks ahead for your help.
Burkhardt

Burkhadrt,
have you tried this?
https://media.sdn.sap.com/javadocs/preNW04/SP2/60_sp2_javadocs/ume/com/sap/security/api/IUser.html#getParentGroups(boolean)
This should give you an iterator for all groups the given user is assigned to.
Hope it helps... and if so:
if (helpful) {
points++
Regards,
Dominik

Assigning human task to a user not exist in the ldap - actionable task by email address

Hello experts,
we have a requirement to assign a task to an external user (not exist in the ldap) to perform some action by allowing the system to send an actionable email.
Internal user will capture the external-user name & emailaddress in the task form. System should use this information and assign the task to the user by sending an actionable email. Our requirement is, these external users should not have access to bpm workspace, so we can not store the user information within the system.
Currently I have tried assign the task to an internal user (users configured in weblogic) and system sends out an actionable email and able to set the outcome of the task by replying to the email.
How can the same be achieved, without the user being in our system? Is it possible? I am OK to create a temporary user before assigning the task, but will be there be any impact if I delete the user after the task has been completed?

AnilB,
Assigning a task to a user that is not in the directory will likely result in the BPM flow going into suspended state. To avoid this, assign the task to a pre-created group, you should not get an error even if the group is empty. You can then add and remove the users to that group to control access to the task.
Phil

Not able to add groups to the user ODSEE via OIM 11g R2

Hi,
I have created some groups in ODSEE and ran the recon job to sync these groups in OIM 11g R2.
Groups are populated in OIM 11g R2 and while raising the request for ODSEE Application Instance I can see these groups.
Now following are the issues I am facing :
1. ODSEE groups are not getting displayed in Catalog ( I have ran the Entittlement-List job also)
2. When I request for a group while creating the request, the group is not getting assigned to the user in ODSEE, wherein user is getting created in ODSEE successfully.
Please help.
Thanks

Please let me know what could be the reason of not adding the groups to the user in ODSEE.
I was able to add the groups successfully to user by assigning the groups while raising the request in OIM 11g R1.
But the same is not working in OIM 11g R2, if I check the OIM logs it is calling the function ADDUSERTOGROUP but the groups are not getting assigned to user.
Thanks

Move a query to from one user group to another user group

Hi,
it's possible to move a query (SQ01) from one user group to another user group ??
Thank you.

Hi,
You can copy queries only if you have the authorization to make changes. Within your current user group, you can copy all queries. However, queries of other user groups can only be copied if the InfoSet used to define the query is assigned to both user groups.
To copy a query, proceed as follows:
1. Choose the name of the query you want to copy on the initial screen.
If you do not know the name, use the directory functions to display the query directories and then choose a query to copy from there.
2. Choose Copy.
3. Enter the name and the user group of the query that you want to copy in the dialog box. Furthermore, you must enter a name for the copied query. The system proposes values for this.
4. Choose Continue.
This takes you to the initial screen. The query is added and appears in the query directory. You can now continue.
Regards,
Amit

Unable to see Active Directory Groups in the User Profile Database after Profile Import

***Major Update - I have finally been able to get the direct attention of the folks responsible for the User Profile Service on the SharePoint Product Team. Long story short, they have reproduced the error and identified as an actual mistake
that needs to be fixed, so it is now officially in the bug pipeline and will be fixed. The current estimate is some time in the summer. They will keep me updated with timeframes, which I am allowed to share as time goes on.
SharePoint Server 2010 Enterprise RTM. W2K8R2 w/multi-server setup:
AD/DNS
SQL 2008
WFE
APP
Claims Mode Web App only using Windows Integrated Auth
So, this was never a problem in 2007, and I didn't even realize it was a problem in 2010 until I started to build a solution that utilized my blog article:
InfoPath - User Roles in Browser-Enabled Forms Using AD Groups. I went to utilize the same web method of the same web service, but I noticed that no data was showing up at all. Typically,
the GetUserMembership/GetCommonMembership methods return the specified user's memberships: AD Security Groups, AD Distribution Lists, and SharePoint Sites (not SharePoint Groups, though).
My user profile sync is working. All AD users are pulled in with the proper profile data.
"Users and Groups" is selected in the Synchronization Entities section of my Sync Settings.
Security groups are working for permissions and audience targeting. Confirmed my users are affected properly by the use of Security Groups.
My query to the GetUserMemberships web method (and GetCommonMemberships) is running (not failing), but it's not returning anything even though my user is in some Security Groups and has explicit membership to multiple sites.
The GetUserProfileByName method of the same UserProfileService.asmx web service
returns all the regular profile data like expected, so the web service works and my profile database is populated
Basically, I'm not seeing my AD groups or any membership data populated in the profile database. I did use MIISCLIENT.exe to see what I could find, and here is what I saw:
Using the Metaverse Search, I searched for the "person" type and saw all of the users in my profile sync connection (single OU)
Using the same tool, I searched for the "group" type and saw nothing, but the message said 4 items were retrieved
I realized that the only column showing was displayName, and they were blank, so I added other columns to be sure
objectGUID, objectType, distinguishedName all showed values, and I could now see all the Security Groups from the OU where I'm doing my profile sync
My "person" objects all have displayNames showing but none of the groups do. In SharePoint, the GetUserMemberships method relies on displayName and accountName, but neither are coming through the profile import
So, it does seem like the groups are coming in with the profile import, but I can't see them. I also can't verify that the groups are being associated with my users in the profile database, because doing a query to the membership methods returns nothing...not
even blank rows.
***Edit: New information! Regular AD Distribution Lists _do_ work properly. I just never bothered testing them until folks on my blog notified me. DLs come through the profile sync, are visible in the profile database, and show up
when using the GetUserMemberships method.
***Edit: Ok, now we're getting somewhere. I checked my last profile sync with the MIISCLIENT, and this is what I found:
Here are the properties of my Distribution List:
Here are the properties of my Security Group:
Notice that the groupType value of the DL is a normal integer (2), but the groupType value of the SG is some crazy negative number. Both types are still lacking DisplayNames for some reason, but when I retrieve the DL via GetUserMemberships, it DOES
show the proper DisplayName despite nothing showing in the MIISCLIENT.
SharePoint Architect || Microsoft MVP ||
My Blog

Hello Clayton,
I have same problem with SP 2010 and now I am testing SP 2013 and seems that the problem still.aa
Probably I have some configuration problem, but all seems work, except this.
SharePoint 2013 has no improvements on this. Until seeing this thread, I thought it was an issue within my farm configuration or AD Service account for User Profile Sync. And I've dug far and wide for any other possible settings which would prevent users
from populating in the site people-picker. This might be flagged as off-topic, but I'll beg differ. How can I expect SharePoint to retrieve AD Users and Groups for accuracy in the sites which rely on this server??? Frustrating. I've spent hours and days on
this! I have 3 SP2013 farms with multiple clients (different OU's/containers and security groups). Testing in a separate QA DEV farm with the same config. NO luck yet!
This is where I'm at with it (posted this as a question recently on SharePoint Stack Exchange):
"Help.... Please.... Users from AD groups are not populating in the site people picker. I've set up a SharePoint 2013 site collection permissions group with only AD groups in it, no users added directly. Whether or not I give this SharePoint group permissions
to the site content, I still get none of the AD users showing up in the people picker. I have done the iisreset after adding the groups.
I've checked all of the people picker properties in stsadm to be sure there are no constraints in effect on the web app or site collections. User profiles are synching and I've tried both AD import and User Profile Sync. The AD groups are security
groups, though not email-enabled. The AD service account has all the special permissions. My web app is claims based. My app pool runs with Network Service account. No policies in place to restrict users, checked CA and the site collection settings.
What am I missing? I've read in multiple places that this is a supported/working config. So why can't I get these users to populate in people picker for things like Assigned To in a tasks list, or attendees of an event? "
There is some pretty good insight here, but no real hope:
User profile
synchronization: importing users and security groups in SharePoint 2010
Other Properties that I checked, before realizing this was an issue with the Profile Import...
stsadm -o getproperty -pn siteuseraccountdirectorypath -url https://URL
stsadm -o getproperty -propertyname peoplepicker-activedirectorysearchtimeout -url https://URL
stsadm -o getproperty -propertyname peoplepicker-distributionlistsearchdomains -url https://URL
stsadm -o getproperty -propertyname peoplepicker-nowindowsaccountsfornonwindowsauthenticationmode -url https://URL
stsadm -o getproperty -propertyname peoplepicker-onlysearchwithinsitecollection -url https://URL
stsadm -o getproperty -propertyname peoplepicker-searchadcustomfilter -url https://URL
stsadm -o getproperty -propertyname peoplepicker-searchadcustomquery -url https://URL
stsadm -o getproperty -propertyname peoplepicker-searchadforests -url https://URL
stsadm -o getproperty -propertyname peoplepicker-serviceaccountdirectorypaths -url https://URL
Hope we find a better answer, as it IS very misleading. User Profile Import specifies Users, or Users and Groups. Nothing is said about Containers or Distribution Groups, worse yet there lacks any clear disclosure about how "Groups" will not
actually import if they are a Global Security Group and the users contained within them exclusively will NOT be included in your profiles,
nor in any compiled Audiences. Which was another BIG bummer!
I'm hoping to see future improvements on the Group imports.

WLC 5508 * 2 & Mobility Group

What I am trying to configure is Mobility Groups.
My understanding is that this will allow AP to successfully register and fail over over seamlessly if any of the WLC had to fail ?
It could be I am confusing two things into one :( & I am totally confused and not understanding the benefits of mobility group mentioned above.
Also when a AP starts up and registers with the WLC ......I click on a registered AP > High Availability ( Primary / Sec / Tertiary ) all fields are blank...
Initially I also thought that once my SSO is all setup and working than those options "AP > High Availability" will get populated automatically but clearly not unless something is not working.
My current config is as follows:-
WLC 5508 * 2
WLC 1 - Primary
WLC 2 - HA SKU (Secondary )
Redundancy = SSO (Both AP and Client SSO)
=============
(Cisco Controller) >show sysinfo
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.6.130.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.101.1
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS
System Name...................................... WLC5508
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
Redundancy Mode.................................. SSO (Both AP and Client SSO)
IP Address....................................... 10.31.66.21
Last Reset....................................... Software reset
System Up Time................................... 0 days 22 hrs 39 mins 57 secs
System Timezone Location......................... (GMT) London, Lisbon, Dublin, Edinburgh
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180
Configured Country............................... GB - United Kingdom
Operating Environment............................ Commercial (0 to 40 C)
--More-- or (q)uit
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +38 C
External Temperature............................. +21 C
Fan Status....................................... OK
State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1
Number of Active Clients......................... 0
Burned-in MAC Address............................ F8:72:EA:EE:5B:B2
Power Supply 1................................... Present, OK
Power Supply 2................................... Absent
Maximum number of APs supported.................. 500
============================================
TA

TA,
Mobility and mobility groups are used for the wireless users roaming. What we know that a wireless users can roam between different APs within the same WLC, but when the SSID is used within multiple WLCs, and the client wanted to roam to an AP joined to another WLC, you would need to configure WLC mobility to maintain seamless roaming. For more info:
http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_010001101.html
Now, I understand that your purpose is to have high availability for your APs. No this is done traditionally from the AP page, under HA tab, where you configure the WLCs names and IPs there. This can be done manually on each AP (you can use CLI to make it easier) or you can push a configuration template using a management server (WCS/NCS/CPI).
Configuring HA on the AP:
http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_01110000.html
http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_01110001.html
Using CPI to push AP configuration templates:
http://www.cisco.com/c/en/us/td/docs/wireless/prime_infrastructure/2-0/configuration/guide/pi_20_cg/temp.html
Now mobility may play a role in this, as if you have already configured mobility for your WLCs, then you won't need to configure a "name" for the WLCs when you add them under the HA tab in AP configuration page. That's it.
BR, Ala

Tollerence group for multiple user

hii all
can any one tell me how shall i assign multiple tollerence group to multiple user? and also tell me, while creating tollerence group am i have to give the tollerence group with co code? or just only co code?? please solve
regards rajesh Kr Mahato

Hi,
'assign multiple tollerence group to multiple user'-it's not possible,in table V_T043 the key is USNAM
'while creating tollerence group am i have to give the tollerence group with co code? or just only co code??'-I don't understand. In table V_T043T you need to put CC and Tol.group

What will happen when I remove controllers from mobility groups?

Hi,
I'm wondering what exactly will happen when I remove a controller from a mobility group?
1) Will it require a reboot? (I don't think so, nothing I've found says so)
2) Will it deauth/reauth the AP's connected (I don't think so, nothing I've found says so)
3) Will it do anything else goofy?
I have 2 RF groups spanning continents over low speed links. All that is transmitted over mobility groups is session data correct? Not usernames, not ??? What am I missing here? I'm banging my head against the wall because I can't figure out why someone would configure the system in this way.
Setup:
WLC 4404, WLC 2100's
WCS 5.2.148
11xx series AP's
Radius Auth for domain users
a few SSID's, one guest SSID, no DHCP on any of the controllers
Thanks in advance,

Hi,
I'm wondering what exactly will happen when I remove a controller from a mobility group?
1) Will it require a reboot? (I don't think so, nothing I've found says so)
2) Will it deauth/reauth the AP's connected (I don't think so, nothing I've found says so)
3) Will it do anything else goofy?
I have 2 RF groups spanning continents over low speed links. All that is transmitted over mobility groups is session data correct? Not usernames, not ??? What am I missing here? I'm banging my head against the wall because I can't figure out why someone would configure the system in this way.
Setup:
WLC 4404, WLC 2100's
WCS 5.2.148
11xx series AP's
Radius Auth for domain users
a few SSID's, one guest SSID, no DHCP on any of the controllers
Thanks in advance,

Portal: Tab displayed but not assigned to any roles of user

HI Experts,
I have a problem need your great help.
When I logon portal as a specific user, there are 5 tab in home page. When I check the role list, 3 tabs doesn't assigned to any roles this user owned.
Then I try to copy current user into a new user, and logon in . There are only 2 tabs left, which belonged to assigned role.
How those 3 tab assigned into this user? Can we assign iView/Page/Workset directly to user without role?
Any suggestion appreciate. Thanks so much!
Edited by: Jalyn Liang on Nov 13, 2009 9:29 AM
Edited by: Jalyn Liang on Nov 13, 2009 9:30 AM

Jalyn Liang ,
You can find if the user id belong to a particular group with the following ways,
Log in as an admin and go to User Admin -> Users- > Seach -> Enter the user Id and serach for the user -> Select the 5th icon with the tool tip ->Assigned Groups"
or
User Admin -> Group -> Search for the group.
or
You can use UME API to find out whether the is belowng to a group though coding.
Ram

Assigning Mobile Group to a User

Similar Messages

Maybe you are looking for