Assigning Protal Roles/ Groups with a vaildity date?

Hi Experts,
I am trying to find a way by which I can assign the roles / groups to a user in Portal system with a validity date.
Please comment.
Thanks, Vishwas

Directly in the way you are expecting it will not work.
However there is a report you can schedule called prgn_compress_times which removes duplicate and obsolete assignments of roles. This will then also remove the UME group assignment if the portal used ABAP as UME.
However you cannot use it if the CUA is active!
Cheers,
Julius

Similar Messages

VLAN assignement per user group with WDS

I have configured an EAP-TLS wlan. I have configured the radius server to assign a vlan to the user depending of the user group.
In this way I avoid that an user with a valid certificate that discover another SSID can change the VLAN changing his SSID (so I control what vlan connects every user)
But when I have configured WDS in the wlan it stops to work. Because (I suppose) when the user reauthenticates (not the firt time) the WDS don't ask the radius server (it uses his cache) so it doesn't use the radius configuration and applies the vlan deppending of the user SSID.
How can I resolve this problem?
Thanks

I think that the WDS configuration is not working as intended. Thats the reason the WDS is not caching the credentials and authenticating the user. Under Wireless Services > WDS status tab do you see the the infrastructure devices as Registered. if not check the authentication server for authentication stats. The first thing is that the WDS AP should register the infrasrtructure devices. Only then things will work.

How to assign item category group with item category

hi SAP gurus,
i want to know how sales item category(e.g. TAN) are assigned to a item category gorup (e.g.NORM). because with Material type we assign item category grp and according to that in sales order it find the suitable item category.
Regards,
BKR

Dear,
Item cat. is determined by:
Order Type + Item Cat Grp + Usage + Higher Lvl Item Cat
Order Type: QT/OR/...
Item Cat Grp: from material master mm03 sales view
Usage: normally 'blank'
Higher Lvl Item Cat.: use when BOM explosion is involved
See tcode: VOV4 for details.
Ken

Multiple passes (groups) on same query data

I need to run a report which has two sets of results, one for the current month, one for year to date. This would be easy with subreports, but unfortunately it's a very complex report which has a number of subreports already. I'm using CR10 and SQL Server.
In both cases the main report's query is the same (most of the work's done in the subreports).
I've done this before using Paradox tables, by adding an extra table with two records (Seq = 1 and 2) which is unconnected to the other tables (ignoring the warning). This results in the query data being repeated for each value in the Seq table. I group on Seq and I have what I want - two groups with the same data.
This doesn't appear to work with a SQL Server DB though. Any ideas?

If your report is based on an SQL Command data source, you could always run the query (or stored procedure) into a temp table (say, #temp), then end the SQL Command with
select 1 as seq, * from #temp
Union All
select 2 as seq, * from #temp
I thought of this but unfortunately I have no control over the report launching, so a temp table's not an option. I tried this with one of the tables involved but it then seems to run incredibly slowly, presumably because Crystal's obliged to do the joins rather than the server.
It does work quite well when I put all the joins in the Command, which is a pain though, particularly for maintenance.
So thanks for encouraging me to look further.

Effective start and end dates for roles/group assignment

Hi,
Does Access Manager (in legacy or realm) mode support effective start date/end date on a role/group assignment on a user?
Thanks,
Srinivas

Hi Ankush,
I am also of the same opinion. Start and end dates can probably be enforced by a policy condition in AM but would lead to proliferation of policies as we would end up creating policies per role entitlement duration for a user.
Any thoughts on whether the sunrise/sunset concept of Identity Manager can be used for this requirement.
Thanks,
Srinivas

Assign role, group to Human Task when initiated

Hi all,
Currently, when user login to BPM and create new task instance, i can get roles and groups of that user by programming. I want to assign roles of user to that task instance dynamically when user click SUBMIT button (Because i want to restrict users belong role are able to do this task, each user belong to a role and group can do it).
Somebody help?
Thanks.

Hi Ming
1. If you want to intercept any Actions from a Task like Save, Submit, Approve, Reject etc, you can create your own class like MyAppTaskValidationCallback that implements oracle.bpel.services.workflow.task.ITaskValidationCallback and in this overwrite one method named validateTaskOperation(bunch of parameters). See APIs for this.
In this method, you can get the action performed on the task. Also you can get the complete Payload of the Task including your custom payload and the standard Task Payload stuff like History, Attachments, Comments etc. You can write some simple XML Parser utility methods to get and set attributes in the Payload xsd schema. So in your case, in this method, get Roles, Groups of the logged in user. Check the action performed. If he is not allowed to do that operation, throw the error from this method. Else continue with your logic. To begin with create java class like above, add this code snippet and just explore the data.
Now, just curious. If your requirement is really to control the actions based on User Role/Groups, did you try to use the out of box functionality and avoid this custom logic. Say for BPM Applications, we have Swimlanes / Roles. Only users belonging to that Role, can work on that Tasks. Try to use out of box stuff as much as possible, unless you really need custom assignment logic.
Thanks
Ravi Jegga
Just giving the code snippet to get an idea. But do refer the online APIs for more information.
public void validateTaskOperation(ITaskValidationCallback.TaskAction taskAction, IWorkflowContext iWorkflowContext, Task task, Map<String, Object> parameters, Locale locale, List<String> errors) {
try {
Element taskPayload = task.getPayloadAsElement();
String taskTitle;
String taskOutcome;
SystemAttributesType taskSystemAttributes = task.getSystemAttributes();
taskTitle = task.getTitle();
System.out.println("MyAppTaskValidationCallback::validateTaskOperation() Begin For TaskTitle: " + taskTitle + " -> TaskAction: " + taskAction + " -> Parameters:\n" + parameters);
if(taskAction == TaskAction.ACQUIRE) {
      System.out.println("Inside ACQUIRE");
      //parameters.put("AcquiredBy", iWorkflowContext.getUser());
} else if(taskAction == TaskAction.OUTCOME_UPDATE) {
    System.out.println("Inside OUTCOME_UPDATE");
} catch (Exception anException) {
anException.printStackTrace();
}

NWA 7.1 - User Administration with regards to Roles/Groups

Hello,
Environment = NWA 7.1 , Java Stack Only , No Central User Administration
Situation      = One group of individuals responsible for developing and maintaining Java Roles & Groups
                      (Permissions). Another group of individuals responsible for maintaining Users and
                      allocating the above Roles & Groups to the Users.
In accordance with various documentation (ie. http://help.sap.com/saphelp_nwpi711/helpdata/en/4a/e06f429c789041e10000000a1550b0/frameset.htm) I have set up a Role which includes the actions: UME.Manage_Roles, UME.Manage_Groups, UME.Manage_Users, UME.Manage_All_User_Passwords & UME.Read_All. This Role is intended for the second group of individual mentioned above.
The problem is however that with the mentioned actions they can not only allocate an user to a Role or Group but also delete the Role/Group from the system. Without the above actions in the Role it is not possible to assign Users to a Role/Group.
This leads me to the question if it is possible to split these two various areas of responibility or does NWA 7.1 view both activities as residing in only group (documentation to this effect would be helpful). If not, which actions will ensure that only Users can be administered but the rights to the system (Roles/Groups) can not be tampered with.
Many thanks in advance,
Jay

Hi Jay,
UME.Manage_All Provides permissions required by an overall user administrator.
These include:
u2022 Administration of users belonging to any company and
possibility of assigning users to companies
(In a multitenant portal, even if a tenant user is assigned this
action, he or she will still only have access to users, groups,
and roles in his or her tenant.)
u2022 Group management
u2022 Role assignment
u2022 User mapping
u2022 Import and export of user data
u2022 Manual replication of user data
To set up delegated user administration, overall user administrators
must belong to a role to which the UME.Manage_All action is
assigned.
In portal installations, any role that includes the UME.Manage_All
action automatically has Role Assigner permissions on all portal roles in the portal installation.
Try this.
Regards,
Gowrinadh

Don't want to assign Admin role to form with business rule

Hello,
I have a business rule assigned to a form in EPMA mode. Currently, I have to assign Admin role to the users in order for them to see the name of rule display on the left side of the panel when the form is opened. How can I have the name of rule display for users without having to assign them as Admin role in EPMA mode?
FYI .. This same form with attached rule was displaying just fine for these users as I assigned them as regular user (not admin role) under a specific user group folder for Classic mode. These users can change data, click save button, and then the rule would run on save.
Thank you so much for sharing.

John .. Thank you so much for your previous reply.
Here is additional information. I hope it provides a clearer understanding on this issue.
1) To answer your question - Yes, I used Calc Manager to create the business rule named xyz.
2) The Shared Services version that I used to provision a test user is 11.1.1.3.24.
3) Here are the steps that I did for testing:
step a) in Shared Services - I created a test user named: cashtest (Native status)
step b) in Shared Services - I provisioned user "cashtest" with the following roles for these categories
Business Rules -> Server 123 -> Interactive User
Essbase: Server abc:1 -> Server Access
Foundation -> Shared Services -> Calculation Manager Administrator -> Planning Calculation Manager Administrator
Planning -> Forecast -> Administrator
As you can see under the Planning category for application "Forecast", I had to provision for user "cashtest" as "Administrator" in order
for user "cashtest" to see the business rule named "xyz" displayed on the left panel when a form was opened.
Prior to this "administrator" provisioning, I tried to provision the roles of "interactive user or Planner" to user "cashtest" but the business
rule would not display on the left panel when a form was opened.
I wonder if this is a software bug.
Thank so much again for your guidance.
Edited by: CubeQuestion on May 12, 2010 4:09 PM

Customer Account Group with Output Procedure assignment

Hi Gurus,
Is there any assignment is possible between Customer Account Group & Output Procedure? What is the function of Output procedure DB0001, I mean how its works. How in Customer Master Output box will get open. Please give details as much as possible.
Thanks & Regards,
Savi

Dear Savi,
Yes it is possible to assign the output determination procedure to the account group.
IMG path to assign output determination procedure
SPRO>Financial accounting>Account recievables and Account payables>Customer accounts>Master data>Preparations for Creating Customer Master Data>Define Account Groups with screen layout (Customers) select account group then go in to details here you can find the field Output determ.proc. under general data tab.
If you assign the output determination procedure to the account group, the output box will open in the customer master record in the Sales area data as Documents tab here you can enter the output types which are related to you.
I hope it will help you,
Regards,
Murali.

Adding Data file to existing primary file group with 1 data file

Currently our databases are configured to only have 1 data file and 1 log file. I am looking at adding a 2nd data file to the primary group, which will be on a separate lun.
Will we benefit from adding the 2nd data file (same size as 1st data file and same autogrowth rate) , or should we create a new database with 2 data files (equal size and autogrowth rate), and import the data from the database with the single data file.
Thanks.
DJ

Having another data file pointing to different Physical Volume
will give you better performance gains. Additionally, you should pre-size them (Same as First Data File) with same growth settings (Preferably in Mb
instead of Percentages) .
It is perfectly OK to add another data file to PRIMARY file-group as well and SQL Server will automatically balance the data across multiple files over the period time (Due to Data Striping)
HTH
Good Luck! Please Mark This As Answer if it solved your issue. Please Vote This As Helpful if it helps to solve your issue

How to select header group with detailed data in one SQL

Dear,
I would like to have a little help from you. My goal is to create a view where data must be in appropriate format. In this format i would like to have for each group one header.
I have 3 tables which they ar connected to each other (representing hierachical data where financial plan breaks across different groups).
CRM_PLAN
CRM_PLAN_ID
DATE
AMOUNT
CRM_PLAN_PE
CRM_PLAN_PE_ID
TITLE
AMOUNT
CRM_PLAN_ID (ref key to CRM_PLAN.CRM_PLAN_ID)
CRM_PLAN_MONTH
CRM_PLAN_MONTH_ID
YEAR
MONTH
AMOUNT
CRM_PLAN_PE_ID (foreign key to CRM_PLAN_PE.CRM_PLAN_PE_ID)
Data looks like:
CRM_PLAN
CRM_PLAN_ID | DATE | AMOUNT
1 | 01.01.2012 | 500
2 | 01.02.2012 | 200
CRM_PLAN_PE
CRM_PLAN_PE_ID |TITLE | AMOUNT | CRM_PLAN_ID
1 | Organization 1 |100 | 1
2 | Organization 2 |400 | 1
3 | Organization 3 |200 | 2
CRM_PLAN_MONTH
CRM_PLAN_MONTH_ID | YEAR | MONTH | AMOUNT | CRM_PLAN_PE_ID
1 | 2012| 1 | 60 |1
2 | 2012| 2 | 40 |1
3 | 2012| 1 | 350 |2
4 | 2012| 2 | 50 |2
5 | 2012| 1 | 200 |3
I would like view which would return data like:
MONTH | AMOUNT
Organization 1 |null
1 | 60
2 | 40
Organization 2 | null
1 | 350
2 | 50
Organization 3 | null
1 | 200
The main question is hot to write an sql as source for view to insert before each group a row with title column value from table CRM_PLAN_PE. Is that even possible? Maybe you could suggest me some other method.
View will be used in oracle form where will be possible to edit data - I will arrange that through insted of trigger.
Regards,
Igor
Edited by: user5528050 on 29.11.2012 2:23
Edited by: user5528050 on 29.11.2012 2:24
Edited by: user5528050 on 29.11.2012 2:25

Hi, Igor,
user5528050 wrote:
... I would like view which would return data like:
MONTH | AMOUNT
Organization 1 |null
1 | 60
2 | 40
Organization 2 | null
1 | 350
2 | 50
Organization 3 | null
1 | 200
The main question is hot to write an sql as source for view to insert before each group a row with title column value from table CRM_PLAN_PE. Is that even possible? Maybe you could suggest me some other method. So, you want to have 2 different kinds of rows in the output:
(1) "parent" or "master" rows containing data from crm_plan_pe, such as
MONTH          AMOUNT
==============     ======
Organization 1(2) "child" or "detail" rows containing data from crm_plan_month, such as
MONTH          AMOUNT
==============     ======
1          60Sure, you can do that.
One way is to do a UNION of 2 separate queries: (1) to generate just the parent rows, (2) to generate just the child rows.
You could also join the 2 tables and use GROUP BY GROUPING SETS. The super-aggregate rows would be the parent rows.
I hope this answers your question.
If not, post a little sample data (CREATE TABLE and INSERT statements, relevant columns only) for all tables involved (it looks like crm_plan is not involved in this problem), and also post the results you want from that data. You need to post this whether or not you want SQL code in reply. The people who want to help you want to provide good answers, and that means they want to re-create the probelm and try their ideas.
Explain, using specific examples, how you get those results from that data.
Always say which version of Oracle you're using (e.g., 11.2.0.2.0).
See the forum FAQ {message:id=9360002}

Export / import tablespace with all objects (datas, users, roles)

Hi, i have a problem or question to the topic export / import tablespace.
On the one hand, i have a database 10g (A) and on the other hand, a database 11g (B).
On A there is a tablespace called PRO.
Furthermore 3 Users:
PRO_Main - contains the datas - Tablespace PRO
PRO_Users1 with a role PRO_UROLE - Tablespace PRO
PRO_Users2 with a role PRO_UROLE - Tablespace PRO
Now, i want to transfer the whole tablespace PRO (included users PRO_MAIN, PRO_USER1, PRO_User2 and the role PRO_UROLE) from A to B.
On B, I 've created the user PRO_Main and the tablespace PRO.
On A , i execute following statement:
expdp PRO_Main/XXX TABLESPACES=PRO DIRECTORY=backup_datapump DUMPFILE=TSpro.dmp LOGFILE=TSpro.log
On B:
impdp PRO_Main/XXX TABLESPACES=PRO DIRECTORY=backup_datapump DUMPFILE=TSpro.dmp LOGFILE=TSpro.log
Result:
The User PRO_Main was imported with all the datas.
But i 'm missing PRO_USER1, PRO_User2 and the role PRO_UROLE...
I assume, i 've used wrong parameters in my expd and / or impdp.
It would be nice, if anybody can give me a hint.
Thanks in advance.
Best Regards,
Frank

When you do a TABLESPACE mode export by specifying just the tablespaces, then all that gets exported are the tables and their dependent objects. The users, roles, and the tablespace definitions themselves don't get exported.
When you do a SCHEMA mode export by specifying the schemas, you will get the schema definitions (if the schema running the export is privied) and all of the objects that the schema owns. The schema does not own roles or tablespace definitions.
In your case, you want to move
1. schemas - which you already created 1 on your target database
2. roles
3. everything in the tablespaces owned by multiple schemas.
There is no 1 export/import command that will do this. This is how i would do this:
1 - move the schema definitions
a. you can either create these manually or
b1. expdp schemas=<your list of schemas> include=user
b2 impdp the results from b1.
2. move the roles
expdp full=y include=role ...
remember, this will include all roles. If you want to limit what gets exported, then use:
include=role:"in ('ROLE1', 'ROLE2', ETC.)
impdo the roles just exported
3. move the user information
a. If you want to move all of the schema's objects like functions, packages, etc, then you need to use a schema mode
export
expdp user/password schemas=a,b,c ...
b. If you want to move only the objects in those tablespaces, then use the tablespace export
expdp user/password tablespaces=tbs1, tbs2, ...
c. import the dumpfile generated in step 3
impdp user/password ...
Hope this helps.
Dean

Grouping with 2 date in sql server

totle_count
         dt
         name
program_id
1
1/3/2015
Tea
14
1
1/5/2015
Tea
14
1
1/6/2015
Lunch
13
17
1/6/2015
Tea
14
2
1/9/2015
Breakfast
1008
39
1/10/2015
Breakfast
1008
4
1/19/2015
Breakfast
1008
1
1/19/2015
Dinner
1009
3
1/21/2015
   Tea
14
totle_count
          dt
name
program_id
1
   1/6/2015 and 1/8/2015
Lunch
13
2
   1/3/2015 and 1/5/2015
Tea
14
17
   1/6/2015 and 1/9/2015
Tea
14
3
   1/21/2015 and 1/23/2015
Tea
14
41
1/9/2015 and 1/11/2015
Breakfast
1008
4
   1/18/2015 and 1/20/2015
Breakfast
1008
1
   1/18/2015 and1/20/2015
Dinner
1009
Here is 2 table, 1st is my row table, and I want to group with 2 date.
Here is 3 days difference. and sum of value is coming.
2nt table is my expectation table.
Plz help me for this problem.
Thanks
Samir

I am doing 3 days grouping here
"dt" is name of date column
if "dt" column has '1/19/2015' then next in group it will come in "1/18/2015 and1/20/2015"
any date of 18 or 19 0r 20 it will come in "1/18/2015 and1/20/2015"
and counting will add between 3 date
Sorry your posted output is not as per above rule
How did row for  1/6/2015 and 1/9/2015 got included then. If you group by 3 days you wont get
this row as 6-9 is 4 days not 3 days
Please Mark This As Answer if it solved your issue
Please Vote This As Helpful if it helps to solve your issue
Visakh
My Wiki User Page
My MSDN Page
My Personal Blog
My Facebook Page

Automatically assign a BP Grouping for a BP Role

Hi, everyone!
I would like to automatically assign an specific Grouping range for a BP when creating it in an specific Role. Now, the user has to select each them separately and sometimes makes mistakes because he selects a wrong Grouping for the Role he is selecting.
Can this be done? I will appreciate a lot your help.
Thanks in advance.
Adolfo Garay

Thank you very much, Javier! I will try to explore this. By any chance, do you have any example that could help me to do this?
Anyone else have some examples that can be useful for this case?
Regards,
Adolfo

Assigning the role to the group using MAXL

Hi,
We are using Essbase 11.1.1.3 and Hyperion Financial Reports 11.1.13.
I have created a role called "Standard_user_HFR" in shared Services and assgined Explorer and viewer to the role and i need to assign the role to the groups and i have around 1600 groups to which i have assign the role. Is there any Maxl Script to assign the role to the groups. As of now i am manually adding the role to the group.
Regards,
VJ

Also look into Aggregated Roles to possibly reduce the number of Groups.
Oracle states:
Aggregated roles, also known as custom roles, aggregate multiple predefined application roles. An aggregated role can contain other aggregated roles. For example, a Shared Services Administrator or Provisioning Manager can create an aggregated role that combines the Planner and View User roles of a Oracle Hyperion Planning, Fusion Edition, application. Aggregating roles can simplify the administration of applications that have several granular roles. Global Shared Services roles can be included in aggregated roles. You cannot create an aggregated role that spans applications or products.
Thank you,
Todd Rebner

Assigning Protal Roles/ Groups with a vaildity date?

Similar Messages

Maybe you are looking for