Authorization Policy for only search users

Hi all,
I need create a custom authorization policy for only search all users in create request. The users can't see any profile information of others users.
Anyone can help me ?
Regards,
Joel

ViewUser Admin Role can search and view users by default. Since the OES policies for this admin role has action as ViewSearch Entity. In your case, you can write EL's to hide Admin tab which will hide Admin ltab links based on current logged-in user profile.
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/uicust.htm#BABHBFGH

Similar Messages

Program installed for only one user

Have a program that is installed for only one user, how can I get another user access to the software? don't have install disk.
Thanks

Select the application's icon then Press COMMAND-I to open the Get Info window. In the Ownership and Sharing section check the owner and group assignments. If they have owner=you and group=you or staff, then you must change those. Open the Terminal application in the Utilities folder and enter the following command line at the prompt:
sudo chown -R root:admin
Put a space after "admin' then drag the application's icon into the Terminal window and press RETURN. You will be prompted for your admin password which will not be echoed.
This should enable other users to access the application provided you have given the user access via their managed account preferences in Accounts preferences.

Filter base on CallerID to VM for only 1 User

Hi
CM4.0.2sr2a - Can I Filter base on CallerID to VM for only 1 User.
Reason: This user gets constant sales calls from certain vendor that they recognize the callerID and don't want to answer their calls but rather have it go to VM

perhaps you can setup a phone template that has an "idivert" button where if the user sees an incoming number they don't want to answer, they can just press the 'idivert' button and the call goes straight to voice mail.
see the following link for more info:
http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_administration_guide_chapter09186a00801ed115.html

Authorization Policy for Modify user in OIM 11gR2

Hi Experts,
Requirement: I want the users in particular org not to modify certain user attributes and users from other org should be allowed to modify user.
I have created user1 whose organization is org1 and role is role1. I have also created user user2 under same org and same role. I assigned the Admin Role "User Administrator" role to user2.
So If user2 from same org1 tries to modify certain attributes then OIM should throw error message. I have completed till this.
But when the user from diff org say org2 with Admin Role "User Administrator" tries to modify user, OIM is not allowing to modify user which should not be the case.
I want the Auth Policy to trigger only for Org1. I have specified the below condition for my custom policy in OES admin console but it is not triggering.
The condition is
IF ( OrclOIMTargetEntity = 'true' AND OrclOIMUserOrganizations = 'true' AND STRING_AT_LEAST_ONE_MEMBER_OF(OrclOIMUserOrganizations,['25','1000000']) = true )
What am I missing?
Any help is much appreciated.

Hi
Can anyone let me know the steps to restrict modify user operation for the users belonging to specific organization in OIM 11gR2. The condition which I specified under Authorization Policy in APM console is not triggering at all.
Thanks!

OIM Authorization policy for specific resource

Hi gurus,
Can we create an authorization policy in OIM 11.1.1.5 for allowing resource administrators to add/modify a specific resource only?
Example: For all users, Admin user-A should be able to add/modify AD resource only.
Admin User-B should be able to add/Modify iPlanet resource only
Thanks in advance.
-J

OIM 11.1.1.5 authorization policies do not extend to resource operations, only operations on OIM users and roles. For restricting operations on resources you can set data object permissions on the resource objects themselves. An alternative approach in OIM 11.1.1.5 is to provision resources via requests, where you can limit requests to work with specific allowed resources and be accessible to specific administrators.

Exportto excel in tcode MCAF results in program termination for only 1 user

Hi,
The user is trying to export data from MCAF into a local file. This action results in program termination, its only for his user id. It works for all the user ids the basis guys had a look at it and they said everthing is ok on the authorization side. Im confused, please let me know...
Thanks,
Sukumar.

Thanks for the quick reply!!!
Error analysis
The system tried to access field "OE_OBJEKTTEXT" with type "C" and length
60 in the current program "RMCY9110 " using offset 71.
Partial field access is not allowed with an offset specification that is
larger than actual field length.
How to correct the error
Make the offset smaller with which you want to access the field.
If the error occurred in an ABAP program of your own or an SAP program
that you modified, try to correct it.
If the error occurred in a non-modified SAP program, you may be
able to find a solution in the SAP note system.
If you have access to the note system yourself, use the following
search criteria:
"DATA_OFFSET_TOO_LARGE"
"RMCY9110 " bzw. "RMCS0F0O "
"OBJEKTTEXT_ERMITTELN"
Thanks,
Sukumar.

ICal alerts not working for only one user

My main user account stopped giving me iCal alerts. I can switch to another user and my test alert works. I've found a lot of information online but most seems to be for older versions of iCal. I have gone into ~user/Library and removed everything related to iCal. I even managed to finally delete the home calendar that seemed to re-appear. I managed to start with a clean calendar but no alerts. Is there an alert plist file that could be the culprit? I've done a global search in Terminal for anything under ~User/Library with "alert" or "notification" in the filename but can't find anything. I hate to rebuild an entire account again.

It seems someone has set the user policy at webapplication level for that user.Check the similar thread below
http://social.msdn.microsoft.com/Forums/es-ES/18b4f019-093d-45f6-92b7-8350d13bd663/let-us-know-why-you-need-access-to-this-site-why-do-i-see-this-error-and-who-will-give-access?forum=sharepointgeneral
My Blog- http://www.sharepoint-journey.com|
If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

ISE 1.2 - Authorization Policy for Digital Certificates

Hi Everyone.
I have Cisco Ise 1.2 when I created authorization Policy rule for PEAP(MSCHAPv2) and the ISE can match on the rule e permit based on AuthProfile.
BUT, authentications using digital certificates (EAP_TLS) I can´t do some AuthorizationPolicy for match.
I´m try some:
if
any
AND
authEAPprot: EAP-TLS
AND
Certificate:inssue : iqual : CA-root
THEN
ACCESS_FULL
In Operations>Authetications I can see the authentication and when I open the details, I can see the method is EAP-TLS BUT my rule is not correct cuz authorization policy that use is Default.
Someone can do some Tip about How i can make this rule for authentications that use EAP-TLS (digital certificates)???
tks

Hi,
You will have to upload all certificates (intermediate and root) that are used to sign the client cert into the ISE CA database. You will also have to make sure that checkbox for trust for client authentication is checked.
Thanks,
Tarik Admani
*Please rate helpful posts*

Mandatory Authorization object for the BO user

Dear All
I am facing some problem for the BO user.
can you let me know what are mandatory Authorization object for BO user to run the dashboard without error.
Fast reply appreciate.
Thanks
Haji

Dear All
i am working for Analysis Authorization.
i included Analysis Authorisation object to the user.
S_RS_AUTH BI Analysis Authorizations in Role.
when i checked in the BW side its working fine.
when i checked the user in the BO side.
filter values are coming correct, but the values in the column are not showing.
its throwing an error.
kindly help me to solve this issue.
Thanks
Haji

Firefox crashes for only one user on startup, even after reset; safe mode OK.

Current crashes do not even produce crash reports, but two crashes from earlier today did yield:
bp-7013aded-0644-47d8-9967-b48a12141013
bp-cb495f8f-7ae2-4b48-86ff-63b6f2141013
Starting in safe mode shows the same installed plugins and two extensions that are enabled in profiles for other users on this system. It is only this user's Firefox that crashes on startup, even after a reset.
Have also uninstalled and re-installed Firefox. Again, it crashes on startup only for this user.
Windows event viewer does have several entries for an Application Error:
Faulting application name: plugin-container.exe, version: 32.0.3.5379, time stamp: 0x54224e6b
Faulting module name: mozalloc.dll, version: 32.0.3.5379, time stamp: 0x54221b67
Exception code: 0x80000003
but it's not clear that these entries sync up with the crashes.
This crashing on startup began this morning; no new software or any other system modifications (that I'm aware of) for several weeks now.

The hardware acceleration setting appears to be the culprit. After unchecking the Tools > Options > Advanced > General > Browsing: "Use hardware acceleration when available" setting, Firefox no longer crashes on startup.
Initially I'd glossed over this setting since it isn't an issue for any of the other users on this system. I'm still puzzled as to why this would be an issue only for this user, and what had changed as of this morning that set it off, but obviously there's something about their configuration which triggers this situation, even for the default plain vanilla Firefox profile!
Thanks, cor-el!

Group Policy for Remote Desktop Users

Hi,
Currently my users use desktops and have user and computer GPOs applied (typical things like logon scripts etc.) at the OU level where they reside e.g. Finance Users, Sales Users etc.
I am planning a Remote Desktop 2012 environment.
I have read the following:
TechNet cc779327
So, my understanding is that I create a new OU for my Remote Desktop Server only (not users), and create a new security Group for my RD Users and a security group for my RD server.
Remote Desktop Servers OU
* RD User GPO (filter on RD User security Group and RD Computer Security Group)
* RD Computer GPO (filter on RD User security Group and RD Computer Security Group)
I then apply all computer settings to the RD Computer GPO (loopback processing, Windows installer, hide shortcuts etc.).
I then apply all user settings to the RD User GPO (app specific, templates etc.)
Why not consolidate the two GPOs into one?
If I set computer settings in the computer GPO, and apply it as above to filter to the RD Server group and RD Users Group will this apply to only users un the RD User Group...or ALL users since I added the server to the filter?
If a user currently gets a setting in their normal OU e.g. Finance logon script, will they still get it on the Remote Desktop? Or do I need to copy that GPO setting to my new RD User GPO also?
Am I right to add both RD Server and RD User groups to the filter on both RD User and RD Computer GPOs?
Loopback processing - merge or replace typically for Remote Desktop?

Hi,
Thank you for posting in Windows Server Forum.
Create OU for RDS Server in Active Directory. Create security group for users who will use Remote Desktop Host (i.e. RDS Users). Create GPO (i.e. RDS Server Lock Down). In Security Filtering delete Authenticated Users, add RDS Server Account, and the security
group created in previous step.
Please check beneath article might useful for better understanding.
Lock Down Remote Desktop Services Server 2012
How to secure your remote desktop server with GPO
Hope it helps!
Thanks,
Dharmesh

500 internal server error for only single user

Hi Experts,
Pls help me that
I am getting the problem of 500 Internal server error for a single user .
Except that user remaining users are not getting this error, They are working fine
i.e it is ESS & MSS Package all other application working fine , this iview came from Webdynpro .
Regards
Krishna

Hi Arun,
where can i check with that whether in DEV/PROD system...?
I don't have access to PROD system and SU01 system too.
Can you please guide me with the steps to get it done.
Please check the below log which is getting displayed for the User, when he is logging in.
Error summary
While processing the current request, an exception occurred which could not be handled by the application or the framework.
If the information contained on this page doesnu2019t help you to find and correct the cause of the problem, please contact your system administrator. To facilitate analysis of the problem, keep a copy of this
Root Cause
The initial exception that caused the request to fail, was:
com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: ComponentUsage(FPMConfigurationUsage): Active component must exist when getting interface controller
at com.sap.tc.webdynpro.progmodel.components.ComponentUsage.ensureActiveComponent(ComponentUsage.java:773)
at com.sap.tc.webdynpro.progmodel.components.ComponentUsage.getInterfaceControllerInternal(ComponentUSage.java:348)
at com.sap.tc.webdynpro.progmodel.components.ComponentUsage.getInterfaceController(ComponentUsage.java:335)
at com.sap.pcuigp.xssfpm.wd.wdp.InternalFPMComponent.wdGetFPMConfigurationUsageInterface(InternalFPMComponent.java.245)
at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPM.changeToExceptionPerspective(FPMComponent.java:862)
u2026 59 more
Please provide me any help.
Thanks in advance.
Regards,
Ponneswari A.

Burn a CD or DVD for only one user!

Hi,
How can I burn a CD or DVD that only my user can read?
I go to backup my personal informations and want to sure that no other people have access to this CD.
I use the Toast Titanium 7.1.2, but if other software can do this, I can buy it!
Thanks to all!
G4 Quicksilver, Cube and G5 Mac OS X (10.4.8)

Hi,
Thanks to all. But now, I see some thing that make this idea of a disk image, not good. Lets say, that I burn a DVD with a disk image inside the DVD. If I get, just a little risk on de DVD, I lost all the informations. If I dont use a disk image, I lost only the information, in that little risk. And because I go use this as a backup, this problem with security is a problem.
So, if somebody know another way, to burn a DVD, that only my user have access, please, let me know.
Thanks
Paulo
G4 Quicksilver, Cube and G5 Mac OS X (10.4.8)

Saved search not navigating for only one user

Hi Everyone,
I have a saved search that navigates for all users except one. Furthermore, on that same search screen if I use a different object type, do a search and save it, the saved search works for that user. So it seems like it is related to the object type I'm searching for.
since it is working for some users, I don't think it is related to some IP or OP settings.
any idea what could cause this issue?
Thanks in advance,
Ralph

It seems someone has set the user policy at webapplication level for that user.Check the similar thread below
http://social.msdn.microsoft.com/Forums/es-ES/18b4f019-093d-45f6-92b7-8350d13bd663/let-us-know-why-you-need-access-to-this-site-why-do-i-see-this-error-and-who-will-give-access?forum=sharepointgeneral
My Blog- http://www.sharepoint-journey.com|
If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

Business Purpose field hidden in ESS portal for only one user

Hi All,
We have one wiered error while creating an expense reort in ESS portal and this is only for one employee out of 15,000 users.
Problem:
The additional information for expense type " Business Purpose " field was hidden for one employee and infact this is a required field and the rest of 14,999 users are able to see this filed while creating an expense report.
We wern't able to replicate the same error in other systems like QA/ Dev boxes with the same authorizations and even from the same laptop. This user got the same problem even by logging into different laptop.
SAP ECC 6.0 - Release 603 .
Any suggestions or ideas will appreciate.
Thanks
Anil

Thanks for the reply.
We do not normally assign the Content Admin role in EP to the end user and his back end ECC role and EP portal role is 100% equal to the other users. Audit won't allow to assign any special roles to end users.
Anil.

Authorization Policy for only search users

Similar Messages

Maybe you are looking for