Azure AD Premium - selectively enable users

Hi everyone,
I'm facing a scenario where a customer wants to be able to enable and pay Azure AD premium services for a subset of the synchronized users in AAD. The customers has hundreds of external users and contacts just used for distribution lists and wants to activate
AAD Premium and EMS just for the users that need it.
Any option?
Thanks
- Daniele
Microsoft MVP System Center Cloud and Datacenter Management
Unisciti alla community italiana per System Center
http://www.ugisystemcenter.org
http://nocentdocent.wordpress.com
This posting is provided “AS IS” with no warranties, and confers no rights.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Peter,
thanks for the answer, but what I need is different. Once I synced the appropriate users on AAD, I need to activate premium/EMS services just for a subset of them. This is obviously related to an economic/licensing issue.
Thx
- Daniele
Microsoft MVP System Center Cloud and Datacenter Management
Unisciti alla community italiana per System Center
http://www.ugisystemcenter.org
http://nocentdocent.wordpress.com
This posting is provided “AS IS” with no warranties, and confers no rights.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Similar Messages

Enable User Rights in Adobe: how to always have that on?

I finally figured out why most PC users were not able to save any of the fields they filled out in my PDFs: I didn't know about the user rights feature.
Is there a way to always "Enable User Rights in Reader" to be turned on, so I don't have to remember to go the Advanced menu and select "Enable User Rights In Acrobat Reader" ?
Many thanks!

> It took years, and years, and years of beging and pleading. And Adobe finally threw us a Bone.
Yes. And then poisioned it with this ridiculous and undecipherable license limitation.
> ...you would presumably know which users sent you a PDF that you enabled with Acrobat.
The mumbo-jumbo seems to assume the use of saveable forms is always for data collection, sent back to the form's creator. That is the use of
least interest to me.
For me, it's all about creating a design-intensive document
once (a placement ad or a marketing flyer or a spec sheet), adding a few simple boiler-plate fields to it for contact information, and sending it to my client, who then sends it to his dealers. Each dealer can then edit the contact info, save it, have it printed or placed in a newspaper, use it for trade show hand-outs.
How is the creator of such a document supposed to police the 500 "uses" limit? Who is liable when that limit is exceeded? What constitutes a single "use"? (I only used the file once. The client only used the file once. Each Dealer will
edit the form content once, but may have it printed in 501 local newspapers.)
The terms are unintelligible and probably unenforceable. This confusion has existed ever since Adobe finally threw the bone. The stupid paranoia poison just needs to be removed.
JET

Jdev11 Tab selection and Enable User Customization on Session bug.

When you have enabled User Customization for duration of session then what ever user changes on a page it remains the same through out the session,
ie. Disclosed panel boxes, advanced query criteria, visible columns of tables in panel collections etc.
The problem is that you cant customize which properties to be kept or not :
++Fusion Developer's Guide for Oracle ADF & 34.3 Configuring User Customizations:++
++Note+: If you've enabled just session persistence, then all attribute values shown in Table 34-1 will be persisted to the session.+
There is no way to override this either globally or on an instance.
The bigger problem is that if you have some business logic about these components appearance or behavior you can’t override user settings.
Is this a bug?
Shouldn’t business logic methods override user customization settings?
Will User Customization for duration of session become configurable?
details :[http://adfbugs.blogspot.com/2009/09/tab-selection-and-enable-user.html]

Hi,
Is this a bug?
Don't think so. I assume your business logic is dependent on the disclosure state, which usually is reset after each navigation off and on to a page. Using change persistence you explicitly allow the user to keep the changes. So your business logic cannot rely on a changed state.
The proposed enhancement request to prevent components from perisisting changes sound fair. I'll file one.
But it isn't that you can't override the persisted information for a component. You can use teh ChangeManager API that is exposed on the ADFFacesContext to override persistence information
http://download.oracle.com/docs/cd/E15051_01/apirefs.1111/e10684/oracle/adf/view/rich/change/ChangeManager.html
For example, using a change disclosure event:
boolean isDisclosed = < whatever you like to set >;
//Record a Change for 'disclosed' attribute
AttributeComponentChange aa =
new AttributeComponentChange('disclosed', isDisclosed ? Boolean.TRUE : Boolean.FALSE);
AdfFacesContext adfContext = AdfFacesContext.getCurrentInstance();
//set disclosed state to component. Here you override the user choice
adfContext.getChangeManager().addComponentChange(getFacesContext(), event.getSource(), aa);Frank
Edited by: Frank Nimphius on Sep 30, 2009 3:20 PM

How to enable user sets from tools in sales order

Hi,
How to enable user sets from tools in sales order..it is greyed out..
and is there anyway we can do to add shipsets from other place?
Thanks

Hi Ruchi
I hope u had gone to the screen fields which u want them not to be editable. So there u select all the fields contents which u do not want to to be changed and check the boxes with W.content and Display and save it. Once evrything is done u have to activate the particular transcation going in to the standard variants and put the name and click the activate button.
Hope its clear
Reward if help ful
Sri

OIM 11g - User Not enabled After the job "enable user after start date"

Hi,
I have a future hired user in OIM whose start date is set in OIM. The status of the user in OIM is 'Disabled Until Start Date'.
After the start date has passed and the scheduled job 'enable user after start date' is run, I see that the user is still in the status 'Disabled Until Start Date'. I re-run the scheduled job 'enable user after start date', this time manually, still the state of the user remains unchanged.
Please help in troubleshooting as to find out the root cause of the issue and a workaround/solution, if possible.
This issue is intermittent and has happened with quite a number of user. Any pointer would be helpful.
Regards,
Sudipto S.

I agree with Nayan.
One alternative approach can be to write your own custom scheduler which can overcome the limitation of OOTB scheduled job 'enable user after start date'. Let the OOTB job get executed first. After it, your custom scheduler should fire a simple SQL Query:
SELECT USR_KEY, USR_STATUS FROM USR WHERE (USR_START_DATE > SYSDATE -1) AND USR_STATUS='Disabled Until Start Date';
//Means those users who are supposed to get enabled today and are still not yet enabled and are in 'Disabled Until Start Date'. May be 2-3 user keys at max will come...
As you said it happens only intermittently and not for all users... So, let the OOTB scheduled job take care of most of such users... And after it has finished, if any user still remains in 'Disabled Until Start Date', your custom scheduler should enable it via using tcUserOperationsIntf.enableUser(userKey);
Using API is always better than database update... Because APIs trigger downstream provisioning workflows as well and not just updates OIM Database...
Keeping your constraints in mind, I think it is the correct answer.

How to enable users change password in obiee 11g?

Is there anyone know how to enable users change password in obiee 11g?
And I have tried the method in obiee 10g, bu it didn't work.
Any help would be appreciate.

As per I understand your requirement,
In your Dashboard create a Presentation variable which receives the value of year you select.
Now in your analysis, select the year column along with all the measures you want (Actual, plan, Forecast, and what-if, etc).
Create a filter on Year column and convert it into SQL. Put the condition as:
"Year" BETWEEN @{Presentaion_Variable} - 1 AND @{Presentation_Variable}
You will get the result for selected year and the previous year.
Hope it helps..
Regards,
A.K.

Disabling user through API call -process task-followed by an Enable User...

Hi,
I am running on OIM 9.1 BP11. I implemented a process task to disable the user based on a URS form field change.
I can confirm from the log file and the resource that the Disable user (xellerate user) happened. But the user got enabled back right away. The log file showed that a scheduled task named "Enable User After Start Date" ran and enable the user. So, I disabled that scheduled task.
Then I repeated the test again. I observed the same behavior of user being disabled and enabled again but this time, OIM called an adapter. This is what I observed in the log file:
20988 INFO,20 Oct 2010 12:21:56,519,[XELLERATE.DATABASE],DB read: select evt.ev t_key, evt.evt_name, evt.evt_package, mil.mil_name from mil mil, evt evt w here evt.evt_key = mil.evt_key and mil.mil_key=10
20989 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.DATABASE],select evt.evt_key, ev t.evt_name, evt.evt_package, mil.mil_name from mil mil, evt evt where evt. evt_key = mil.evt_key and mil.mil_key=10
20990 INFO,20 Oct 2010 12:21:56,519,[XELLERATE.PERFORMANCE],Query: DB: 0, LOAD: 0, TOTAL: 0
20991 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.SERVER],Class/Method: tcBusiness Obj/getSqlOperationFromMembers entered.
20992 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.SERVER],Class/Method: tcBusiness Obj/getSqlOperationFromMembers left.
20993 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/getClassLoader entered.
20994 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/getClassLoader left.
20995 DEBUG,20 Oct 2010 12:21:56,520,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/findClass entered.
20996 INFO,20 Oct 2010 12:21:56,530,[XELLERATE.ADAPTERS],Adapter: Enabling the User was initiated for the task: Enable User.
20997 INFO,20 Oct 2010 12:21:56,531,[XELLERATE.JAVACLIENT],System Event Handler : Enabling the User
I did exactly the same disabling user process at another client and it worked fine. I don't understand what causes OIM to call this system Event handler to re-enable the user.
Please help.
Thanks
Khanh

Do you have any Entity Adapter or Event Handler or Trigger which enables user for some condition ?
Check your environment. If you have please remove that and try.
Does this user has and provisioned resource ? If yes, try for some other user which doesn't have resource provisioned.

Enable User Directory

I am setting up CPS. I am setting up users using the
file-bases selection. I have a connection between publishing server
and the website. When I go into the administrative tools in
Contribute and go to Publishing Server, and click the button to
Enable User Directory, I first receive a message that Local/Network
protocol cannot be used with both Windows and Macintosh computers.
Am I sure I want to enable it? I click Yes because we don't have
any Macintosh computers. Then i have a window to login using my
User Directory name and password. I have entered this the same way
it is entered in the User Directory. I check the "Trust the server"
box and click OK. I then receive a message that my user name and
password are incorrect. I've changed the password in the User
Directory in case it was typed wrong but still receive the same
thing. Can anyone tell me what the problem is? I believe I've set
everything up according to the documentation. Please help. We are
needing to get this site out asap. Thanks.

Not entirely sure, but I've had it stop like that when it
tried to validate the FTP connection. We've had to add folks to our
FTP server in order to make it work.

Enable User is not working for Provisioning

Hi,
I am trying to provision enable user to target system. For that, in my process definition, I have a task "Enable User" added with Task Effect as "Enables Process Or Access To Application" with Conditional, Required for Completion, Allow Cancellation while Pending, and Allow Multiple Instances selected. But somehow it's not working. I have checked, system property XL.EnableDisabledResources is set to TRUE. Can you please help me with this.
As an alternative solution, I have also tried adding "USR_STATUS" or "USR_DISABLED" code under Lookup.USR_PROCESS_TRIGGERS and having a task and having a task added in my process definition with same name as meaning of this code. But those are also not working. This is exactly like Change First Name meaning under Lookup.USR_PROCESS_TRIGGERS. So, I hoped change in USR_STATUS or USR_DISABLED will trigger my task, but no luck :-(
Can anybody please help with this? I have also read some that Enable User has some issues in OIM 11g R2. If that is the case, what's my alternatives?
BTW, scheduled job "Evaluate User Policies" is also enabled and running successful every 10 minutes.
Thanks,
Ashish

Hi Have you get to know what was cause of this issue yet? If yes, can you share of what have you found?
Thanks

No value is select from user define table

Hi ALL,
             i am using B1if , i am sending data B1 to isr , i am using user define table but problem no value is select from user define table .
my table ID is @SSRPOD
<payload operation="">
     <ns0:MT_POD_B1_System xmlns:ns0="http://xxxx.com/SC/B1/Dlvr/CustDlvr/ExtPrfOfDlvr">
          <POD>
               <Header>
                    <SalesOrderNumber>
                         <xsl:value-of select="$msg/BOM/BO/@SSRPOD/row/U_SalOrdNo" />
                    </SalesOrderNumber>
                    <ArrivalDate>
                         <xsl:value-of select="$msg/BOM/BO/@SSRPOD/row/U_TaxDate" />
                    </ArrivalDate>
                    <Detail>
                         <DOLineQuantity>
                              <xsl:value-of select="$msg/BOM/BO/@SSRPOD/row/U_Quantity" />
                         </DOLineQuantity>
                         <UOM>
                              <xsl:value-of select="$msg/BOM/BO/@SSRPOD/row/U_Unitmsr" />
                         </UOM>
                    </Detail>
               </Header>
          </POD>
     </ns0:MT_POD_B1_System>
</payload>
I have set following things.
Inbound Channel
    scenirio step identifier :z.xxxx
    Inbound Channel(IPO):INB_B1_EVNT_ASYN_EVT
    InboundType:Asynchronous
    Process Trigger:B1Event
    Identification Method: B1Event
    Identification Parameter:n.a
    Identifier:?????
    Identifier Namespace:??????
can anyone help me?
Edited by: Sinha_Sinha on Feb 3, 2012 7:47 AM

Found an authorization object was missing, that enabled the case types to show but hitting the GO button brought a page that can not be viewed in IE. on to the next hurdle..........

Trigger another Process Task after Enable User completed

I would like to have a process task trigger after the "Enable User" process task successfully completed.
E.g. Scenario
A user currently has a disabled resource. When I enable the user, the Enable User process task
gets called and enables the user. After that I would like to have my custom process task triggered after that.
I tried adding my custom process task in the Enable User task as a dependent task, but it never gets called.
Also, I tried adding the custom task to Tasks to Generate but that did not work.
What am I doing wrong or am I missing a step?

Instructions:
Goal: When 1st process task is triggered, the 2nd process task will kickoff.
1. Select the 1st process task
2. In the Task Dependency Tab of the 1st process task, add the 2nd process task in the Dependant Task section.
3. In the Responses Task of the 1st process task, select the SUCCESS response and add the 2nd process task in the Tasks to Generate section.
IMPORTANT: Each response has its own Task to Generate. So make sure you add to the response you want the 2nd process task to trigger off by.

Where is the Applescript to Select Enabled or Disabled Tracks?

Hi. I've been trying to locate this Applescript. It gets mentioned in the Read Me for one of the Applescripts from Doug's iTunes Applescripts called: "Move En|Disabled" which by the way is not working because it is not unzipping correctly. I want to be able to look at playlists that are chosen for the iPod, and easily remove all the disabled tracks in them which are taking up precious room in the iPod. I can't locate the Applescript that gets mentioned in that Read Me, but it sounds like it would do the job since it's called "Select En|Disable". This is what it says:
"The core of this script was shamelessly ripped off from Apple's "Select En|Dis-Abled" script. (Does Apple credit us for the scripts it rips off from us? I think not. "
Thanks for any help! And if anyone has a working version of that Applescript from Doug's site, which again, is called "Move En|Disabled" and/or Apple's "Select En|Disabled", please either email them to me or point me in the right direction. Thanks!

Gary, thanks for your help. I do have those scripts, but they don't include the one I'm looking for, which I guess doesn't exist. The one I'm looking for, would be called "Select Enabled/Disabled Tracks", whereas this one is called Disable/Enabled Selected Tracks, which does something entirely different. Ideally after you choose the Applescript that I'm talking about, you would be given a choice: "Select Enabled or Disabled?" Or I suppose, it could be done in two separate scripts, one for selecting enabled tracks, and one for selecting disabled tracks.
Good idea on emailing the man himself, Doug. It's hard to believe that with all the scripts out there, this one doesn't exist. Maybe the author of that "read me" mistakenly named the Appplescript from Apple that I thought existed.

How can I select a user on a MacBook running mountain lion?

I cannot select a select a user in my MacBook, I have the Mountain Lion OS. On the screen when I start my computer the users are there and the cursor moves but when I try to select any of them I am not able to do it.
Is there a way to fix this?
As an additional information, my DVD drive doesn't work.
I would appreciate any help.

I cannot select a select a user in my MacBook, I have the Mountain Lion OS. On the screen when I start my computer the users are there and the cursor moves but when I try to select any of them I am not able to do it.
Is there a way to fix this?
As an additional information, my DVD drive doesn't work.
I would appreciate any help.

Error when selecting a user

Hi everyone:
We have implemented SAP NetWeaver 7.0, and we defined "ABAP System" as Data Source.
We've come across a strange error while selecting some particular users (clicking on user) in Netweaver under User Management -> Identity Management > Selecting a User (clicking on user)
"java.lang.NoSuchMethodError: com.sap.tc.webdynpro.services.sal.url.api.WDURLGenerator.isSecureURL(Ljava/lang/String;)Z"
So far, this error has happened only when selecting a user that has the E-Mail field defined in the ABAP side. If we delete the E-Mail address from de ABAP account and then select the user in the Java Identity Management, the error disappears and the user account is perfectly shown.
Any suggestions guys??
Regards,
Pablo Vaquero

Hi Ravi,
Thank for your reply.
That indeed is the issue!... Since we have defined "ABAP System" as the Data Source, the E-Mail field can only be mantained on the ABAP side. But, as I've said on my previous post, when we fill this field in the ABAP side for any particular user and then want to see this change in user details on the UME side, when clicking on that particular user we get the error mentioned above.
Regards,
Pablo

Unable to Enable User Profile Disks in RDP server 2012R2

I am setting up a new Windows server that will act as an RDP server. The server has been built with Windows Server 2012R2.
I have the following roles and services working on the server: RD Web Access, RD Gateway, RD Licencing (with 30 user cal licences), the RD Connection broker, and the RD session host.
I have a SSL certificate configured and installed on the site, and both external and internal DNS are configured and working.
I have created and published an application collection and this is working. That is, when you go to https://remote.<servername>.org you are presented with a log in screen, users can log in with their domain accounts and then can connect to the published
applications, this is working both on our internal network and from the general internet.
So all the roles on the server are working and the collection itself is also working. However, what I cannot do is set it up so that we can use user profile disks with that collection. When I go through the Session Collection Wizard and I get to "User
Profile Disks" I can click on "Enable user profile disks" and then you can enter the options below.
I am entering the share location under location \\<servername>\<sharename>
I am using the default "store all user settings and data on the user profile disk"
Then I go to create the profile disks and I get the following error:
"Could not create the template VHD. Error Message: -2147024809
This has happened multiple times, I have done the following:
- installed all windows updates and rebooted the server, same error
- checked the share permissions AND the folder permission for that share, for testing purposes I have set permissions on both the folder and the share to allow full control to "everyone" (I also tried it with only "domain users") but
same error message.
- I have checked to see that no quotas are imposed on the disk where I am attempting to create the profile disks - this was because this was the closest thing I could find on Technet was this post:
https://social.technet.microsoft.com/Forums/windowsserver/ru-RU/aec30527-d742-42b9-950e-85c709c4cb45/vdi-problem-creating-user-profile-disks?forum=winserverhyperv
And that was a quota issue that I am not having.
The UPD wizard says the following "the servers in the collection must have full control permission on the user profile disk share and the current user must be a member of the local Administrators group on that server"
Both of those things are true.
I have attempted to search for that specific error message (-2147024809) and have found nothing on Technet or any other site.
I am hoping someone here has some thoughts. Thanks in advance.

I was looking at both the technet article for setting up UPD as well as this walk-through:
http://thewolfblog.com/2014/02/24/user-profile-disks-for-rds-2012-2012-r2/
The step after the creation of the disk in this walk-through is to look at who has permission on the .vhdx file, now obviously I am not at that step, but that is what led me down the trail of looking at user permissions, hence my attempts to set up shares
where 'everyone' has full permissions on both the share and the folder.
I have tried to set up multiple shares for the collection, I have tried on two different disks (volumes) on the RDP server itself, I also tried setting up a share on our fileserver (which has all kinds of shares working fine) and the same error occurred
in all cases.
I also found this Technet article:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/d6469d31-6540-4075-a85f-a6e8f7c11e89/user-profile-disk-template-cannot-be-created-when-setting-up-session-collection?forum=winserverTS
So that seems close to what I am looking for, but I have checked and the exact group policy that was causing the above linked issue is not defined in our group policies, but maybe there are other group policies that are causing the issue?

Azure AD Premium - selectively enable users

Similar Messages

Maybe you are looking for