BI+ Reporting on access for Users and Groups

BI+ 9.2.0.2, is there a way to report on the permissions associated to a report or a folder? If so, how do you do it? Would like to get all the access permissions for all the folders and all the reports on one report, if possible. Would be nice if you could do this in Shared Services, like Planning does. Thank you!

Now that you mention it, when I provisioned all users at the orgn scope, I had visibility issues of team workspaces created inside the organization also.
I am not going to do anything with organizations until things can be accurately accessed and viewed across organizations, seeing as I must go live NOW, I am also going to have to find a way to "move" Personal Workspaces into the desired organizational scope post go-live. I opened an SR about this previously and was told there is no way to do it, I did a rip-and-rebuild on my LDAP'ed users with an updated scope on my Directory Profile.
I imagine multiple enterprises and multiple organizations and cross visiblity controls for GAL and entities via the various interfaces is going to have to be in place before large complex organizations can adopt beehive, I can't imagine having ALL your users in one container!

Similar Messages

Generate report to show all users and groups in Shared Services in EPM 11x

Hi,
Is there any way to generate a report (like a migration report or job status report) which can be generated through workspace/shared services 11.1.1.3 so that my admin can look at all the users and groups created. Something that I can view and probably print out? Any suggestions?
~Adeeba

Yes, I knew this one. This basically shows me the users and groups assigned specific provision access. Is there any way to view a report that shows which users and groups have access to dimensions of an individual planning application?
~Adeeba

Could we have same name's for User and Groups in Active directory

When iam trying to create a user name " Logistics " under a OU, I am getting a error
"The pre-windows 2000 logon name you have chosen is already in use in this domain. Choose aother pre-windows logon name, and then try again"
We already have a group by the name " Logistics "
Could we have same name's for User and Groups in Active directory?
Thanks in Advance

sAMaccountName attribute is unique. So, the short answer is you cannot.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

User and group names truncated with ls

Hello,
When using the 'ls -l' command the resulting list truncates user and group names that are longer than 8 characters.
Is this a know issue?
I'm running Mac OS 10.4.10.
Thanks,
Anthony

Jun T. wrote:
If a program like "ls" wants to know the username corresponding to the uid, it must call a library function of the operating system. But there are two library functions, one gives the correct username and the other truncates the username.
The basic library function is getpwuid(3) which returns the correct username.
Hello Jun,
I ran a search using Xfind (Rixstep) on /bin for 'userfromuid' and /bin/ls was listed as I might of expected.
Also, /bin/ls was also listed when 'getpwuid' was used as a search Key.
Peeking further into /bin/ls further with Xstrings (which is Rickstep's "adaptation" of the "strings' tool" ) reveals the string '_ getpwuid'.
Does this mean that at some point the 'ls' command can call the getpwuid() directly under some circumstances rather than going through userfromuid() which relies on the cache you mentioned?
The problem is the size of the table; userfromuid() allocates only 8
characters for each username (the number 8 comes from UT_NAMESIZE in /
usr/include/utmp.h), and truncates the username if it is longer. This
may be "fixed" in a future version; or it may not be "fixed" to keep
backward compatibility. I'm not sure.
I've heard that utmpx.h has 'UTXUSERSIZE' which is defined as 32. Does not that allow for user and group names larger than 8 characters?
By the way, I can't find the directory usr/include/utmp.h on my drive.
Is there a way to reset or redefine this 'UT_NAMESIZE' field to more than 8 characters wherever the userfromuid() function stores it?
The commands "users", "who", and "w" read the file /var/run/utmp, in
which truncatd usernames of the currently logged-in users are saved.
Does some command initially call the function as 'ls', userfromuid(), to result in truncated names being saved in file /var/run/utmp as well?
I think there are many programs which depend on this fixed-width utmp
file, so it may not be "fixed" in a future version. "
I believe there are third party tools which rely on the userfromuid() call which require this bug to be fixed in order to display accurate user and group name data.
Thanks for your informative reply,
Anthony

Users and Group preference pane error

This crap keeps popping up when i try to access to user and group. I nee dthe solution asap before the March holidays ends. Thanks.

Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities, then Terminal in the page that opens.
Drag or copy – do not type – the following line into the Terminal window, then press return:
dscl . -list /Users | grep Guest
Post the lines of output that appear below what you entered, if any – the text, please, not a screenshot.

Changing users and groups settings without unlocking

I recently upgraded to Mountain Lion and have noticed that I can change the settings in preferences for Users and Groups without unlocking.
Should this be the case?

I tried what you suggested but there is no change.
Many Thanks

MAJOR Open Directory issue: Can't assign Users and Groups that DO exist!

Just noticed the following today:
When doing Get Info -> Permsissions on files/folders located on my File Server share, Owner and Group show as (unknown).
When I go into WGM -> Sharing, and look at files/folders on File Server share this way, the Owner and Group fields are blank.
When I attempt to (re)assign an Owner or Group by dragging them from Users and Groups section of WGM, error tells me User or Group no longer exists. These Users and Groups clearly do exist in WGM -> Accounts.
When I look at files on File Server share via CLI, instead of actual names for Users and Groups, I see their uid and gid's. Chowning via CLI fails as well.
I've noticed all Users and Groups with this issue are OD.
Server is xServe G4 DP 1.0 GNz/1 GB RAM/Mac OS X Server 10.4.7 Unlimited. This servers been running fine as an OD Master for months now. ACL's are enabled on this File Server share point. I've always had weird permissions issues, but NEVER the inability to assign OD Users and Groups to files/folders.
I'm at a loss here, not to mention my wits end.
Did my OD become corrupted?
Any and all help would greatly appreciated.
PowerMac G4 733 MHz Mac OS X (10.4.6) 512 MB RAM

When doing Get Info -> Permsissions on files/folders located on my File Server share, Owner and Group show as (unknown).
This means that the Finder can't find a match in the accounts/groups database for the numeric UID assigned to those files. Either the records associated to those accounts have been deleted, or the database is corrupt. In either case, you should restore a copy of it from backup.
(15686)

Restricted Characters: User and Group Names

I'm going through the documentation for Essbase and I'm trying to find an exhaustive list of all the restricted characters/keywords for User and Group Names.
I've found what I think is the list for Apps, DBs, Dims, and Dim Members here: Oracle Essbase Database Administrator's Guide
I've also found a link that says the only restricted character for User names is a backslash: Essbase Administration Services Online Help
Does anyone know if there are any other restricted characters for User names and Group names? I recently created the user @<>/\:';[]{} in Shared Services. I was surprised that it actually let me do it. I was even able to log into EAS using this user name. However, I couldn't add the Essbase server. However, the user did show up in the Users Table in EAS for that server when I logged in as a different user.
So, does anyone out there have any info on restricted characters and/or keywords for Users and Groups. Anything on Enterprise ldap systems?

I'm going through the documentation for Essbase and I'm trying to find an exhaustive list of all the restricted characters/keywords for User and Group Names.
I've found what I think is the list for Apps, DBs, Dims, and Dim Members here: Oracle Essbase Database Administrator's Guide
I've also found a link that says the only restricted character for User names is a backslash: Essbase Administration Services Online Help
Does anyone know if there are any other restricted characters for User names and Group names? I recently created the user @<>/\:';[]{} in Shared Services. I was surprised that it actually let me do it. I was even able to log into EAS using this user name. However, I couldn't add the Essbase server. However, the user did show up in the Users Table in EAS for that server when I logged in as a different user.
So, does anyone out there have any info on restricted characters and/or keywords for Users and Groups. Anything on Enterprise ldap systems?

User and group handling in LDAP Realm

Hi,
I'm currently using an LDAP Realm for storing users and groups, which I need to be able to add, amend and remove at runtime.
I understand that in earlier versions of Weblogic, the methods to do the add/remove/modify were not implemented but I was told that this may change in WL6. If so, is there any documentation or examples about these methods ? If not, would I need to extend ManageableRealm to create a custom realm ?
Any help much appreciated.
Dave

Hi Dave:
In our project, we use security realm (LDAP realm) for Users and Groups authentication. We turned the CacheRealm on to optimize performance. To add and amend Users and Groups, we use a stateless EJB to talk to LDAP server. This kind of partition works fine for us to separate the user authentication
logic and user management logic.
Fun
Dave Horner wrote:
Hi,
I'm currently using an LDAP Realm for storing users and groups, which I need to be able to add, amend and remove at runtime.
I understand that in earlier versions of Weblogic, the methods to do the add/remove/modify were not implemented but I was told that this may change in WL6. If so, is there any documentation or examples about these methods ? If not, would I need to extend ManageableRealm to create a custom realm ?
Any help much appreciated.
Dave

User and group settings are not pushed

Hello,
I am just setting up a Mavericks environment including Server.app and I am facing a problem that I could not solve up to now.
None of my profile manager settings for users or groups are pushed to the mobile users on my client computer. The device registration worked without problem and also the computer settings are pushed but not the ones for user and group settings.
In my productive mountain lion environment this is no problem.
Is there any was to force the settings update for users as it is possible for computers?
Any hints are appreciated
Michael

I too am having this issue.. I had my school environtment running great on 10.8... then we had to upgrade the server to 10.9 to use the new volume purchashing stuff with ipads.. now this 10.9 has broken all my previous macbooks in the school... I can enroll, install certs, and some networks stuff but the main group with all the macbooks and restrictions will not push... it even removed them from the machiens that were working with 10.8... very big issue.. apple needs to help?

How do we fetch the top-level users and groups for a particular resource

Hi Experts,
I need to fetch the top level users and groups (permissions) for a particular resource, Currently i am able to fetch the effective users list.
Thanks.

To elaborate...
Here we need the users and groups who have direct access to the resource. We dont want to resolve groups.
Please help us with the apis to use in our java code to fetch the users and groups.

What is the SYNTAX for the user and group filters??? Is the HTML Ampersand token Amper A m p semicolon required in the filter

There seems to be quite a bit of confusion over the actual syntax for the user and group filters on the Forms Based Authentication Ldap Role and membership providers.. MSFT isn't really clear and there is a universal confusion in the blogsphere.
I the filters should the prefix be the ACTUAL Ampersand or the HTML token for an AMPERSAND.. I realize the in many cases the blogger might have inadvertently specified the html token when the bare naked ampersand was intended.. The question
therefore is : can a filter be taken directly from and ADSIEdit query and used as a filter or must the filter be made HTML safe by swapping out the AMERSAND with the HTML Token for AMERSAND before putting it into the configuration
for the LDAPRole/membership provider...
All science is either physics or stamp collecting

Hi GUYO,
I am not quite sure how we implement this on sharepoint side, as I did research and sharepoint may not have this feature to do this.
most of the LDAP for sharepoint may need to follow these steps in this article:
http://technet.microsoft.com/en-us/library/ee806890(v=office.15).aspx
http://blogs.msdn.com/b/sridhara/archive/2010/01/07/setting-up-fba-claims-in-sharepoint-2010-with-active-directory-membership-provider.aspxhttp://blogs.msdn.com/b/kaevans/archive/2013/01/31/configuring-ldap-for-fba-in-sharepoint-2010-or-sharepoint-2013-with-powershell.aspx
here is an example :
http://blogs.msdn.com/b/sharepoint__cloud/archive/2011/12/20/achieving-fba-with-adlds-amp-sharepoint-2010.aspx
if should this questions was at the ADSIEdit part, perhaps you can help us by opening a new thread at the AD foum
https://social.technet.microsoft.com/Forums/en-US/home?category=windowsserver
Regards,
Aries
Microsoft Online Community Support
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

User and Group Ids for Standby Database

The following oracle homes installed under the same unix account on the primary node:
10gR2 CRS home
10gR2 ASM home
10gR2 RDBMS home
Oracle Applications E-Business Suite 11.5.10.2 (concurrent admin)
Based on note 216212.1 - Business Continuity for Oracle Applications Release 11i, Database Releases 9i and 10g
Section 1: Design Considerations and Assumptions
The note, verbatim, says "+The user and group Ids of the Oracle and applications software owner accounts must be the same on the production and standby servers+." Is this statement true? In other words, if the primary server software owner is the "morgan" unix account, then the unix account must also be "morgan" (not "stanley") on the standby server?

Yes you can run a standby with different unix usernames on primary and standby, but it will be easier if the usernames are the same.

Linking to an OBIEE report without showing the user and password

Hi!
we are trying to access to an obiee report from an external portal (coded with php).
The idea is that the user clicks on a link an gets the report in pdf format. For that purpose we are using this url:
http://ttivobiee01:7001/analytics/saw.dll?Go&Path=/shared/Prueba/ogp_obi&Action=Print&P0=1&P1=eq&P2="Criteria"."Key"&P3=1402&NQuser=user&NQPassword=pass&format=pdf
But this url is expossing OBIEE's user and password.
In order to avoid this security issue we tried to do an wget of the url but it doesn't return the report. Instead we get an html, which seams to download the report chunk by chunk (using javaScript).
The question is, is there any way that we could let our portal ussers access to an obbie report without expossing the user and password?
I have been looking into oracle forums and have found this: OBIEE Go URL with password protected
but we couldn't use this aproach due to security issues.
Thanks!
Nuria

Hi!
We have finally done this (and it works!)
<?php
$urlInforme='http://obi:7001/analytics/saw.dll?Go&Path=/shared/Prueba/ogp_obi&Action=Print&P0=1&P1=eq&P2="Criterios"."Clave oficial"&P3=1402&NQuser=user&NQPassword=pass&format=pdf';
$ch = curl_init($urlInforme);
$ckfile = tempnam ("./", "CURLCOOKIE");
$ch = curl_init ($urlInforme);
curl_setopt ($ch, CURLOPT_COOKIEJAR, $ckfile);
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, true);
$output = curl_exec ($ch);
$ch = curl_init ($urlInforme);
curl_setopt ($ch, CURLOPT_COOKIEFILE, $ckfile);
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, true);
$fp = fopen("salida.pdf", "w");
curl_setopt($ch, CURLOPT_FILE, $fp);
$output = curl_exec ($ch);
curl_close($ch);
fclose($fp);

WINDOWS 8.1 - System Tools no longer displaying User and Group Settings after adding a new LOCAL user.

I jumped on my parents computer, which is on a domain. I added a new local user(with my live.com login) and gave it admin status. That's when the trouble began.
The main user profile disappeared. I used the command prompt fix (see other fixes) to add the missing user back into admin. I logged back in, and it set up the account for the first time (WTF?). I cannot access any files from the main account
(that I logged into just fine before to get this debacle started.)
When going to Local Computer Management --> System Tools, my users and groups tool is missing.
I ran lusrmgr.msc only to find out that the most current version of Windows 8.1 and this is what it said "This snapin may not be used with this edition of Windows 8.1. To manage user accounts for this computer, use the User Accounts tool in the
Control Panel." <---- Awesome! (that was sarcasm.)
I have spent over two hours in the User Account tool during the course of this problem only to prove that a picture of a computer is more useful that that "tool".
To anyone reading this ticket, the best advice I can offer you (as long as its not a crucial machine) is to back up what you can gain access to, format your hard-drive and reinstall windows and start over again. I wouldn't recommend reinstalling 8.1,
I would say go back to 7 and wait until 10 comes out. Windows 8 is the new Vista. Good luck!

Hello AhavahOlam,
I can understand your feelings.
If my understanding is right, after adding a new local user in domain-joined Windows 8.1, you can’t open the local users and groups.
Can you still add account by going to Control Panel\User Accounts and Family Safety\User Accounts\Manage Accounts?
As this computer is domain-based, it is recommended to contact the domain administrator to see if the option is blocked.
Best regards,
Fangzhou CHEN
Fangzhou CHEN
TechNet Community Support

BI+ Reporting on access for Users and Groups

Similar Messages

Maybe you are looking for