Business Role changes not being provisioned

Guys (and girls),
We're having the issue that whenever we change something to a business role in IdM 7.1 SP5, like adding or removing a technical role (SAP role) the change isn't provisioned to the system authomatically resulting in users not being updated.
The workarround now is to change a business role and then remove it from a user and add it to that user again. Works ok when you're dealing with only a few users but I'm not looking forward to the day our basic role needs updating.
Same thing goes for changing users telephone number or SNC name or the likes.
I'm not sure if the two issues are related but am I missing an assignment of a task somewhere?
Cheers,
Jonathan

Jonathan,
I think so, but a pretty simple one to fix.
I would do one of two things:
1. Put a MODIFY task on MXREF_MX_ROLE or whatever attribute you're holding roles in.  Have this task do a role reconcilation.
2. As a part of the workflow, have a role reconciliation execute.
On the whole, I prefer the second option.  Don't like adding baggage onto the MXREF attributes.  Just keeps things running more efficiently.
By role reconciliation, I mean executing the functions/tasks needed to reassert the roles on the user.  I think there's a built in scripting function to do this or you can automate the add/remove functionality you described in your message, holding the role MSKEYs in a temporary attribute.
Matt

Similar Messages

  • Changes not being published

    I'm having trouble with my changes not being saved/published.
    I can choose to edit a page, click publish... it then shows the
    page (in contribute) with my changes. But, when I go to the actual
    website, the changes are not there... and when I go back to
    contribute and move around in contribute's view of my website and
    go back again to the page I was working on.. the changes are no
    longer there.
    thoughts? Should I uninstall and re-install
    contribute?

    No, don't uninstall...
    First, emty the cache of you Internet Explorer and see if you
    can see the changes then.
    1. Main menu in IE, go to Extra>(internet)Options
    2. go to Browsing History
    3. click Remove... (delete/empty, I don't know the text of
    the btn in english version) and emty your cache.
    Second, change the settings of IE.
    1. Main menu in IE, go to Extra>(internet)Options
    2. go to Browsing History
    3. click Preferences (next to Remove.. btn mentioned above)
    4. change the setting for Temporary Internet files so that
    the pages refresh everytime you visit the pages.

  • Mapping change not being deployed

    Hi All
    We're experiencing an issue where any changes we make to a map or orchestration is not being deployed once the assemblies and re-deployed on the server.
    I have tried the following - 
    1. The normal process of stopping the host instance, re-deploying the assemblies and updating them in the resources folder then restarting the host again
    2. Rebooting the machine and re-deploying
    Process 1. has always worked in the past, not sure what could be happening. Any clues?
    Regards
    Riaz

    Any of the following could be the cause for your problem:
    May be you’re not rebuilding your artifacts like maps or orchestration. You simply build the components. Try to rebuild the artifacts, for the changes to reflect in the assembly you deploy.
    I understand that you add the assemblies in Resource folder, but may be you’re not gacing them. GAC the assemblies you have updated, restart the relevant host instance. Either use the GACUTIL
    command or check the ADD to GAC checkbox when you add the assemblies to the resources folder to gac the assemblies.          
    May be updated assembly is deployed properly, but the section of the update code is not executed (not covered in execution) because of any data/business rule. Ensure that you have correct test
    data which would execute the updated code.
    If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

  • Business area is not being specified in cost center master.

    Hello Professional friends,
    When i specify Business area in existing cost center master data, it appears an error massage -    "Field change Business Area is not possible (transaction data already exists)"
    I tried to change the validity by analysis Period, when i do this, it appears anothe error " No further processing (contact your system administrator)"
    Its user critical requirement that he want to specify business for all new and existing cost center.
    there is no problem with new cost center.
    Waiting for valuable suggestion.

    Hello,
    The rule is that if you make any actual or planned date within the current year, you cannot make any changes to any of the organizational units within the cost center master.
    From the next year, you can remove / change the business are within the cost center master, provided:
    You have to change the validity period of the cost center master by doing:
    Go to KS02
    Edit ==> Analysis Period
    put your cursor on the valid from e.g. 01.01.1900 and click F5 (the line gets selected and become blue)
    Click on Other Analysis period and then change the analysis period. The new analysis period must be starting with the first date of the next fiscal year.
    Now change or remove the business area.
    For this year, surely you cannot change the business area, since there postings.
    Do not try to write any ABAP program to change the standard in order avoid the business area change error, it would end up data inconsistencies.
    Thanks,
    Ravi

  • Changes not being saved in Address Book

    Hi,
    I've been editing one of the entries in my Address Book (deleting the surname input), but every time I do this and go out of Address Book the surname comes back. Not a massive problem, but it's very annoying especially as it all links in to Mail etc.
    If anyone knows why this is and how it can be fixed it would be much appreciated.
    Thanks in advance.

    I just encountered the same thing while setting up a couple new Macs with 10.6.8, it's very frustrating, but I found the solution, at least in my case. Maybe this is the same problem you are encountering:
    I imported a whole bunch of contacts from another Mac to the first one (using a batch vCard). Anyway, I noticed a few of them were out of date so I edited them. Then I saved them (using both the export vCard group and the Address Book archive), then I took that file to the second Mac I was setting up, and imported them. but I noticed that most (but not all) of the changes I'd just made (prior to exporting) were not saved. This was quite a puzzler, and took a little while to figure out why some changes were being saved and not others.
    I believe this problem is due to a interface design flaw in Address Book.
    You see, when you press the "Edit" button to unlock a contact record, the "edit" button turns blue (signifying that the record is editable). But what's not clear is that none of the changes are actually committed until you press the exact same "Edit" button again to commit all the changes you've made (on that record and any others edited since the "Edit" button was last clicked).
    So, really, what's missing here is a warning dialog. When you select an Export option, and the "edit" button is still blue, a dialog should appear saying that "recent changes are unsaved and will be lost" (or something to that effect). In my opinion, the edit button should probably turn into a "Save Changes" button or something like that.
    This is especially confusing, because the uncommitted changes are persistently visible in the Address Book even after switching contacts. In most databases, uncomitted changes are lost as soon as you leave a record without saving, but not in Address Book. It looks like all your changes have been made even though they aren't. And I think it's fair to say that the typical user will assume that when you export the address book contacts, the export will appear identical to how it appeared when they saved it, but if the "Edit" button was blue during the save, that will not be the case, and there is no warning to that effect. So it leads to unexpected behavior in that some recent changes are saved but the most recent are not.
    Anyway, I'm sure there'll be other opinions as to the interface design, but it's clear to me this is the problem, and the solution is to always make sure the "edit" button is NOT blue before saving or exporting the address book or contacts.
    I also wouldn't have noticed it unless I was trying to set up two computers at once (since the changes were so minor, I might have not ever noticed they weren't saved otherwise). So I wouldn't be surprised if this problem has been around for a long time and I never noticed it before.
    Hope that helps...

  • Item level changes not being updated.

    Hi,
    I am implementing BADI BBP_DOC_CHANGE_BADI, method BBP_PO_CHANGE.
    The problem that I am facing is that whenever, I change anything at the Item level, after the PO has been created, (say for eg item quantity), it is not being updated to the database. I also noticed one thing. When I click on the order button (after changing the item quantity) the import parameter of the BADI it_item of the is empty. Also I am checking in transaction BBP_PD, whether the update has happened.
    Thanks in advance
    Pete

    Hi Yann,
    Below is the code in the BADI BBP_DOC_CHANGE_BADI.
    method IF_EX_BBP_DOC_CHANGE_BADI~BBP_PO_CHANGE.
    CLASS cl_exithandler DEFINITION LOAD.
    DATA: LV_CUF_BADI TYPE REF TO IF_EX_BBP_CUF_BADI, "ZCL_IM_SRM_TANDC_BADI, ",
      LV_CUF_BADI_ACTIVE.
    DATA: IV_MODE   TYPE xfeld,
            IS_CUF_HEADER  TYPE BBP_PDS_HEADER,
            IS_GETDET_HEADER TYPE BBP_PDS_PO_HEADER_D,
            ES_UPD_HEADER TYPE BBP_PDS_PO_HEADER_D,
            IS_UPD_HEADER TYPE BBP_PDS_PO_HEADER_U,
            LV_CHANGE TYPE C,
            IS_ITEM TYPE BBP_PDS_ITEM ,
            IS_ACC TYPE BBP_PDS_ACC,
            IV_DOC_TYPE TYPE CRMD_ORDERADM_H-OBJECT_TYPE VALUE 'BUS2201',
            LV_INCLUDE_NAME TYPE DD03P-TABNAME VALUE 'INCL_EEW_PD_HEADER_SSF_PO',
            LT_DDIC TYPE DD03TTYP,
            LV_REPID TYPE SY-REPID,
            LV_DYNNR TYPE SY-DYNNR,
            I_HEADER LIKE IS_CUF_HEADER,
            GV_CLAUSE_ID(256) TYPE C,
            LV_FLAG(1),
            LV_IMP(1),
            LS_COUNTER(1),
            LS_COUNT(1),
            LS_NUMB(1),
            LS_GUID(32),
            LS_GUID_INIT(32),
            LS_GUID_BLANK(32) TYPE C VALUE SPACE,
            LS_NUMB_BLANK(1) TYPE C VALUE SPACE,
            LS_CNT(1),
            LV_UCOMM(4),
            EV_OKCODE TYPE SY-UCOMM.
    DATA: WA_PDHSC TYPE BBP_PDHSC,
    WA_PDHSC_SEL TYPE BBP_PDHSC,
    *wa_it_item type BBPT_PD_PO_ITEM_ICU,
    WA_IT_ITEM TYPE BBP_PDS_PO_ITEM_ICU,
    wa_et_item TYPE BBP_PO_ITEM_BADI,
    WA_HCF TYPE BBP_PDS_HCF_PO.
    LS_COUNTER = LS_COUNTER + 1.
    IF SY-UCOMM = 'SAVE'.
    IMPORT LV_TEXT TO LV_IMP FROM MEMORY ID 'TEXT'.
    LV_IMP = LV_IMP + 1.
    EXPORT LV_TEXT FROM LV_IMP TO MEMORY ID 'TEXT'.
    ENDIF.
    IF SY-UCOMM = 'CHEC' OR SY-UCOMM = 'ENT1' OR SY-UCOMM = 'SAVE' OR SY-UCOMM = 'LIST'.
      GET PARAMETER ID 'NUMB' FIELD LS_NUMB.
      IF LS_NUMB IS INITIAL.
        MOVE IS_HEADER-GUID TO LS_GUID_INIT.
        MOVE LS_COUNTER TO LS_COUNT.
        SET PARAMETER ID 'GUID' FIELD LS_GUID_INIT.
        SET PARAMETER ID 'NUMB' FIELD LS_COUNT.
      ENDIF.
    ENDIF.
    MOVE-CORRESPONDING IS_HEADER TO I_HEADER.
    IMPORT LV_TEXT TO LV_IMP FROM MEMORY ID 'TEXT'.
    IF SY-UCOMM = 'SAVE' AND LV_IMP = 2.
    CALL METHOD cl_exithandler=>get_instance
    EXPORTING
    exit_name = 'BBP_CUF_BADI'
    IMPORTING
    act_imp_existing = LV_CUF_BADI_ACTIVE
    CHANGING
    instance = LV_CUF_BADI.
    MOVE SY-UCOMM TO LV_UCOMM.
    LV_REPID = 'SAPLZSRM_CUST_SCREEN'.
    LV_DYNNR = '1001'.
    GET PARAMETER ID 'GUID' FIELD LS_GUID.
    IF LS_GUID NE IS_HEADER-GUID.
      I_HEADER-GUID = LS_GUID.
    ENDIF.
    CALL METHOD LV_CUF_BADI->PUT_DATA
    EXPORTING
              is_header             = I_HEADER
              is_item               = IS_ITEM
              is_acc                = IS_ACC
              iv_doc_type           = 'BUS2201'
              iv_include_name       = lv_include_name
              iv_mode               = IV_MODE
              it_dd03p              = lt_ddic
              iv_caller_dynnr       = '1000'
              iv_caller_repid       = SY-REPID
            IMPORTING
              ev_repid              = LV_REPID
              ev_dynnr              = LV_DYNNR.
    CALL METHOD LV_CUF_BADI->GET_DATA
        IMPORTING
          ev_okcode = EV_OKCODE
        CHANGING
          es_header = I_HEADER
          es_item   = IS_ITEM
          es_acc    = IS_ACC.
    ENDIF.
    WA_PDHSC-GUID = IS_HEADER-GUID.
    WA_PDHSC-ZZ_OPT_TERM_COND = I_HEADER-ZZ_OPT_TERM_COND.
    MOVE-CORRESPONDING IS_HEADER to ES_HEADER.
    MOVE IT_PARTNER TO ET_PARTNER.
    loop at it_item into wa_it_item.
    MOVE-CORRESPONDING wa_it_item to wa_et_item.
    append wa_et_item to et_item.
    endloop.
    MOVE IT_ACC TO ET_ACC.
    MOVE IT_HCF TO ET_HCF.
    MOVE IT_ICF TO ET_ICF.
    MOVE-CORRESPONDING WA_PDHSC TO WA_HCF.
    APPEND WA_HCF TO ET_HCF.
    IF LV_UCOMM = 'SAVE' AND LV_IMP = 2.
      SELECT * INTO WA_PDHSC_SEL FROM BBP_PDHSC WHERE GUID = IS_HEADER-GUID.
      ENDSELECT.
      IF SY-SUBRC = 0.
        UPDATE BBP_PDHSC SET ZZ_OPT_TERM_COND = WA_PDHSC-ZZ_OPT_TERM_COND WHERE GUID = IS_HEADER-GUID.
        SET PARAMETER ID 'GUID' FIELD SPACE.
        SET PARAMETER ID 'NUMB' FIELD SPACE.
        CLEAR LV_IMP.
        EXPORT LV_TEXT FROM LV_IMP TO MEMORY ID 'TEXT'.
      ELSE.
        INSERT INTO BBP_PDHSC VALUES WA_PDHSC.
        SET PARAMETER ID 'GUID' FIELD SPACE.
        SET PARAMETER ID 'NUMB' FIELD SPACE.
        CLEAR LV_IMP.
        EXPORT LV_TEXT FROM LV_IMP TO MEMORY ID 'TEXT'.
      ENDIF.
      COMMIT WORK.
    ENDIF.
    endmethod.
    Let me know if you need any clarifications.
    Thanks,
    Pete

  • Business Role change made password deactivated or reset in ABAP systems.

    Hi,
    We recently made changes Business role by adding technical role but this changes has deactivated or reset password for assigned users who had Productive password in connected ABAP system.
    We have two type of users, one who access SAP Portal and ABAP with Single Sign on and second who login into Portal and ABAP with password.
    This BR change has impacted second type of users who had Productive password.
    Regards,
    Manish

    Hello Manish,
    you have marked the thread as "Assumed answered". Could you please share with the community the outcome of your OSS ticket with SAP, so that others can benefit, too? Then you can mark the post as answered. Right now the thread isn't really helpful to anyone (neither you nor the community).
    Also, if you answer Jai's questions, maybe we can help in solving your problem?
    Having several irons in the fire can't be bad, right?
    Regards,
    Steffi.

  • CRM 2007 Business Role IC_AGENT not showing the whole screen

    Hi,
    I set up CRM 2007 successful for a couple of standard roles like TPM_PRO, SALESPRO and SERVICEPRO. The system is working fine. Assigning the business role IC_AGENT is showing me an uncomplete screen. The area for navigation bar, the account info, the alerts and the communication information is blank. Has somebody an idea what is wrong?
    Thanks and best wishes,
    Andreas

    Hi Prasoon,
    unfortunatly I cannot help you. It is still not working. Luckly was that CRM 2007 we were just preparing for demonstration. So at the end we showed something different.
    But next step what I would do is open an OSS message due to the fact that it is a standard role and it has to work.
    Best regards,
    Andreas

  • Why are recently added/changed Notes being emailed to me?

    Since the first of the month, any new or changed Notes documents are being sent to my Moble Me email.
    I am not using the cloud for storage but backing up to the computer.
    Since the recent OS upgrade, there have been other strange things are happening other than this issue.
    I had never really looked at setting for notes before, but other than the font, the default account is [email protected] The only other option is "On My Mac"

    Have a look under Playlists, Artists, Genres, and make sure you haven't checked something there that collects all her stuff. For example, if you had Beyonce checked under Artists, it'll transfer *all* Beyonce music.
    As an experiment, uncheck everything in those three lists, so you *only* have checkmarks under Albums.
    Hope that helps

  • Business role customizing not working in crm 2007 web client

    Can someone tell me what services need to be activated via sicf for business role customizing to work in the Web Client under the Administration component in CRM 2007.  I have everything else working in this are eg surveys, document template, fact sheet configuration, view configuration but the business role customizing when selected just opens a blank screen
    Thanks in advance
    Eddie

    Hi Eddie,
    The SAP CRM 2007 Master guide suggests enabling all the SICF services in the SAP namespace.
    We had some script errors in CRM UI, but once all the SICF services were activated, they simply disappeared.
    The IDES demo systems are also set up this way, so you can try doing it.
    Regards,
    Padma

  • Published iCal changes not being picked up on wife's subscribed iCal

    Help... I sold my wife on getting an Mac & iPhone because I told her that we could share a published calendar for our 5 year old daughter's care. We're separated.
    Aside from having soOo much trouble getting the published calendar "JRae" to just show up on her desktop (and then iPhone)-- which we finally did. I thought we were home free.
    Now I know that with this setup, only the publishing computer's iCal owner can make changes to that published calendar (which works for us), bu the very first change I made to "JRae" (which synced just fine between my desktop Mac, my Laptop, and my own iPhone), was unfortunately-- two days later, never picked up on my wife's Mac Desktop or iPhone's iCals.
    Little Jasmine Rae sat out in front of her school waiting for someone to come get her!! ARGGHGG!!
    What gives? Isn't this the whole point of "published" calendars?
    I've got the very latest Mac OS (I think). My wife's computer is an slightly older eMac, running 10.4.11.
    Thanks in advance for any help...
    a (frustrated) Mac lover,
    Matt

    Why didn't adding the new method to the existing class work?
    2) Given that I can demonstrate my changed jar is being used by the formBoth statements point to the direction that the "old" class is still there, but maybe in a different jar-file. java takes the first occurence of a class, so maybe for the "old" class it finds it in a different jar, but the "new" class is not found in that jar and therefore taken from the actual jar. check The archive or archive_jini-tag and remove all unused or redundant jars. You maj also try to clear the jar-cache.

  • Forms Bean changes not being picked up from updated jar

    I've got an existing, working Bean with a single static method which my forms use to check the last modified date on a file. I've been trying to add a second method, with no luck. In an attempt to see if my new jar was being picked up, I changed the existing method to simply return "testChange". When it continued to return the string representation of the file modification date, I assumed my jar change wasn't being read.
    However, I eventually tried creating my new method in a separate class, this time not extending VBean, and include it in the same jar. I can now execute my new method just fine.
    My questions are
    1) Why didn't adding the new method to the existing class work?
    2) Given that I can demonstrate my changed jar is being used by the form, how on earth is the old method still returning the file date, when the code doesn't do that anymore???
    I've got it working, but I'd really like to understand why my previous attempts failed.
    Original class:
    public class myClass extends VBean
         public static String getLastModified(String filename)
              File file = new File(filename);
              return Long.toString(file.lastModified());
    Forms invocation:
    FUNCTION get_last_modified_date (file_name_in IN SWtype.SW_long_string)
    RETURN DATE
    AS
    v_last_modified SWtype.sw_long_string;
    BEGIN
    v_last_modified :=
    fbean.invoke_char ('SW_WEBUTIL_BLK.SWFILEUTILS'
    ,1
    ,'getLastModified'
    ,file_name_in
    return TO_DATE ('01/01/1970 00:00:00', 'DD/MM/YYYY HH24:MI:SS')
    + v_last_modified/(86400 * 1000);
    END;
    Method changed for testing:
    public class myClass extends VBean
         public static String getLastModified(String filename)
              return "testChange";
    New method:
    public static boolean isValidUTF8(String filename) throws FileNotFoundException,
    IOException
    <if not valid UTF8>
    return false;
    return true;
    Invoking the new method when it was in the bean (just returned null):
    v_result := fbean.invoke_bool('SW_WEBUTIL_BLK.SWFILEUTILS'
    ,1
    ,'isValidUTF8'
    ,:my_blk.file_name
    Invoking the imported Java method now that it's in its own class:
    v_result := myfilevalidator.isValidUTF8(:upload_blk.source_file);
    In case it's relevant, I'm using JDeveloper 10.1.3 and Forms Builder 10.1.2.0.2, running the forms locally on my OC4J instance.

    Why didn't adding the new method to the existing class work?
    2) Given that I can demonstrate my changed jar is being used by the formBoth statements point to the direction that the "old" class is still there, but maybe in a different jar-file. java takes the first occurence of a class, so maybe for the "old" class it finds it in a different jar, but the "new" class is not found in that jar and therefore taken from the actual jar. check The archive or archive_jini-tag and remove all unused or redundant jars. You maj also try to clear the jar-cache.

  • Why isn't aren't my meta data changes not being saved

    I've tried to make several of my albums on iTunes a compilation, the changes seem to be saved, but a minute later they revert.  What gives.

    How did you carry out the redirection? The correct way is to add the 'itunes:new-feed-URL' tag to the original feed, containing the URL of the new feed. If that's what you did do move to the Feedburner feed this is permanent until you add the same tag to the Feedburner feed redirecting back to the original feed.
    Similarly if you used a server redirect, depending on how it was done, if it was a permanent redirect iTunes is stuck on the Feedburner URL.
    You are going to need to reconstitute the Feedburner feeed at the same URL and add the redirection tag as instructed here:
    http://www.wilmut.webspace.virginmedia.com/notes/podcast.html#move
    Failing that, you can try emailing them at podcasts 'at' apple.com - give them the iTunes Store URL you posted above - and ask them to move the Store to the podbean feed.

  • Time Reporting Periods page - Status change not being saved

    I'm a Project Server 2013 Admin and I'm trying to change the status of some time periods from Open to Closed.  When I select Closed for a few time periods and click Save, nothing happens and my changes are not saved.  For accounting purposes
    I need to be able to close out time periods.  Please help!

    K Levesque,
    You might want to delete this and re-post to the Project Server forum at: http://social.technet.microsoft.com/Forums/projectserver/en-US/home?forum=projectserver2010general. This forum deals primarily with questions about the stand alone installations
    of Project.
    John

  • Keyboard input source change not being saved.

    Since upgrading to 10.9 my original French spec Mac Mini reverts to French Keyboard input source when I close down, even after resetting keyboard input source to British PC on the login screen when booting up. Is there a more permanent setting option stored elsewhere?

    Hi Brendan,
    Thanks for the link. I did go into system preferences and checked that British was the default setting. In fact it was the only setting. Have subsequently done a bit more research. Up to now I have been changing input source at the initial login screen from French to British. I have just typed my username and password in using a French keyboard layout without changing the input source from French. It gets me in and the default input source is showing as British, which it is picking up from the system preferences. So there must be a setting somewhere that is specific to the login screen.
    Done some more searching online and it looks like it may be a bug!
    https://discussions.apple.com/message/23769843#23769843
    There seem to be a few workarounds https://discussions.apple.com/thread/5485931
    However, I have not worked at this level on a Mac before having a background in Windows support, Only recently getting a Mac. The last comment looks like some kind of Unix stuff, which I know OSX is based on.  Is there an idiots step by step guide anywhere to carry out the plist edit etc?

Maybe you are looking for

  • Imac &  connecting to PC's

    my imac cant seem to connect to my PC despite using the correct log on commands.My PC can log on to the imac however. Can anyone help? I use airport and a netgear 614 wireless router. The imac and the PC can accsess the internet with no problem.

  • Allow embedded flash video to be maximised to fill the screen

    I want the user to be able to click a Full Screen button like YouTube so that the video fills the whole screen. I think this is done by using the code allowFullScreen but I can't get this to work. Here is my code: <div align="center">   <embed src="F

  • Bought new printer epson Xp-405 but it does not show AirPrint printer any ideas

    Cannot connect to my printer epson Xperia-405 it does no see printer both are on the same wi-fi network, have turned both iPad and printer off but still nothing.

  • PEAP + EAP-MD5

    I've read that with the ACS 3.1 the only eap-type supported with PEAP is GTC. Why it is not possible to use EAP-MD5 or EAP-TLS with PEAP? These EAP-type were already supported in ACS 3.0... Thanks for your time.

  • How to identify userexits include program which can be modified

    hi frndz, plz don't give me the program which is circulating in forum bcoz i kno tht progm it gives the userexit and BADI but i want to get the include programs for eg:MV45FZZ for VA01 tcode....how to get the include programs like this for other tcod