Create a portal user with a specific Organizational Unit in the OID??

I would like to split my portal users by Organizational Units in the OID.
e.g.:
ou=country1, cn=user1
ou=country1, cn=user2
ou=country2, cn=user3
is it possible?
is it possible trough the administer tab of Portal?
Any experience ?
feedback??
Thanks
Didier

I think it is feasible.
But not through Administer tab.
Use your own api to add users (DBMS_LDAP.add_s + WWSEC_API.add_portal_user)
cn=user1, ou=country1, cn=user_search_base
cn=user2, ou=country2, cn=user_search_base
or maybe try to change dynamically user_create_base, I don't know if it is possible or not

Similar Messages

Create new portal-user with webservice

Hi,
I'm trying to develop a ejb-webservice which is creating a new Portal-User.
The webservice is working so far, I made methods like getDisplayName() which is returning the display name to a logonId and so on. All this is working. I'm using the component sap.security.api.sda for this.
Problem: User-creation is not working. I think the problem might be, that a webservice is not authorized to create users? Or putting it in another way: Is it possible that a webservice is "logging in" at the portal, or sohehow authorizing itself?
Thanks and regards
Jan Hempel

Hi Detlev,
thanks for Your answer.
It seems like that the problem was caused by using array-parameters in the webservice-method?!
Strange, but after removing the array-parameter from the method it worked! Before the webservice never returned anything, not an error or anything else.
Well, strange enough, but I can live with that.
regards
Jan

How do I create admin console users with full access to configuration and the directory in every instance?

I want to be able to create directory user ID for the iPlanet administrators. They should be able to access the admin console and all the instances created. They should be able to configure each instance and directory. I was able tocreate Admin Server Administrators but they were only able to modify the directory(tab) and not the configurations(tab). Any help would be greatly appreciated!
Thanks.
Keith

Hi Keith,
In o=netscaperoot, edit the static group called cn=Configuration Administrators, ou=Groups, ou=TopologyManagement, o=NetscapeRoot - this group contains the admins peer to your config admin. Since the console is quirky and doesn't let you add in users not in netscaperoot, just click advanced and put in the full dn of whoever you want in by hand, e.g., uid=scarter, ou=people, dc=mydomain,dc=com as a static member. then rebind to the console with the full dn and passwd, and away you go :)
james

How to create a Domain user in a Specific OU using System Center 2012 R2 Orchestrator and Service Manager

Dear All,
I have a simple Runbook with the following details:
Initialize Data: (First Name, Last Name, Login Name, Deparment Name) --> Create User: Name:(Domain), Common Name, Display Name, First, Last Name, SAM Account Name (From Initialize Data) --> Enable
User: Distinguished Name --> Add User to Group: Group Distinguished Name, User Distinguished Name
Active Directory Management Pack in place and the Prerequisites Configurations are added Too (Configuration User Name, Configuration Password, Configuration DC, Configuration Default OU.
The Runbook is Synched with Service Manager, Request Offering/Service Offering and published to the portal.
When I filled the 4 required values (First Name, Last Name, Login Name, Deparment Name), the Runbook will kick off and the user is created in Active Directory.
The user is placed in the Default OU which is predefined in AD Prerequisites Configurations in Orchestrator.
I need to add another Required Value to my Request Offering (SR) called User Level Enum List (Low, Medium, High).
I need to place the user in a Specific OU based on the Level entered from SSPortal, If the user is Low, then Create the user in this OU, if the user is Medium then create it in this OU, etc...
How can I do this in Orchestrator? What I want to modify in my runbook to accomplish this task?
Thank you,

I AM TRYING TO USER/MAILBOX CREATION PROCESS, FOLLOWING IS THE BUSINESS REQUIREMENT
GET THE USER FROM ERP SYSTEM (SQL)
CREATE USER IN SPECIFIC OU
ENABLE THE MAILBOX IN SPECIFIC DATABASE BASED UPON USER ROLE
CREATE A USER IN NAVISION SYSTEM WHICH IS AGAIN JUST CREATING SQL LOGIN.
PLEASE ADVISE ME THE PROCESS AND PROCEDURE ILLUSTRATION IF IT ALL POSSIBLE IN SINGLE RUNBOOK.
I AM ABLE TO CREATE USER/MAILBOX BUT STRUGGLING TO CREATE IN SPECIFIC OU/MAILBOX DB AND SQL LOGIN.
FARRUKH
[email protected]
Farrukh Anwar

Mapping between multiple portal user with single R/3 user

Hi,
It is possible to map multiple portal user to the single R/3 user? If yes, than what is procedure to achieve it? It is possible to logon same time more than one portal user which is mapped with same R/3 user in production system?
Thanks,
Kundan

you can always do that using user mapping in user admin->identity management
where for each user details you get a tab called user mapping.
you have to create a R3 system in system admin and a give a system alias to it
Use this system alias in user mapping /
You can map multiple portal users with a single R3 user and can work parallelly.
But make sure that you have proper license in doing that.
Raghu

How can i create a new user with only read rights ?

How can i create a new user with only read rights ?

You are asking about a Database User I hope.
You can look into the Oracle 8i Documentation and find various privillages listed.
In particular, you may find:
Chapter 27 Privileges, Roles, and Security Policies
an intresting chapter.
You may want to do this with the various tools included with 8i - including the
Oracle DBA Studio - expand the Security node and you can create USERS and ROLES.
Or use SQL*Plus. To create a
user / password named John / Smith, you would login to SQL*Plus as System/manager (or other) and type in:
Create user John identified by Smith;
Grant CONNECT to John;
Grant SELECT ANY TABLE to John;
commit;
There is much more you can do
depending on your needs.
Please read the documentation.
-John
null

Create a new user with Privileges to execute Seeded API's

Hi,
We have a requirement from our client, they want to create a new user with Privileges to execute Seeded API’s,
So they dont want to execute using APPS user.
We want to know is it possible to have a new user for executing seeded API's and if so what all priveleges we need to have.
We are on 12.1.3 with 11.2.0.3 two node RAC Database on Exadata and Exalogic servers.
Waiting for your suggestions and replies.
Thanks

Hi,
Plz update this forum,
and give me a suggestion at the earliest,
Waiting for your valuable advice.
Thanks

CUA - Creating a test user with profile

Hi All,
I just set up the CUA in our newly installed solution manager which is the central system and another sandbox system with three clients as the child systems.
I referred to the follwoing for the setup:
http://help.sap.com/saphelp_nw2004s/helpdata/en/cc/50b43be7492354e10000000a114084/frameset.htm
One of the tests for checking the setup is to create a test user with profiles in the central system and distribute it to the child systems. I did the text comparision and saved the user; i still cannot see the user in the child systems.
I checked SCUL and BD87. SCUL shows me grey. BD87 do not show any IDOC that were transferred.
Could anyone help/direct me in fixing this.
Thanks
Shabna

Hi,
To make the test simpler I tried it again sending the test user to only one of the child systems. The RFCs between the systems are working fine. I checked /BD64, it shows the whole set up.
When I check /BD87 of the central system I see the following error:
"Could not find code page for receiveing system".
Diagnosis
For the logical destination XXXCLNTXXX, you want to determine the code page in which the data is sent with RFC. However, this is not currently possible, and the IDoc cannot yet be dispatched.
Procedure for System Administration
Possible causes are:
1. The entry no longer exists in the table of logical destinations.
2. The target system could not be accessed.
3. The logon language is not installed in the target system.
I can see the central system as well as the child systems in the logical systems table. And the RFC destination does note shown any errors in the connection as well as authorization test. What else do I check?
Thanks
Shabna

How to create full new user with all privileges

how to create full new user with all privileges?
and how to delete existing users?
Thanks in advance..

Common solution is probably to use sudo for privilege elevation, wiki should help

Create multiple portal instances with only one database?

Can someone create multiple portal instances with only one database?
If so, how is this done, just by running the portal configuration wizard?
How are most people running with multiple developers working on portal? Do they share a portal instance, or create their own?
Thank you very much!
Phillip

i'm currently using 9ias rel 2(9.0.2) and i have install one infrastructure and two mid tier, hoping that this will create two portal, but it didn't. Can you please tell me how to do create two portal within one server.
thanks and regards;
andrew

Is there a way on CONVERSION to create a sales order with a scheduled ship date in the past?

Is there a way on CONVERSION to create a sales order with a scheduled ship date in the past?
Customer wants to maintain the original scheduled ship date on converted ordered, but the scheduled dates is defaulting to sysdate for past due shipments on converted orders.

Hi Friend,
As of now there is no functionality to display SSD,RD,PD backdated, max it can be sys date, not lower then that.
Regards
Shyam
Please see following Metalink Note ID for all in One solutions
Oracle E-Business : All In One Metalink Note ID's
If you are happy with the Document, please mark as Helpful by doing so this will provide assistance for other people looking for answers to their queries.

I've created a new user but don't see it in the login screen

I've created a new user but don't see it in the login screen. Can somebody help?

Hi,
Before going further, I’d like to recommend you check if the address list is visible in OWA.
If yes, this issue occurs when the AddressBookRoots attribute of the Microsoft Exchange object does not have the same distinguished name value that is set in the All Address Lists attribute.
For more detail resolution, you can refer to the following article:
http://support.microsoft.com/kb/982351
Thanks,
Angela Shi
TechNet Community Support

Just bought a 3TB Time Capsule for a small office. Will have 4 users with MacBooks. What would ne the best setup for time machine individual backups and internet sharing in a secure way?

Just bought a 3TB Time Capsule for a small office. Will have 4 users with MacBooks. What would ne the best setup for time machine individual backups and internet sharing in a secure way?

Set up each Mac for Time Machine backups in the normal way. Time Machine will keep each backup separate on the Time Capsule, so users will only be able to see the backups of their own Mac.
Yes....there are convoluted workarounds that might allow one user to see the backups of another.....IF...they know the administrator password of the "other" Mac.
As far as Internet sharing, all users will have access to the Internet if they have a wired or wireless connection. If a Mac connects using wireless, it is possible to limit the time that they are allowed to connect to the network.
For example, you might limit the ability to connect to the wireless from say each Weekday from 8 AM to 6 PM.
With a wired Ethernet connection, you cannot limit access times to the Internet.

Not able to Assign Organizational Units to the Sites

Hi all,
while configuring intercompany billing I am not able to assign the Organizational Units to the Sites.
I am in retail system and maybe here I have to do something else before seting up the intercompany?
Thanks in advance
L

Hi,
Go through the Building block and their prerequisites
http://help.sap.com/bp_bblibrary/600/html/R01_EN_DE.htm
http://help.sap.com/bp_bblibrary/600/html/R41_EN_DE.htm
Thanks
Chidambaram

Creating portal users with owner privileges?

Hello,
I need to let local adminstrators create users in the portal.
This is based on instance-specific privileges, not global.
Setting them to 'owners' of the group in the portal should let them add users.
Once created and I log in as one of them I do not have the privileges of being an
'owner', eventhough it's visible in the portal that I am an owner.
Anybody?
/

Hi,
To make the problem a little clearer.
I want to have "local adminstrators" that can manage portal users i.e; delete, insert and update portal users.
However I do not want these "local administrators" to be "Full administrators"- too dangerous.
The "local adminstrators" should belong to the same group as the users they are set to administer. The
only difference between a "local administrator" and a user of a group is that the "local administrator" have privileges
to manage the other users of the group. If I have understood the concept right an owner have these privileges.
I made them owners of the group, but this did not enable them to manage users.
This must be a rather common approach, to have some users being able to administer other users without being a fullfledge DBA.
Right now I'm looking into mapping them(the local administrators) to a different database schema with rights to manage users.
I realize that to map them to another schema, then the checkbox "Use this schema for Portal Users" have to be checked when creating the
schema. How do I check if this was checked and if it wasn't checked can I alter it now?
Another thought is to dynamically upon meeting certain conditions making them Full Administrators, then after finishing the task
reinstating them as normal users.. but this.. well hmm
Thanks.
/

Create a portal user with a specific Organizational Unit in the OID??

Similar Messages

Maybe you are looking for