Create/Admin Groups

Hello,
I am currently using the Application System Server 9. Could you please let me know how to Admin user groups (list,create,delete...)?
I am able to create users in the system Realms and assign them to roles, but there is not any option for the groups.
Any help will be appreciated
regards,
Sito
http://www.insit.es

Vikram,
We are configuring an LDAP security realm for our portal application. Theconfiguration
document says that we need to create certain Admin groups in LDAP likeAdministrators,
AdminELIGIBLE, DelegatedAdministrator and a SystemAdministrator group.I've 2
questions in this regard.
1. Many applications would be using the same LDAP repository. So I amassuming
that for eachapplication all the Admin groups mentioned above would becreated
under the Application specific group.You only need to create these groups once for your LDAP Realm. They are not
created for each application.
2. Can't we have these Admin groups site in the FileRealm instead ofhaving them
in the LDAP realm as the user population in these groups is going to bevery small.
Yes you can have these admin related groups placed in your FileRealm. There
is a document that discusses this. It lives somewhere on dev2dev.bea.com
but I am just going to attach it. See attached.
Hope this helps.
russ
[Portal_70_Delegated_Administration_with_a_Custom_Realm.doc]

Similar Messages

How to create public group in office 365 admin panel?

Dear Microsoft ,
I try to create group in office 365 admin panel but in that group when i add outsider mail id eg([email protected],[email protected]) is not created ...it's showing error.Can please help me to how i create public group in office 365 ?

Hi,
Which error message does it show?
Based on my research, internal users (users that have a mailbox in your organization) and external users (people that don’t have a mailbox in you organization) can be added as members of a distribution group. However, only external users
that have been added to your organization’s address book (also known as shared contacts), can be members of a group. For information about how to add external users to your organization’s address book, see
Create and use shared contacts.
Hope this helps.
Regards,
Steve Fan
TechNet Community Support

How to add an SG to the Admin Group of a newly created VM in SCVMM cloud

Hi, have given a team access to the SCVMM private cloud to create there own VM's , what I would like todo, is to add the SG that these guys are a member of to that servers Admin Group.
Otherwise they cannot log in, when once there server is created.
it joins to the domain fine etc.
Now, can this be done via PS in the template somewhere, or is there another way. ??
any ideas greatly appreciated
Thanks
Mark Green

Since VMs are domain-joined, then you can use GPOs to configure them. Create a group policy for these VMs and use "Local Users and Groups" in Computer\Preferences section to add your security group to the local Administrators group in VMs.
Gleb.

Admin group does not exist - creating problems

Hi,
On my computer I have no my admin rights after an update (I think). All users are standard users. I have tried to resolve this situation by following the instructions in TS1278. This does not help. I can check (enable) "Allow user to administer this computer" but it does not stay checked. Logging out and in does not help.
I have also tried creating a new user as an Administrator but it gets created as a Standard user. I did this by authenticating as root (enabled by the TS1278 actions).
# dscl . -list /groups
Lists the available groups and there is no group called 'admin' in there, perhaps this is the problem? Now my question is, how can I create a new admin group with the same id (80) as the admin group used to have?
I do not know what removed the admin group.
Thanks
Christian

See if this helps: I lost my admin user (Mac OS X 10.5) and OS X 10.5- Administrator user changes to standard.

Create new group Like "sites" in Central Admin

Hi,
How can we create new group like sites in Central admin to create in site collection?
While creating site collection, we have an option to to create site collection in root or under Sites. How can we add custom group"Coll" in that dropdown. so i can create site collection under my custom name "Coll"
Ex: http://test:1234/sites/<<Name>>
Same as instead of sites , how can we create custom name to that dropdown?
DVGR, SharePoint Developer

- Go to the Web Application -> Manage web applications
- select the web application you want to create new managed path
- click on 'Managed Paths' from the ribben
- Add 'Coll' as a Managed path and Type : 'Wildcard inclusion' and click 'Add Path'
- then when you go and crate a new site collection under that web application you will see 'coll' as a managed path
get2pallav
Please click "Propose As Answer" if this post solves your problem or "Vote As Helpful" if this post has been useful to you.

How to create user group using Visual Admin Tool

Hi
I am trying to configure the Adobe Service in WAS.As part of this process,i supposed to create the Hroup Called "ADSCallers".In document it suggested to go Servcer>Services>Security Provider.In that i selected UserManagement Engine Tab,but there "Create User","Create Group" buttons are disabled.so how to enable it so that i can create the groups/users there.please help
Thanks
Prasad

Hi,
Did you change the display mode to change mode by clicking
the "pencil" icon on the top left corner of the screen?
Best Regards
Srikishan

How to create a group calendar?

Hello,
i am sorry but this is one more question on wiki-group-calendars.
*In short:*
I am not able to create a group calendar with the wiki frontend. the calendar that is created with a wiki is owned by the admin of the wiki. So it is always a personal calendar that cannot be shared in iCal.
LONG:
I want to create a group calendar that is viewed and edited through iCal.app and the web service. Apple´s "wiki deployment" guide says on page 57:
+"The web calendar allows you to easily schedule events for yourself or your group. ...+
+There are *two types of web calendars: personal and group*. You can send and receive event invitations through the personal calendar but not through the group calendar. Also, *while anyone in a group can create or edit events in a group calendar*, you can edit only events in your own personal calendar or event invitations you send to other people.+
+The web calendar uses iCal Server to store events and invitations. ..."+
But there is not mentioned how to create a group calendar. The calendar created with the wiki web-frontend belongs to the admin of that particular wiki. This is why the calendar data ist stored in folder named with the UUID of the wiki admin. Also the alias "http://server.fqdn:8008/principals/groups/mygroupname/" which i provided in iCal turns into ..._uids_UUID-of-the-wiki-admin and only the wiki-admin can access this calendar in iCal.app.
My research on this topic reveals that there were in issue that should be resolved in 10.6.4 (that is running on our Server). So, again, how to create a group calendar?
Thanks, Philipp.
10.6.4 OSX Server
10.6.x Clients

farmer tan wrote:
you need to go to the wiki page and add the wiki's there and then in the setting of the wiki is where you set permissions and services such as calendar, blog, and podcast you can also set all permissions for the wiki in the settings tab
fyi none of my groups were available unless i logged into the wiki as the Directory Admin not Server Admin
migrated from 10.5.7 to 10.6
Message was edited by: farmer tan
Could you be more specific farmer tan, please?
You said "you need to go to the wiki page and add the wiki's there...." What is the "wiki page" you mention? Is that some place I go to via the browser or the Server Admin tool?
I went to http://ical.mysite.com/ical/ and logged in as the Directory Administrator but didn't see anything resembling what you described.
Thanks in advance for any help you can provide.

How do I create a group calendar?

Hi All,
It is still unclear to me on a fresh 10.6 install how to create a group calendar (using only the Apple server administration utilities) such that all members of a given OpenLDAP group can also subscribe to and share the same calendar if they are members of that group.
As best I can tell, there does not appear to be anything about this in the documentation. I thought this was something that was going to be supported via the server-admin tools in 10.6 without resorting to the command line.
Maybe I'm just not seeing something obvious in the tools or documentation?

farmer tan wrote:
you need to go to the wiki page and add the wiki's there and then in the setting of the wiki is where you set permissions and services such as calendar, blog, and podcast you can also set all permissions for the wiki in the settings tab
fyi none of my groups were available unless i logged into the wiki as the Directory Admin not Server Admin
migrated from 10.5.7 to 10.6
Message was edited by: farmer tan
Could you be more specific farmer tan, please?
You said "you need to go to the wiki page and add the wiki's there...." What is the "wiki page" you mention? Is that some place I go to via the browser or the Server Admin tool?
I went to http://ical.mysite.com/ical/ and logged in as the Directory Administrator but didn't see anything resembling what you described.
Thanks in advance for any help you can provide.

Error in creating Cache Group

Hi,
When i tried to create cache group i am getting below error
CREATE READONLY CACHE GROUP customer_orders
FROM myuser.customer
(cust_num NUMBER(6) NOT NULL,
region VARCHAR2(10),
name VARCHAR2(50),
address VARCHAR2(100),
PRIMARY KEY(cust_num)),
myuser.orders
(ord_num NUMBER(10) NOT NULL,
cust_num NUMBER(6) NOT NULL,
when_placed DATE NOT NULL,
when_shipped DATE NOT NULL,
PRIMARY KEY(ord_num),
FOREIGN KEY(cust_num) REFERENCES myuser.customer(cust_num)) ;
5220: Permanent Oracle connection failure error in OCIServerAttach(): ORA-12154: TNS:could not resolve the connect identifier specified rc = -1
5131: Cannot connect to backend database: OracleNetServiceName = "orcl_db", uid = "XXXXXXX", pwd is hidden, TNS_ADMIN = "C:\TimesTen11.2.2", ORACLE_HOME= ""
But my Oracle database Name is MYdatabase
Oracle LSNRCTL
LSNRCTL> status
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1522)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 11.2.0.2.0 - Production
Start Date 07-AUG-2012 10:31:38
Uptime 4 days 3 hr. 1 min. 55 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File C:\TimesTen11.2.2\listener.ora
Listener Log File E:\app\XXXXXXX\diag\tnslsnr\localhost\listener\alert\log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1522ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1522)))
Services Summary...
Service "MYdatabaseXDB" has 1 instance(s).
Instance "MYdatabase", status READY, has 1 handler(s) for this service...
Service "MYdatabase" has 1 instance(s).
Instance "MYdatabase", status READY, has 1 handler(s) for this service...
Service "orcl" has 1 instance(s).
Instance "orcl", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
how to change OracleNetServiceName = "orcl_db" to OracleNetServiceName = "MYdatabase"
Thanks!

You should create the cache groups by using cachadmin user, not use object owner user.
In Oracle DB:
SQL> @grantCacheAdminPrivileges "cacheadmin"
Please enter the administrator user id
The value chosen for administrator user id is cacheadmin
***************** Initialization for cache admin begins ******************
0. Granting the CREATE SESSION privilege to CACHEADMIN
1. Granting the TT_CACHE_ADMIN_ROLE to CACHEADMIN
2. Granting the DBMS_LOCK package privilege to CACHEADMIN
3. Granting the RESOURCE privilege to CACHEADMIN
4. Granting the CREATE PROCEDURE privilege to CACHEADMIN
5. Granting the CREATE ANY TRIGGER privilege to CACHEADMIN
6. Granting the DBMS_LOB package privilege to CACHEADMIN
7. Granting the SELECT on SYS.ALL_OBJECTS privilege to CACHEADMIN
8. Granting the SELECT on SYS.ALL_SYNONYMS privilege to CACHEADMIN
9. Checking if the cache administrator user has permissions on the default
tablespace
     Permission exists
11. Granting the CREATE ANY TYPE privilege to CACHEADMIN
********* Initialization for cache admin user done successfully *********
SQL>In TimesTen:
Command> CREATE USER cacheadmin IDENTIFIED BY oracle;
User created.
Command> GRANT CREATE SESSION, CACHE_MANAGER, CREATE ANY TABLE, DROP ANY TABLE TO cacheadmin;
Command>
Command> CREATE USER oratt IDENTIFIED BY oracle;
User created.
Command> grant create session to oratt;
Command>
[oracle@tt1 ~]$ ttIsql "DSN=db_cache;UID=cacheadmin;PWD=oracle;OraclePWD=oracle"
Copyright (c) 1996-2010, Oracle. All rights reserved.
Type ? or "help" for help, type "exit" to quit ttIsql.
connect "DSN=db_cache;UID=cacheadmin;PWD=oracle;OraclePWD=oracle";
Connection successful: DSN=db_cache;UID=cacheadmin;DataStore=/u01/app/oracle/datastore/db_cache;DatabaseCharacterSet=AL32UTF8;ConnectionCharacterSet=US7ASCII;DRIVER=/u01/app/oracle/product/11.2.1/TimesTen/tt1/lib/libtten.so;PermSize=100;TempSize=32;TypeMode=0;CacheGridEnable=0;OracleNetServiceName=ORCL;
(Default setting AutoCommit=1)
Command> call ttCacheUidPwdSet('cacheadmin','oracle');
Command>
Command> CREATE READONLY CACHE GROUP readcache
       >   AUTOREFRESH INTERVAL
       >   5 SECONDS
       > FROM oratt.readtab (
       >        a NUMBER NOT NULL PRIMARY KEY,
       >        b VARCHAR2(100) );
Command> Additionally dont forget to issue the grants for cacheadmin user in Oracle DB
SQL> GRANT SELECT ON readtab TO cacheadmin;
Grant succeeded.Regards,
Gennady

Command line to create a group

Hi,
I would like to create a group using command line. But the weblogic
document states that only mbeans under
weblogic.management.configuration and weblogic.management.runtime can
be used in weblogic.Admin command line. Is there a way to use comand
line?
Thanks,
-Qin Zhang
[email protected]

"Qin" <[email protected]> wrote in message
news:[email protected]..
Hi,
I would like to create a group using command line. But the weblogic
document states that only mbeans under
weblogic.management.configuration and weblogic.management.runtime can
be used in weblogic.Admin command line. Is there a way to use comand
line?java weblogic.Admin -username weblogic -password weblogic -url
http://localhost:7001 INVOKE -mbean
Security:Name=myrealmDefaultAuthenticator -method createGroup testgroupname
testgroupdesc
>
Thanks,
-Qin Zhang
[email protected]

Problem creating cache group for a table with data type varchar2(1800 CHAR)

Hi,
I am using TimesTen 7.0 with Oracle 10.2.0.4 server. While creating Cache Group for one of my table I'm getting the following error.
5121: Non-standard type mapping for column TICKET.DESCRIPTION, cache operations are restricted
5168: Restricted cache groups are deprecated
5126: A system managed cache group cannot contain non-standard column type mapping
The command failed.
One of my filed type in oracle table is Varchar2(1800 CHAR). If I change the filed size to <=1000 it (E.g. Varchar2(1000 CHAR)) then the Create Cache command works fine.
MyDatabase Character Set is UTF8.
Is it possible to solve without changing the filed size in the Oracle Table?
Request your help on this.
Thanks,
Sunil

Hi Chris.
The TimesTen server and the Oracle Client is installed on a 32-bit system.
1. ttVersion
TimesTen Release 7.0.5.0.0 (32 bit Linux/x86) (timesten122:17000) 2008-04-04T00:09:04Z
Instance admin: root
Instance home directory: /appl/TimesTen/timesten122
Daemon home directory: /var/TimesTen/timesten122
Access control enabled.
2. Oracle DB details
SQL> select * from v$version;
BANNER
Oracle Database 10g Enterprise Edition Release 10.2.0.3.0 - 64bi
PL/SQL Release 10.2.0.3.0 - Production
CORE 10.2.0.3.0 Production
TNS for Linux: Version 10.2.0.3.0 - Production
NLSRTL Version 10.2.0.3.0 - Production
Oracle Client - Oracle Client 10.2.0.4 running in a 32 bit Linux/x86
3. ODBC Details
Driver=/appl/TimesTen/timesten122/lib/libtten.so
DataStore=/var/TimesTen/data
PermSize=1700
TempSize=244
PassThrough=2
UID=testuser
OracleId=oraclenetservice
OraclePwd=testpwd
DatabaseCharacterSet=UTF8
Thanks,
Sunil

Cannot create a group with no members through DAS

I'm using OID 10.1.2.0.2.
It seems that the DAS Self Service Console cannot work with groups with no members:
- When creating a group, it always assigns orcladmin as a member.
- When deleting the last member from a group, an error is shown ("Require at least one user or group member").
- If you create an empty group via other means (e.g. the oidadmin tool), the group will not be visible in the "role assignment" section when creating a new user (even though we enabled that group for role assignment in the "user entry" configuration). After adding one member through the "edit group" page, the role shows up in the role assignment section.
I have a couple of questions regarding this:
1) Is this limitation (group must have at least one member) an ldap or OID limitation, or is it only a DAS or even "self service console" limitation?
2) Why is this limitation there?
3) Is there a way to work around this, i.e. make self service console be able to handle empty groups?
Any help would be greatly appreciated.
Regards,
Johan

I do not agree that a group owner should be a member of that group. For example, I have a group "admins" and a group "analysts". The "admins" group is owner of the "analysts" group, since the users in the "admins" group must be able to create users and assign them to the "analysts" group. However, the "admins" group is not member of the "analysts" group, because I do not want the admins to act as analysts in my application. Ownership of a group (being able to manage it) and membership of a group are two different things. Besides, I also do not understand why the OIDDAS makes the orcladmin user a member of every group that you create there.
Of course, eventually I will have members in my group. But why is it a problem that there are initially no members of a group? I see no reason at all why this would be a problem.
The reason why I ask this is that creating an empty group (initially) is a requirement of my setup process. I am trying to release a clean setup script (with an ldif file) out of development, that our operational department can use to set things up. I want my ldif file to prepare all the necessary groups and owners, but not to create members in those groups (that's the task of the operational people).
However, as soon as I have these empty groups in place, the OIDDAS starts to act strangely (namely, the groups are not visible in the "role assignment" section when creating a user, until there is at least one member in the groups). That's when I found out that the OIDDAS actually does not like having empty groups (error when creating group without members, error when removing last member, ...).
If anyone knows, can you give me one good reason why the OIDDAS does not allow empty groups (or making groups empty)? As far as I can see, the OID/LDAP itself does not have a problem with this (you can create an empty group without any problem via the oidadmin application, or via import of an ldif file).
Thanks,
Johan

Unable to Create Users/Groups/Orgs in OAM

I have created a admin user [oamadmin] in Sun One Directory Server and configured the admin user as a Administrator during the initial installation/configuration. When I go the Identity System Console, I can see the users from Sun One Directory Server. When I tried to create a User, Group or a Organization, I see the error message
"You do not have sufficient access rights"
Is there anything I'm missing? What should I tune if I have to create users, groups and organizations from Identity System Console? I have included the admin user [oamadmin] in Directory Administrators group in Directory Server.

You have to create a workflow that creates user, group, ... and make the current logged in user (your admin in this case) the initiator of this workflow
for more details check the identity and common administration guide section 5 - chaining identity actions into workflows

DPM 2012 still requires put end users into local admin groups for the purpose of end user data recovery?

On client computers that are protected by DPM 2010 and prior versions, you had to put the end users account in the local administrators group. If you did not add the end user account to the local administrators group you would get this error after opening
the recovery tab in the DPM client: “DPM found no recovery points which you are authorized to restore on the specified DPM server. You can restore only those recovery points for which you were an administrator at the time the
backup was taken. To restore other recovery points, contact your DPM administrator, or attempt to restore from another DPM.” This is not ideal on many networks because the end users are not allowed to have local administrator access.
Ths fix to this was included in hotfix 2465832 found here: http://support.microsoft.com/kb/2465832.
This hotfix (a hotfix rollup package for DPM 2010) resolves other issues with DPM 2010 as well. You can find the full list of what this hotfix corrects on that link.
One would think this issue should have been resolved in DPM 2012, however I am encountering the same exact issue, had to include end-users into the workstation local admin group before they can search for recovery points on the DPM server. This is not acceptable
practice.
Is there a new hotfix for the same issue on DPM 2012? I am hesitated to apply KB2465832 since it also includes many other fixes for DPM 2010, which may not appicable for version 2012.
Please help.
Thanks,

This is a hands off solution to allow all users that use a machine to be able to restore their own files.
1) Make these two cmd files and save them in c:\temp
2) Using windows scheduler – schedule addperms.cmd to run daily – any new users that log onto the machine will automatically be able to restore their own files.
<addperms.cmd>
Cmd.exe /v /c c:\temp\addreg.cmd
<addreg.cmd>
set users=
echo Windows Registry Editor Version 5.00>c:\temp\perms.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent\ClientProtection]>>c:\temp\perms.reg
FOR /F "Tokens=*" %%n IN ('dir c:\users\*. /b') do set users=!users!%Userdomain%\\%%n,
echo "ClientOwners"=^"%users%%Userdomain%\\bogususer^">>c:\temp\perms.reg
REG IMPORT c:\temp\perms.reg
Del c:\temp\perms.reg
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This
posting is provided "AS IS" with no warranties, and confers no rights.
That's a good one! Thanks for that.
I've been scripting on KIX for some time, so here is mine, hope it helps to someone... (it's probably not the best, but it works)
========================================================================
$RC=setoption("WOW64AlternateRegView","on")
$DPMkey = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent\ClientProtection"
$uservariable = "%userdomain%\%username%"
If KeyExist ($DPMkey)
$Userstring=ReadValue($DPMkey, "ClientOwners")
If $Userstring == ""
WriteValue($DPMkey,"ClientOwners", $uservariable, "REG_MULTI_SZ")
? "Key created"
else
If not instr($Userstring,$uservariable)
$Userstring = "$Userstring,$uservariable"
WriteValue($DPMkey,"ClientOwners", $Userstring, "REG_MULTI_SZ")
EndIf
Endif
EndIf
==========================================================================
The problem actually is that you still need to use an admin account to write on the registry, so ensure you configure it properly on the schedule task.
In case you use a service account on the schedule task... the "$uservariable" will get populated with that account. As a work around to this... I changed it for the following line:
=========================================================
$uservariable = ReadValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI", "LastLoggedOnSAMUser")
=========================================================
The only problem with that, is that key gets created/updated only if user gets logged phisically on that PC, but will not work for anyone connecting through RDP.

Security Settings for two admin groups with shared service

Hi all,
I use Essbase Administration Services 11.1.2 and Hyperion Shared Services Console 11.1.2.0.73 (Drop 17)
Access Rights are granted via Groups in Hyperion Shared Service Console.
We have two admin groups.
AccessGroup 1: admin rights on some cubes (A) and read rights on all others (B).
AccessGroup 2: admin rights on (B) and read rights on (A).
If someone of AccessGroup 1 copies a cube of (A) – Fin_rep for example – wether AccessGroup 1 nor AccessGroup 2 can even see the cube (and i dont even mention admin rights) execpt the one who copied it.
Settings in Shared Services Console:
- Both groups have role "Create/delete application" and "AccessManager" (or something like that - german word is "Zugriffsberechtigungsmanager") on Essbase Cluster (our essbase server).
- AccessGroup 1 has role "ApplicationManager" and "AccessManager" for all cubes which they should administrate (A)
and role "Read" for all cubes with read only (B)
- AccessGroup 2 has role "ApplicationManager" and "AccessManager" for all cubes which they should administrate (B)
and role "Read" for all cubes with read only (A)
I hope i can get some help with this topic.
Thank you in advance,
Best regards
Bernd
Edited by: 907705 on 07.02.2012 02:52

Security will not copy over when you create new cube from old cube. You have to grant security to required groups using shared services or Maxl.

Create/Admin Groups

Similar Messages

Maybe you are looking for