Default role + session role

Hi,
How do I enable a session role in addition to keeping the default role enabled. Eg. If user scott has a default role of scott_dflt, I want to enable role scott_session without affecting scott_dflt. Using dbms_session.set_role to enable scott_session semms to disable scott_dflt.
Thank you.

when you call DBMS_SESSION.SET_ROLE, give a comma separated list of roles that you want to set as
parameter:
SQL> exec DBMS_SESSION.SET_ROLE('<role#1>,<role#2>,<role#3>.....') ;

Similar Messages

  • Add Role to Role Category

    Hello Experts,
    my scenario:
    1) AD Group Reconciliation Task
    2) Auto creation Role category "AD Roles" if it doesnt exists
    3) Auto creation Roles based on AD groups in "AD Roles" Role category
    Ive already done auto creation role category and roles in default category, but i still cant create roles in my category.
    I think it could be done like this in role creation:
    mapAttrs.put(RoleManagerConstants.ROLE_CATEGORY_KEY, key)
    but how can i get Role category key of my category to var "key"?
    Are there more links between role and role category?
    Pls help.
    Thanks.

    public static String getRoleCategoryKey(String categoryName)
    String roleCategoryKey = null;
    RoleManager rmgr2;
    Set retAttrs = new HashSet();
    rmgr2 = oimClient.getService(RoleManager.class);
    System.out.println("Creating....");
    String ctxFactory = "weblogic.jndi.WLInitialContextFactory";
    String serverURL = "t3://10.111.6.101:14000";
    String username = "xelsysadm";
    String password = "xelsysadm";
    Hashtable env = new Hashtable();
    env.put(OIMClient.JAVA_NAMING_FACTORY_INITIAL,ctxFactory);
    env.put(OIMClient.JAVA_NAMING_PROVIDER_URL, serverURL);
    oimClient = new OIMClient(env);
    System.out.println("Logging...");
    try {
    oimClient.login(username, password);
    } catch (LoginException e) {
    System.out.println("Log in");
    rmgr2 = oimClient.getService(RoleManager.class);
    retAttrs.add(RoleManagerConstants.ROLE_CATEGORY_KEY);
    retAttrs.add(RoleManagerConstants.ROLE_CATEGORY_NAME);
    SearchCriteria criteriaM = new SearchCriteria(RoleManagerConstants.ROLE_CATEGORY_NAME, categoryName, SearchCriteria.Operator.EQUAL);
    try
    List roleCategories = rmgr2.search(criteriaM, retAttrs, null);
    System.out.println(roleCategories.size());
    boolean found = false;
    Iterator i$ = roleCategories.iterator();
    do
    if(!i$.hasNext())
    break;
    RoleCategory roleCat = (RoleCategory)i$.next();
    roleCategoryKey = roleCat.getEntityId();
    System.out.println("FOUND!!!");found = true;
    } while(!found);
    catch(Exception e) { }
    return roleCategoryKey;
    - I just find interesting code, but it doesnt work, when i use it to my map:
    mapAttrs = new HashMap<String, Object>();
    mapAttrs.put(RoleManagerConstants.ROLE_NAME, "testrole");
    mapAttrs.put(RoleManagerConstants.ROLE_DISPLAY_NAME, "testrole");
    mapAttrs.put(RoleManagerConstants.ROLE_DESCRIPTION, "desc for test");
    mapAttrs.put(RoleManagerConstants.ROLE_CATEGORY_KEY, getRoleCategoryKey("testcat"));
    And with .browse() I even know my category key, but when i use it:
    mapAttrs = new HashMap<String, Object>();
    mapAttrs.put(RoleManagerConstants.ROLE_NAME, "testrole");
    mapAttrs.put(RoleManagerConstants.ROLE_DISPLAY_NAME, "testrole");
    mapAttrs.put(RoleManagerConstants.ROLE_DESCRIPTION, "desc for test");
    mapAttrs.put(RoleManagerConstants.ROLE_CATEGORY_KEY, "21"));
    - errors.
    Whats wrong?

  • Automatic Creation of Roles and Role Mappings in GRC

    Hi,
    we are planning to use SAP Identity Management and SAP GRC Access Management.
    In SAP IDM we have defined several business roles that contain privilieges in SAP systems. When a user is requesting a role, the request will first be sent to SAP GRC for approval and risk checking.
    In order to get this to work, we need to load the business roles of SAP IDM into SAP GRC and we also need to configure the role mapping between the business roles and the technical SAP privileges.
    From what I understood, this could be implemented by loading the required information via Excel filles into SAP IDM.However, this is a quite cumbersome and error-rpone approach an we would like to automate this.
    Is there a way to use e.g. web service calls to create/delete roles and role mappings in SAP GRC?
    BTW: is a documentation of all available GRC web service calls and their parameters available?
    Thanks for your help in advance!
    Best regards
    Tom

    Hi Tom,
    as stated before, the web service description is in the config guide.
    Unfortunately there is no web service to create roles or even mappings in CUP - this is one of many I would also like to se created
    I don't think in your context you will be able to directly send Business Roles to CUP. The role mapping only happens after you send the request, so I'm not sure if that's in time for risk analysis - you will need to try that.
    Are you a customer or a consultant - anyway, feel free to contact me if you need further help integrating CUP and IdM. This is an evolving interface with many possible scenarios, so it's not easy to give you good advise without seeing the full picture.
    Frank.

  • How to track the transport request number for the Role/Composit Role

    Hi,
    How to track the transport request number for the Role/Composit Role.
    Thanks,
    Ravi

    Use transaction SE03 Transport Organizer Tools
    Execute "Search for Objects in Requests/Tasks" with objects of types:
    R3TR     ACGR     Role
    R3TR     ACGT     Role - User assignment
    Regards

  • GRC 10 - Business role, no role owner but associated role have owner....

    Dear All,
    In GRC 5.3 we perform the following mapping:
    Business Role A mapped with (no owner)
    - Technical Role 1 (from ECC with Owner1)
    - Technical Role 2 (from CRM with Owner2)
    - Technical Role 3 (from HR with Ownwer3)
    IN GRC 5.3 we have a business role mapped with multiple child role(techinical role) from other system.
    GRC 5.3 request is able to close and provisioned as it can see owners from child role.
    Now in GRC 10, we did the same. Create a business role, then mapped the child role (technical role). Unfortunately, when manager approves the workflow reroute to "NO OWNER DETOUR PATH" because it cannot see the technical role owner.
    Seems like GRC 10 is only looking at business role owner. We are unable to add Owner1, Owner2, Owner3 to the business role because when one of the owner approves, it will provision all the technical roles. We might have owners who will reject their role.
    Please advice.
    Jacky

    Hi Mustafa,
    you can use end user personalization to avoid a role owner to approve roles for himself. Define a dedicated EUP for role owner stage and restrict via "Approve/Reject Own Requests" like shown below:
    Does this answer your question?
    Regards,
    Alessandro

  • Migrate 8.1 Global roles include Role Conditions

    Hi all,
    have one question. I want migrate Global Role conditions from one WebLogic 8.1 server to another. When I export DefaultRoleMapper provider, I can see in exported file list of Global Roles only. I cannot see any mapping item in this file. Please, know someone how migrate Global Roles including mapping ?
    TY very much,
    Lada

    Hi,
    I export DefaultRoleMapper through Security-Realms-myrealm-Providers-Role Mapping-DefaultRoleMapper/Migration-Export in WL console.
    In exported file I can see only list of defined Global Roles, for example:
    dn: cn=::AbortTaskRole,ou=ERole,ou=@realm@,dc=@domain@
    objectclass: top
    objectclass: ERole
    cn: ::AbortTaskRole
    createTimestamp: 201000261052Z
    creatorsName: cn=admin
    EExpr:: fALDp01DQWRtaW5Hcm91cArDp01DU3BBZG1pbkdyb3VwCg==
    wlsCreatorInfo: mbean
    modifyTimeStamp: 201000261147Z
    modifiersName: cn=admin
    dn: cn=::CancelTaskRole,ou=ERole,ou=@realm@,dc=@domain@
    objectclass: top
    objectclass: ERole
    cn: ::CancelTaskRole
    createTimestamp: 201000261053Z
    creatorsName: cn=admin
    EExpr:: fALDp01DQWRtaW5Hcm91cArDp01DU3BBZG1pbkdyb3VwCg==
    wlsCreatorInfo: mbean
    modifyTimeStamp: 201000261148Z
    modifiersName: cn=admin
    But in this file I dont see any conditions which are bound to these Roles (myrealm-Global Roles-<concrete role>-Conditions). I cannot find these conditions in any other files generated through export wholes security realm.
    TY for your help,
    Lada

  • Clustered role 'Availability Role' has exceeded its failover threshold

    I am getting this alert on SQL 2012 R2 SP1. So please kindly tell me the solution of the below given alert on windows failover clustering .
    Clustered role 'Availability Role' has exceeded its failover threshold. It has exhausted the configured number of failover attempts within the failover period of time allotted to it and will be left in a failed state. No additional attempts will
    be made to bring the role online or fail it over to another node in the cluster.Please check the events associated with the failure. After the issues causing the failure are resolved the role can be brought online manually or the cluster may attempt to bring
    it online again after the restart delay period.

    Hi Syed Tauseef Ahmed,
    Please offer more information such as under what circumstances this issue occurs, what event id you have got. The failover threshold is the number of times the group can fail
    over within the number of hours specified by the failover period.
    The related KB:
    Tuning Failover Cluster Network Thresholds
    http://blogs.msdn.com/b/clustering/archive/2012/11/21/10370765.aspx
    You can refer the following similar thread for the first step troubleshooting:
    Clustered role 'Cluster Group' has exceeded its failover threshold.
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/4eb44f05-eb9b-448a-821b-359879141608/clustered-role-cluster-group-has-exceeded-its-failover-threshold
    I’m glad to be help to you!
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Publish reports to a role and roles to user

    Hi,
    What does it mean ..
    Publish reports to a role and roles to user
    can anybody give a detail what exactly it mean ? In implementation which stage it comes into picture ?/
    Thanks,
    Debasish

    Hi,
    This publishing option is available to you when you open the query in Query designer as 8th button in top panel. To publish in a role , you should have that role to be assigned to you.
    With rgds,
    Anil Kumar Sharma .P
    Message was edited by:
            Anil Kumar Sharma

  • Roles and Role List

    Hi all,
    Please explain me about the Roles and Role List used in Projects...
    Thanks
    Dinesh

    Hi
    Roles are using in Projects for two goals -
    A) a basis for project-based security. You might create roles as project roles and assign people to the role in a project. For example, project manger, project admin, project billing person, etc. You then might configure the security access to forms and functions of specific roles.
    B) when implementing Proejct Resource Management, the project roles may be scheduled on a project and serve as a template for resource demand. In that case you might configure the team member role on a project, such as competencies, job information, and security.
    You might want to review Oracle Projects Fundamentals and Projects Implementation Guide for more details.
    Dina

  • Generation of Role in Role Expert

    Hi all,
    I have created role in Role Expert and after clicking the generation button it is asking UME password
    even so i entered the correct password it is showing that name or password is incorrect (repeat logon)

    Hi Karunkar,
    Try creating a user in backend (R/3) and give all authorizations and set the password as well.
    Then when it is asked in RE, please enter the password of the above created user in R/3.
    Hope this will solve your problem
    Regards,
    Faisal

  • How to find the T-codes that's in a Single Role & Composite Role??

    Hi all,
    Some of the user have authorization to particular t-codes. However single roles are not created for them.
    Now I need to assign authorization to that particular t-code to a new employee.
    Since the single role is not there, I do not know how to find if it is inside a composite role.
    Which table should I find all the t-codes that are assigned to a single role / composite role?
    pls help.
    Regards,
    Pri

    Rakesh Kulkarni wrote:>
    > Table AGRS_TCODES give the roles with their tcode assignment.
    Beware of AGR_TCODES, it only reports transactions entered into the role menu. If you query table AGR_1251 filtered on object S_TCODE you get the actual transaction authorizations.
    Besides that, authorizations are always in single roles, so if you cannot find them there there's no point in searching through the composites.

  • Session roles

    Is there a way for the dba to get a user's current session assigned roles (including non-default ones)?

    I didn't find any specific DBA view show that information. The closest one is SESSION_ROLES which only show current session enabled the roles.
    If you check the DDL the SESSION_ROLES, it's
    select u.name
    from x$kzsro,user$ u
    where kzsrorol!=userenv('SCHEMAID') and kzsrorol!=1 and u.user#=kzsrorolIt's actually reading memory table x$kzsro
    this particular memory section seems not shared among sessions, so DBA can't tell other session current enabled roles.

  • User Default Mappings attribute "role" with condition "OR"

    Hello,
    we are using GRC 5.3 SP 8.1.
    User default mappings with more than one "role" attribute and the condition "OR" don't seem to work. After provisioning no user parameters have changed in backend system. When I configure only one "role" with the condition "AND" everything works fine, request types are the same.
    Any suggestions?
    Thanks,
    Manuel

    Hallo Sirish,
    thanks for this helpful answer.
    In the note it says: "After upgrade from 5.2 to 5.3 SP08.1, the user defaults were not provisioned."
    So this error only occurs when upgraded from 5.2 to 5.3 SP8.1 or is it a gnerally bug in SP 8.1?
    I configured some new conditions in our test system and it worked. So in my opinion only the old configured user default mappings don't work because of the upgrade (???). I'm a little bit confused...
    Regards,
    Manuel Kunkel

  • Issue with defaulting Business Partner Role while BP Creation

    Hi,
    I am having a simple requirement that while creating any contacts, the Business Partner role and authorization group will be defaulted.
    Now 1st was trying to wrtite code in the enhancement spot : CRM_UIU_BP_ENHANCEMENT --> badi CRM_BP_UIU_SAVE --> Method ON_SAVE_EVENT (Event handler for save event ).  But sometimes it is triggered, some times not. When it it triggered, transaction is giving a dump.
    Again, I tried to write code in badi BUPA_GENERAL_UPDATE. There also, I am getting the same error  " The COMMIT WORK processing must not be interrupted. "
    I am writing this code in the method :
    *Call this BAPI to fill the memory
        CALL FUNCTION 'BAPI_BUPA_CENTRAL_CHANGE'
          EXPORTING
            businesspartner = ls_but000-client.
      CALL FUNCTION 'BUP_MEMORY_BUT000_GET'
        EXPORTING
          iv_partner      = ls_but000-partner
        IMPORTING
          es_but000       = ls_bus000_upd
        EXCEPTIONS
          not_found       = 1
          parameter_error = 2
          OTHERS          = 3.
      IF ls_bus000_upd-augrp IS INITIAL.
        ls_bus000_upd-augrp = '9000'.
      ENDIF.
    *   Populate new BUT000 data
      CALL FUNCTION 'BUP_MEMORY_BUT000_FILL'
        EXPORTING
          is_but000       = ls_bus000_upd
        EXCEPTIONS
          parameter_error = 1
          OTHERS          = 2.
    I can't understand why this dump is coming? Please help if there is any other way to defaulting roles..

    Hi Suchandra,
    Are you trying to default Business Roles & Authorizations at the time of SAVE of a new CP?
    If yes, then everytime you click on SAVE button on CP Create Screen the Save BADi will be triggered.
    Cases when its not getting triggered please debug into the event handler method of view-BP_CONT/BPCONTOverview->EH_ONSAVE method.
    In this method at line (below) the save badi is triggered:-
    IF cl_crm_uiu_bp_tools=>save( ir_message_service = lr_msg_service ) = abap_true.
    In the above method - CL_CRM_UIU_BP_TOOLS=>SAVE( ) the save event handler is triggered :-
    * trigger ON_SAVE for registered handlers
      raise_save_event( ).
    If you want the default to happen when you navigate to CP Screen , you'll have to put the defaulting code in an implementation of a different badi - BADI_CRM_BP_UIU_DEFAULTS.
    - Dedeepya
    Edited by: dedeepya reddy on Nov 15, 2011 2:07 PM

  • Default Every User Roles missing

    Hi,
       We installed the latest version on EP 6.0. After installation, when we looked into the available default roles in the portal, the dafault Every User Roles - " Role: Every User Core (eu_core_role)" and "Role: Control Center User (cc_user)" are missing in the list. Only the "Role: Standard User (eu_role)" is available. Could you please let us now what could be the problem?
    Thanks.
    Bhagya.

    hi,
       i could find eu_role and cc_user roles, no eu_core_role is found in my portal content folder. anyhow i assigned eu_role to the user, and when he logs in he could only see the home workset, "portal personalization " is not visible.
    i checked the hierarchy of the role in the role editor, but it shows "portal personlization" workset in the hierarchy
    could some one lemme know y is it like that..should i enable "portal personalization" workset by my own.
    version : ep6.0 sp12
    thankyou

Maybe you are looking for