Defualt group and role size

What is the default size or number of charachters allowed while creating a group or role in Oracle Identity Manager?

Default it is 30.
See Formmetadata.xml
<Attribute name="-30" label="UserGroupAdmin.message.groupName" displayComponentType="TextField" variantType="String" dataLength="30" map="Groups.Group Name" />
You can modify it. If you want to increase it then you'll have to increase it at the database level also.
alter table UGP modify UGP_NAME varchar2(2000 char);
Don't forget to restart the server.

Similar Messages

  • Making users available for OpenSSO realm group and role assignment?? Help.

    Here is the situation. We have 3 Open SSO realms set up. One we have called OpenSSO-Admin, a second called OpenSSO-Provider and a third OpenSSO-Internal. We are having issues provisioning and managing the OpenSSO-Internal OpenSSO-Provider realms, but OpenSSO-Admin seems to be fine.
    Here is the behavior that is manifest.
    In the 2 'broken' realms, when we create users and assign them to the appropriate Open SSO realm, they appear to be provisioned correctly in IDM as well as the realm (We have validated user creation in LDAP and everything about the user appears to be fine). When we view the groups and roles in the specific resources, we are presented with a list of users that are in Brackets and appear to be provisioned. The brackets indicate that the users are not found as available users. The bracketed users can not be unassigned, nor can any others. note, our bracketed users in the list of assigned users are created from a workflow which assigns them directly to the appropriate group and role based on their business role.
    The third realm, OpenSSO-Admin works fine and we can add, and manage users in the groups and roles within the realm.
    We have ruled out the workflow as a source as the problem persists when we use the tool to manage users. We can create a user from scratch and add them to the realms. In the 'Broken' relms, the users do not appear in thelist of available users to be assigned to the groups or roles. Yet in the 'good realm, everything appears fine. We can move users from one realm to another and the problem persists in the broken realms, but when a user is added to the 'good' realm, everything is fine.
    I have tried reconciling and get no different results.
    Question is, We have isolated that the issue seems to be in the generation / management of the left hand "Available Users" list. How and where is this generated from and how can we check/fix or regenerate this list?
    Thanks.
    Joe

    I should clarify. We are using Sun IDM 8.1

  • Difference between Groups and roles?

    Hi All,
    What is the difference between groups and roles?
    Thanks for your time and help.

    Oracle does not have anything called a 'group'.
    A role is a named object that can contain a set of privileges. The members of the set can be individual privileges or can be another role that contains its own set of privileges. Roles can then be granted to users (or to other roles) so that those users (or roles) have the specified privileges.
    See the SQL Language reference - http://docs.oracle.com/cd/B28359_01/server.111/b28286/toc.htm
    Read the topics for CREATE ROLE, GRANT and REVOKE

  • How to access the mapping of Groups and Roles in the JAVA Application

    We have mapped the EJB roles with the groups through the Visual Administrator. We have developed the SSO. We have developed the application through which we are creating the user and role and mapping that role with the created user. The created role is saved in some LDAP directory. The second application in which ejb methods are mapped with some security roles.The LDAP roles we are getting in Netweaver as groups and we can perform the mapping of the deployed ejb roles with the group.Now for the logged in user we want to get the roles mapped with it so that we can give/deny the access to the methods from EJB as per the role of that user .How we will get the access to the mappings of the roles with the group in the application, if I know the LDAP roles mapped with the user (since these roles are accessible as groups in the NetWeaver)
    For e.g.  From application created the user with the role as "manager". This role is stored in iPlanet directory.
    This directory is mapped in the Netweaver.The manager role is displayed as the group in the Netweaver.
    Created the EJB application with the method "displayTheAccountDetails() with the role as "ManagerRole"
    This role is mapped with the manager group. Now we are having the details about the logged in user and the LDAP roles mapped to it (maneger role). How I will get the access to the details that for this group which ejb role is mapped in the application. So depending on that I can allow/deny the access to the ""displayTheAccountDetails()" method to the logged in user.

    Do you, guys, work together?
    See the last answer in this thread: How database works in UCM?

  • Is there User Group and Role Reporting in SAP Enterprise Portal?

    I want to know if there is a way to pull users statistics our of SAP Enterprise Portal like you can out of the R3 backend systems.
    I would like functionality similar to the SUIM transaction. I know through user administration you can access any user, even a list of all users, and you can do similar lists with roles and groups. You can then access any of these things individually and look at their assignments. However, I want to do this on a large scale. I want to know for example every group that has a user assigned to it. Evergroup that has roles assigned to it. Or groups that have no user or role assignments. We have approximately 1904 groups in our Production Portal system and I am trying to clean up the groups that have no user assignment, but I don't want to look through them one by one.

    Hi Chris,
    There is no standard report available for this purpose. However all this information is stored in table UME_STRINGS.
    You can write your own SQL queries to generate such reports. However please note that this table is not normalized, and it's a master UME table. You should use it strictly for READ ONLY purpose.
    For a sample code you which i wrote some time back, you might refer:
    http://forums.sdn.sap.com/thread.jspa?threadID=2088099&messageID=10859334#10859334
    Thanks
    Prashant

  • Chart Work Items by group and role

    Hi,
    I need to create a chart or a dashboard (I'm not sure) where I can see the workload on participants that have a specific role and belong to a determined group

    Since you are using LDAP what you are trying to do?
    Just in case you want to split user based on groups then; if possible to categorize users based on groups in ldap, so that may use them in security.
    if not as I said earlier go with your own table with available info from ldap.
    Thanks
    Edited by: Srini VEERAVALLI on Jan 7, 2013 11:57 PM

  • 'Start of Lot Size Grouping' and 'Lot Size Strategy' parameters

    Hello,
    For "by period" lot sizing procedure, could anyone explain the difference between:
    - "Start of Lot Size Grouping" flagged with  "Lot Size Strategy": 1
    - "Start of Lot Size Grouping" flagged with  "Lot Size Strategy": blank ?
    I  have played around with  both options and both produced the same result. If anyone could provide some insight , I would appreciate it.
    Many thanks in advance.

    Hi Datta,
    Thank you for your help.
    You indicated that the "The first period of the grouping horizon can be different than the period in which demand exists".
    How would the first period be different? What other elements could be considered for the start of the horizon?
    For example,   Periodic Lot of 4 weeks, Lot Size Strategy 1 or blank  and Start of Lot Sizing Group Flagged produced the exactly same result. What is interesting about it, is that with Lot Size Strategy "blank" the group production quantity is placed in a bucket where there is no demand. The results with Lot Size Strategy "1" makes sense as I have the grouped quantity placed in a bucket where I have shortage due to Safety Days requirement and not necessarily demand.
                                 w1     w2     w3     w4     w5     w6         w7            w8
    Total Demand     125     42     42     41          110     37     73
    Production (Planned)     223                    244               
    Days´ Supply     58     53     48     43     58     53     48     43
    Safety Days´ Supply     43     43     43     43     43     43     43     43
    Any thoughts? Many thanks in advance.

  • Managing LDAP groups and roles through SUN IDM

    Hi Guys,
    We have a requirement to build the following functionality in our Sun IDM tool.
    1.     Ability to create/manage Static LDAP group.
    2.     Ability to create/manage filtered LDAP group.
    3.     Ability to create/manage Static LDAP roles.
    4.     Ability to create/manage filtered LDAP roles.
    Can anyone let us know any pointers as to how to accomplish this or any ideas for the path to follow for this.
    Any reply will be appreciated.

    http://myidm.blogspot.com/2009/06/how-to-create-groups-in-ldap-or-active.html

  • LDAP groups and WebLogic Roles - Urgent ( weblogic 6.1 sp1, iPLanet 5.1)

    I have 2 questions and these are very urgent :-
    1. Where the mapping can be defined between LDAP groups and WebLogic Roles. I have
    2 groups in iPLanet :- Contarctors and employees and I have 2 security roles in weblogic:-
    contractactors and employess. How do I map LDAP group contractors to weblogic security
    Role contractors? Similarly for employees ?
    2. I have not defined contarctors and employeees under People container in IPlanet.
    e.g. The RDN for contractor is
    uid=1234,ou=dir,dc=orams,dc=com
    Can I still use the defualt security realm of weblogic (the WebLogic Security Realm
    under People ) OR I have to write my own custom code ?
    3. I am planning to use Roles insetad of groups to manage the logical grouping in
    iPLant. Can I still use the groups in WebLogic security realm ( in the configuratin
    parameters ?)
    This is very urgent ....so if any of you can throw any hints that will be greatly
    appreciated.
    --Sunita

    Hi Ariel,
    The driver is bundled with the product in WLS 6.1sp1. you don't have to
    download any additional driver. Use it as you normally would only thing to
    remember is if you are trying to write standalone java code then you have to
    have weblogic.jar in your classpath. For the rest of the info follow the wls
    docs for 6.1
    HTH
    sree
    "Ariel" <[email protected]> wrote in message
    news:3bb4a643$[email protected]..
    We want to connect our Weblogic 6.1 sp1 server to a SQLServer 2000 db. We
    downloaded the JDriver from bea.com, but all the istructions that camewith
    it are for WLserver 5.1.
    What has to be done to do this with 6.1 sp1?
    Thanks,
    Ariel

  • Is it possible to change the CATEGORY TITLE font color and/or size of each tile group in start screen, when the tiles are sorted by CATEGORY?

    TIA.

    Q.  Is it possible to change the CATEGORY TITLE font color and/or size of each tile group in start screen, when the tiles are sorted by CATEGORY?
    A.  No
    Carey Frisch

  • MDG-S BP Grouping,BP Role,BP Categeory and ERP Vendoe Account Group

    Hi
    Can anybody explains me releationship between MDG-S BP Grouping,BP Role,BP Categeory and ERP Vendoe Account Group?
    It seems there is no requried field except Change Request Description.If we input value for CR Description only, we can still able to sumbit and activate CR and Bussiner Partner ID (Which is internally generated) will be stored in MDG stagging table for entity type BP_HEADER.
    My question is then what is use of BP Grouping,BP role in this as it contains blank value? Also it observed that for new ERP Vendor the Account Group field is always in non editable mode,Any reason for this? Same issue with Company Code after selecting CC it displayed as non editable field before submitting CR as well.

    Hi Sanjay,
    When you select New -> Organization, below screen comes, In Grouping drop down you need to select Vendor Account Group and in Role list enter role.
    Follow same procedure when you want to create next vendor.
    Under new pushbutton, you will get three options:
    Organization means when you want to create vendor.
    Person means you are creating person not vendor, these person you can assign as a contact person to the vendor in Relationship tab.
    Regards,
    Sudhir

  • AD Group Membership revoked on adding new group through role and acespolicy

    Hi all,
    when a user is created in OIM, it is provisioned with Default Role say CONTRACTS which will provision AD Account and a default AD group membership.
    when I assign a new role membership say BILLING, to assign additional AD group memberships through access policies, it is removing the default AD group membership from the user. But still the user is having both the roles CONTRACTS and BILLING.
    The ootb AD task, remove user from group is triggered.
    The problem is happening only in Testing environment.
    In development envi it is working fine.
    it is not removing the default group memberships.
    any ideas? thoughts? which I need to check.
    my oim server is 11.1.1.3.0, with weblogic setup.
    Edited by: Venu on Dec 2, 2011 1:06 PM

    Do one thing:
    Take New User
    Assign First BILLING
    Assign Second Group
    And then ASSIGN CONTRACT
    Update the results.
    It is happening in one env so you might have done some configuration or it could be env issue as well.

  • Using Dynamic Groups in Ldap for Accounts and Roles

    Does anyone currently use dynamic groups in LDAP for accounts and roles? I have set up a dynamic group in ldap (we are using OID Oracle internet Directory 10.1.2.0) , ldapsearch returns the correct list of unique names, but the account does not appear on my profile page when I log in to UCM (10.1.3). I cannot find any documentation so I'm asking myself if it is supported .....

    Thanks tim ... will check, but Oracle are saying :
    Oracle Universal Content Management - Version: 7.5.1
    Information in this document applies to any platform.
    Product: Content Server
    Version: 6.0
    Goal
    Can the Content Server's LDAP provider support, or can it be configured to support, dynamic LDAP groups?
    Solution
    The Content Server by itself is unable to process dynamic LDAP groups since the filter that is used cannot read dynamic groups. However, dynamic groups can still work in the Content Server if the permissions for the queried user are generated on the LDAP server side. For example: Novell and Active Directory both have this functionality.
    to which I have replied you suport 3rd party ldaps, but not your own? Shurely shome mishtake ..... if ldap search works in a seamless way, surely provider should too ....
    Billy, you may well be right, just got a cashflow problem over here !

  • OID Dynamic Groups and J2EE security roles

    Hi
    I've searched the forums but can't get a definite answer. Is it possible to use OID dynamic groups and map them to J2EE security roles? I can't find anything that says specificially not but I can't seem to get it to work.
    Thanks
    Adam

    Hi,
    Let me know if you find answer of your question.
    thanks

  • Roles, Groups and Class of Service

    Hi,
    I am new to LDAP, have a good RDBMs background. I have read the Sun documentation to understand the concepts. Can someone recommend a good source that provide examples on how to set up Roles, Groups and Class of Services.
    Thanks,
    Bala.

    Directory Server documentation set contains the best examples to my knowledge.
    You may want to start with the Deployment Guide for introduction to the concepts and Administration Guide for setting them up and examples.
    Regards,
    Ludovic.

Maybe you are looking for