Delegated user admin and export Roles&Groups ?

Hi experts,
I'am searching some tips in order to allow my users's delegated user admin group to export UME Roles and Group. however, my users met no problem to assign their roles to themselves
I'am working on EP 7.0 sp14 and my UME is an abap system
Can you give me some advice to go out from this issue ?
Best regards,

Hi experts,
I'll try to complete my question:
I've added Batch action to my delegated user role, but it's not enough to perform export operation.
I hope if i can find a combination of actions without "Manage ALL" that i can assign to my delegated user role.
Best regards,

Similar Messages

Companies & Delegated User Admin

Hi,
I'm planning to use Companies so that I can delegate user administration. I see in the help that delegated user admins cannot perform any actions on groups, which I assume includes assigning users to groups (is this correct?). So this means they have to individually assign the all roles to users, which loses all the advantages of having groups. Is there any way of using groups with delegated user admin, or does anyone know if this functionality will be available in the future? As long as you can specify which groups a delegated user admin can assign users to (the same as with roles currently), I don't see why there would be a problem with this.
Regards
Jane

hi,
You are right by saying delegated user admins cannot perform any operation on groups. In SAP Enterprise Portal , delegated user administrators can assign roles to their company users. They cannot assign roles to groups. They can only assign portal roles for which they have the Role Assigner permission. They do not need to have any Administrator or End User permissions for the role.
I think you might have gone through this documentation
http://help.sap.com/saphelp_nw04/helpdata/en/57/6aa430a3a8c1498d4f3eb08c41be95/frameset.htm
Regards,
Ganesh N

Error in User Management and Assigning Role

Hi,
I have configured LDAP authentication on LiveCycle Server. I get the userlist with LDAP in my admin console under User Management - User & Groups. But as soon I click on any of the LDAP username I am getting error to contact administrator. Same also happens when I check the checbox infront of the username and tries to assing role.
My Livecycle server is on WAS6.1, I also have server setup on my local where the same LDAP i have configured and I am able to access users and assign role. Is there any problem with WAS6.1 ?
I checked the logs and i got following exception in server logs.
[10/24/08 10:57:58:467 EDT] 00000039 IDPLoggedExce W com.adobe.idp.common.errors.Logger$LogConsumer run UserM:GENERIC_WARNING: [Thread Hashcode: 1028668752] | [com.adobe.idp.um.businesslogic.directoryservices.DirectoryServicesManagerBean] errorCode:8193 errorCodeHEX:0x2001 message:getPrincipal public chainedException:java.lang.NullPointerExceptionchainedExceptionMessage:null chainedException trace:java.lang.NullPointerException
at com.adobe.idp.um.businesslogic.directoryservices.DirectoryServicesManagerBean.getCacheKey s(DirectoryServicesManagerBean.java:1583)
at com.adobe.idp.um.businesslogic.directoryservices.DirectoryServicesManagerBean.findPrincip al(DirectoryServicesManagerBean.java:1608)
at com.adobe.idp.um.businesslogic.directoryservices.EJSLocalStatelessDirectoryServicesManage rBean_0dbf3d20.findPrincipal(Unknown Source)
at com.adobe.idp.um.api.impl.DirectoryManagerImpl.findPrincipal(DirectoryManagerImpl.java:13 8)
at com.adobe.idp.um.ui.user.CreateNewUserAction.doExecute(CreateNewUserAction.java:139)
at com.cc.framework.adapter.struts.ActionUtil.execute(Unknown Source)
at com.cc.framework.adapter.struts.FWAction.execute(Unknown Source)
at com.cc.framework.adapter.struts.FWAction.execute(Unknown Source)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1075)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1016)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:145)
at com.adobe.framework.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:1 73)
at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java: 190)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:130)
at com.adobe.idp.um.auth.filter.AuthenticationFilter.doFilter(AuthenticationFilter.java:154)
at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java: 190)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:130)
at com.adobe.idp.um.auth.filter.PortalSSOFilter.doFilter(PortalSSOFilter.java:113)
at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java: 190)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:130)
at com.ibm.ws.webcontainer.filter.WebAppFilterChain._doFilter(WebAppFilterChain.java:87)
at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:771)
at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:679)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:546)
at com.ibm.ws.wswebcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:478)
at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.jav a:90)
at com.ibm.ws.web

Hello Do anyone get anything about above exception, or is there any other information needed, please let me know ?
I still cannot found the solution for above problem, and it stops me to configuring users on Adobe LiveCycle ES, we have purchased Livecycle ES version 8.0

User Admin Import/Export

I'm trying to get a report of all IDs in our portal & the roles assigned to them. When I run User Administration -> Import/Export -> User Data Export & I select <ALL USERS> the results are often missing data. Sometimes I don't get all records; more frequently I get all records (all IDs) but not all roles are included. e.g. I've just tried it again & have found some IDs which have no data against the role= field (but when I look at the ID I can see that they do have a role). Other IDs are reported with (say) 2 roles, but I know they have 3 or 4.
Has anyone seen this? Does anyone know how to fix it?
Thanks, Chris

Users
http://help.sap.com/saphelp_nw04/helpdata/en/7d/49ae0771924cf4a1fc7e2af7b2e18c/content.htm
Groups
http://help.sap.com/saphelp_nw04/helpdata/en/1a/cde2fb82644d98bfb6d558440d6806/content.htm
Roles
http://help.sap.com/saphelp_nw04/helpdata/en/d1/a73184c45e4e119e63d1b8108f1ab0/content.htm
Search on help.sap.com for User Import UME

Delegated User Admin with only UNLOCK USER Permission.

Hi
i need to create a Delegated User Adminwho will have only UNLOCK USER Action Permission in the Portal UME.
I tried the UME Action UME.Manage_User_Passwords
but it contains LOCK Permission also.
Is there any action to acheive this ?
Regards
Rajendra

Rajendrakumar,
You are correct! The option provided by me is not applicable for EP 7.0.
Still you have options to implement the required functionalities:
You can implement the portal component or Webdynpro application for unlocking users. Use UME API for this.
or
Try to Export the unlock user component from a EP 6.0 Environment and import it into EP 7.0.
Ram

Read group membership for a user object and populate every group with matching user from another domain

I have LON\JSmith in LON domain and DEL\JimSmith in DEL domain
I would like to extract group memberships of LON\JSmith in LON domain and append matching by email (i.e. DEL\JimSmith) user object in every group in LON domain.
for instance
LON\JSmith and DEL\JimSmith is the same person and has same email address [email protected]
LON\JSmith belongs to 3 groups - LON\localadmingroup;LON\univdesktop;LON\globalsurvey
The outcome of the script should be
LON\JSmith; DEL\JimSmith should be in 3 groups - LON\localadmingroup;LON\univdesktop;LON\globalsurvey.
How can i do it?
Navgup

Hi Navgup,
Please refer to the script below, to query users in other domain by specifying the parameter "-Server" in the cmdlet "get-aduser", and also note I haven't tested the script below:
import-module activedirectory
get-adgroupmember "group"|foreach{
$email=(get-aduser $_.samaccountname -properties *).EmailAddress#get the user email
Get-ADUser -filter {EmailAddress -eq $email} -properties * -server DomainB.company.com|select samaccountname, memberof}#filter user name and group with the email in other domain
To get users across domain, please also refer this blog:
Adding/removing members from another forest or domain to groups in Active Directory:
http://blogs.msdn.com/b/adpowershell/archive/2010/01/20/adding-removing-members-from-another-forest-or-domain-to-groups-in-active-directory.aspx?Redirected=true
I hope this helps.

What's a delegated user admin used for?

We are asked to use delegated use admin but we do not see why we have to use it.
Could you explain a bit? Thanks!

Hi Christy,
Delegating administration is the process of "distributing" the administrative tasks and content in the portal to dedicated administrators. This decentralizing capability allows you to selectively assign the tools, tasks, and content in the portal to individual administrators, based on their area of responsibility. This solves the problem of exposing administrators to the portalu2019s entire set of administration tools and restricted company data, which is common in an environment where the tools and content are centralized and access cannot be controlled.
Please refer to these links for more info :
http://help.sap.com/saphelp_nw70/helpdata/EN/f6/26056705fd11d7b84200047582c9f7/content.htm
http://help.sap.com/saphelp_nw70/helpdata/EN/8e/f0f7415e639c39e10000000a155106/frameset.htm
Vamshi: Glad to see you back in business mate
Hope this helps,
Cheers,
Sandeep Tudumu

Steps to create User ID and assigne roles.

Hi,
What are the steps to create User ID using BAPI_USER_CREATE1.
How can I assign an User the role ECC/PORTAL/BI?
Thanks in Advance
Roy

Am not sure what type of BI server installation you have...
But here's one way you could create your users.
From the BI Administration Tool --> Open your repository either offline or online --> From the menu click on Manage --> Security--> Here's where you could create your users, groups etc., set what subject areas each user/group should have access to --> After creating your users/groups you could double-click on the user or group and set permissions.
Hope this helps,
-Esther

Report on portal User ID and Assign Roles for all portal users

Hi!
I would like to know , is there way that we can get a report which shows all the portal user ids with there assign portal roles. If we can't get this from portal. Can we get it from Oracle database ?
What are the oracle tables and fields which store this information?
If nay one have a custom develop iview for this please let me know
Thanks
Ramesh

Hi Ramesh,
as Pascal stated (and as I did above), if developing within the portal is not really new for you, playing around with the UME API is really more or less trivial.
Check Portal User and Role info as well as User to Role listing for similar requests and code hints / further links.
Hope it helps
Detlev

Problem with using the import tool under User Admin role

Hello,
I have created a role through the import facility under the User Admin role:
[role]
ridpcd:portal_content/content....
rdesc=my role
Although I have recieved a successful message I couldn't locate this role, not when I was searching it in User Admin or under the pcd location where I asked to create it.
I then imported a transport package from another portal that contains a role in the exact same pcd location, this time an actual role has been created.
The problem is that when I try to use the import facility again to assign a group to this role I get: Error: Role found, but unique name "pcd:portal_content/..." is not unique!
When I search User admin for this role I get only one and when I go to this pcd location I only see one role so I don't understand this message and how can a unique pcd location cannot be not unique.
Any ideas...?

Try performing the import again, but this time do not use the fully qualified pcd path. Just specify the rid without the pcd definition. In otherword if you did a search in the user admin for the role ID you would not use the full pcd:rid just the rid value.
The alternative is to first delete the role and then import again. The reason you are gettign the problem is that the pcd generates a unique sid entry for the role and thus the manner in which you are performing the update using the full pcd path is not allowed. For this reason drop the fully qualified pcd path.

Admin and user rights for change active airport

Hello alltogether,
my son has a new MacBook (System 10.5) for his school and he learn with the computer in all school-subjects. So I create two users, admin and one for him. After he has install all applications that he need for school, I gave the admin a password. Now my son can't install applications or change system settings. But i must give him admin rights, because when he stay at school, he must change the airport environment for school and if he stay at home he must change it back to home. Is it not possible to set the rights for a not admin user so, that he can change the airport environment?
Thanks for reading.
Regards,
Tommy

If he needs admin status to use the wireless connection, then you need to make him an admin user. As far as I know, there is no partial admin configuration.

Database level users and their roles

Hi Team,
we are doing some auditing we need to check in database.
User name and his roles for this any script please kingly suggest me.
Use <<database name>>
UserName Role
subu

Refer the below link:
http://www.pythian.com/blog/httpconsultingblogs-emc-comjamiethomsonarchive20070209sql-server-2005_3a00_-view-all-permissions-_2800_2_2900_-aspx/

Obtaining url patterns for a user Role/Group

I am looking for a way to find out how to obtain a the list of accessible urls (url
patterns) for a role/group defined in weblogic.
I have gotton as far as if checking if a user is in a group using: javax.ejb.SessionContext
isCallerInRole(java.lang.String roleName)
After checking if a user is in a role/group I want to access the url pattern authorised
for a particular role under weblogic.
Can this be done.

I am looking for a way to find out how to obtain a the list of accessible urls (url
patterns) for a role/group defined in weblogic.
I have gotton as far as if checking if a user is in a group using: javax.ejb.SessionContext
isCallerInRole(java.lang.String roleName)
After checking if a user is in a role/group I want to access the url pattern authorised
for a particular role under weblogic.
Can this be done.

[Forum FAQ] How do I export each group data to separated Excel files in Reporting Services?

Introduction
There is a scenario that a report grouped by one field for some reasons, then the users want to export each group data to separated Excel files. By default, we can directly export only one file at a time on report server. Is there a way that we can split
the report based on the group, then export each report to Excel file?
Solution
To achieve this requirement, we can add a parameter with the group values to filter the report based on the group, then create a data-driven subscription for the report which get File name and parameter from the group values.
In the report, create a parameter named Name which use the Name field as Available Values (supposing the group grouped on Name field).
Add a filter as below in the corresponding tablix:
Expression: [Name]
Operator: =
Value: [@Name]
Deploy the report. Then create a data-driven subscription with Windows File Share delivery extension for the report in Report Manager.
During the data-driven subscription, in the step 3, specify a query that returns the Name field with the values as the group in the report.
In the step 4 (Specify delivery extension settings for Report Server FileShare), below “File name”option, select “Get the value from the database”, then select Name field.
Below ‘Render Format’ option, select Excel as the static value.
In the step 5, we can configure parameter Name “Get the value from the database”, then select Name field.
Then specify the subscription execute only one time.
References:
Create a Data-Driven Subscription
Windows File Share Delivery in Reporting Services
Applies to
Reporting Services 2005
Reporting Services 2008
Reporting Services 2008 R2
Reporting Services 2012
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Thanks,
Is this a supported scenario, or does it use unsupported features?
For example, can we call exec [ReportServer].dbo.AddEvent @EventType='TimedSubscription', @EventData='b64ce7ec-d598-45cd-bbc2-ea202e0c129d'
in a supported way?
Thanks! Josh

Password for user admin

Hello,
I have to change the PW for user admin and tried to do this in the ERP/SU01 on every client.
The connection to XI was lost. The error 'can not read exchange profile' occurred.
I reset the password of user admin in all clients to default and entered the user admin and password in the http://<xi-host>:<j2ee-port>/exchangeProfile.
This worked fine.
But now I get the periodic error that user admin on client 200 is locked due to wrong logon and XI does not work. Error as described above
Okay. I can unlock user admin, but the error occurs periodically.
Is there a description how to change the PW for user admin and get rid of this error. I found a SAP Note (936093), is this the way to do it?
I assume user admin is locked every time the portal fails to contact XI, but I am not sure.
Best Regards
Maximilian

Try reflashing the firmware and see if that alleviates the issue. If not call into 866-606-1866 for further troubleshooting.

Delegated user admin and export Roles&Groups ?

Similar Messages

Maybe you are looking for