Delete all existing roles

Hello,
we 're using the GRC Provisioning Framework (with IDM 7.1 SP4 and GRC 5.3 SP10_1) and want to delete all existing roles from a user bevor we set new roles to him.
Is there a general command to do this or have the existing roles to be known?
Thanks,
Carsten

Hello Christian,
thanks for the quick answer. I'm talking about privileges.
In the To Identity Store, is it enough to set:
MSKEYVALUE                   -
   %MSKEYVALUE%
MXREF_MX_PRIVILEGE     -
Or do I have to set all existing roles behind the (like priv:grc:xxxx)?
Thanks,
Carsten

Similar Messages

  • When my hard drive died I lost my itunes library and now I'm being told that I can't synch my ipod with new songs unless I delete all existing because I can only have one library at a time

    when my hard drive died I lost my itunes library and now I'm being told that I can't synch my ipod with new songs unless I delete all existing because I can only have one library at a time

    Copy all the content on your iPod back to your PC and into iTunes. Then go ahead and sync the iPod with your new library.
    See this older post from another forum member Zevoneer covering the different methods and software available to assist you with the task of copying content from your iPod back to your PC and into iTunes.
    https://discussions.apple.com/thread/2452022?start=0&tstart=0
    B-rock

  • I uninstalled itunes for windows 7 and tried to install itunes 10.5 and it won't work.  I deleted all existing apple programs from my computer but when I try to install again it says so long error involved with microsoft?I uninstalled itunes for windows 7

    help ,me

    Did you try anything suggested in the last thread you posted?
    Views
    Replies
    Last Post
    I uninstalled itunes for windows 7 and tried to install itunes 10.5 and it won't work.  I deleted all existing apple programs from my computer but when I try to install again it says so long error involved with microsoft?I uninstalled itunes for windows 7

  • Need to delet or assign individual roles without changing all existing role

    Hi
    I am looking for a way in order to delete or add single roles without touching all other roles a user has.
    I found various BAPI_USER_* , however they always change the entire role assignment.
    Does anybody got an idea or an associated BAPI`?
    Thanks a lot,
    Kind regards,
    Mingolo

    Hello Minima
    The corresponding BAPI is BAPI_USER_ACTGROUPS_ASSIGN. In to delete only specific roles you first have to read the assigned roles of the user using BAPI BAPI_USER_GET_DETAIL.
    Now here the procedure:
    (1) Read the assigned roles for a given user using BAPI_USER_GET_DETAIL. The roles are returned in TABLES parameter  ACTIVITYGROUPS.
    (2) Delete the role you want to unassigned from ACTIVITYGROUPS.
    (3) Change the user using BAPI_USER_ACTGROUPS_ASSIGN with the modified list of roles (in ACTIVITYGROUPS).
    The logic behind this is as follows:
    - the BAPI BAPI_USER_ACTGROUPS_ASSIGN compared the imported list of roles with the currently assigned roles.
    - If one is missing, it is unassigned.
    - If one is new, it is assigned.
    - All others role assignements remain.
    Regards
       Uwe

  • As step in Task Sequence : Deleting all existing partitions on harddrive before partitioning, is it possible? Thoughts appreciated

    Everyone,
    I have just received a load of 100+ computers off corporate lease for the school district I manage, and while imaging them in SCCM, i've noticed that of those 100 computers about 7 or 8 have failed during the task sequence.  Just on a guess, I tried
    booting up off a windows 7 disk and physically deleting all partitions and THEN running the task sequence it fixes the issue and the task sequence jumps off/completes without any problems (which there's only been one main partition and one system reserve partition).
    My question to you all, I want ALL computers that run my task sequences to completely wipe ALL partitions...and then go forward with the standard partitioning step that's in the task sequence (Step name Partition Disk 0 - BIOS, where it sets up a 350mb system
    reserve and then a 100% remaining space NTFS windows Primary partition)
    Can someone point me in the right direction?  I feel this is a simple process to add to my task sequence, but I wanted to confirm with some of you that might can ease my anxiety a bit first. 
    Thanks so much!

    as above, you could even use a prestart command to achieve this before displaying the task sequence however i'd be VERY careful about doing so, as you could end up wiping out a whole estate of computers without intending to if you deploy it to the wrong
    collection or wrong query, far better to keep the logic in the task sequence as a scripted diskpart step (or two)
    you can download a diskpart script and view the associated step in the
    following task sequence
    Step by Step Configuration Manager Guides >
    2012 Guides |
    2007 Guides | I'm on Twitter > ncbrady

  • How do I delete all existing iTunes software even though  my computer says the setup file (iTunes64.msi) doesn't exist?

    I have had iTunes for a year and I love it, but it kept telling me I had the error (-42408). I searched the support communities to find a solution but none of them worked. So i decided just to unistall all the software and start over, but my computer was telling me that the setup file (itunes64.msi) didn't exist. Again I tried to search the community to solve the problem and I couldnt. So I need to know how do get rid of all the iTunes/Apple Software so I can redownload the new iTunes. HELP PLEASE! I really need help because I have an iPhone too and I can't sync it or put things on it until I can redownload iTunes. HELP!! HELP!! HELP!!

    So i decided just to unistall all the software and start over, but my computer was telling me that the setup file (itunes64.msi) didn't exist.
    (1) Download the Windows Installer CleanUp utility installer file (msicuu2.exe) from the following Major Geeks page (use one of the links under the thingy on the Major Geeks page):
    http://majorgeeks.com/download.php?det=4459
    (2) Doubleclick the msicuu2.exe file and follow the prompts to install the Windows Installer CleanUp utility. (If you're on a Windows Vista or Windows 7 system and you get a Code 800A0046 error message when doubleclicking the msicuu2.exe file, try instead right-clicking on the msicuu2.exe file and selecting "Run as administrator".)
    (3) In your Start menu click All Programs and then click Windows Install Clean Up. The Windows Installer CleanUp utility window appears, listing software that is currently installed on your computer.
    (4) In the list of programs that appears in CleanUp, select any Bonjour entries and click "Remove", as per the following screenshot:
    (5) Quit out of CleanUp, restart the PC and try another install. Does it go through properly this time?

  • How do I delete all existing digital signatures in Adobe Acrobat?

    There must be a way to do it. Can anyone assist? Thank you.

    Thanks so much  for the detailed explanation!
    Let me give a little more detail and better explanation of what  I have done.
    1.      I digitally signed (with a digital id” I had created) a document to be filed with an agency.
    2.      This “signature” ( digital id) had information that included my name, time, date and an acrobat watermark in red.
    Essentially typed information that proved the document came from my computer (me?).
    3.      I was informed that I would have to sign in ink, scan  to PDF, and upload  it to them, or
    4.      Create a “digital signature” that had my name, address, phone, fax, email, etc., and upload that to them.
    5.      I tried to create such a digital signature (after reading your email perhaps I was off base a bit) without success- the place I was attempting this using “PKCS#12 digital ID File”  but it allowed only limited information to be input and required a password.
    6.      I then deleted  my old digital id in “security settings” in order to again try to create a new digital “signature” using the “PKCS#12 digital ID File” format.
    7.      I now am still attempting to create a new digital “signature” and when I get to the last set up page for the “PKCS#12 digital ID File”  (where it asks for a file location and password “for your new digital ID file”), by selecting “add digital id” and hit the bullet for “a new digital id I want to create now.” In the last page of these creation pages there is a “file name” box and a “password” box.
    I think this is asking for my forgotten password which I cannot remember. If it was asking for a new password, I recall two password boxes to insure the password it typed correctly.
    So I am stuck, I cannot create a new “digital id”  which I thought was a digital “signature” and have deleted my old digital id.
    In the past I have use a scanned “signature”  as in read below but became afraid it could be manipulated in some fashion  in important documents and that is why I started using the digital id  in Acrobat X, which I thought was a digital “signature”.
    So, how far off base am I?  What do I do now that I have deleted my digital id in security settings?
    Thanks so much for your help.
    Roger

  • Does Updating To Lion From Snow Leopard Delete All Existing 802.1X Profiles

    Hello.
    I Was Just Wondering If I Installed Lion On My White Macbook Running The Latest Version Of Snow Leopard, Whether My 802.1x Profiles Will Be Migrated Across Or Deleted.
    Many Thanks

    I did, and my profiles are gone, and if you look at other posts, they cannot be easily added.
    I am accessing my 802.1x profiles when I start up from Snow Leopard, and my question would be how I could import the profiles from Snow Leopard?
    Helga

  • Every time I try to add add'l pix, it has to remove all existing and re-sync (always use same computer)

    Each time I want to add more pictures to my library, it deletes all existing and re-loads (during syncing).  I always use the same computer, never plugged my ipad into any other computer.  I also get error messages sometimes when I am trying to download new songs (via computer) and it has given me an error message saying that the computer is not the 'designated' computer (but it is and always has been.).

    Holy Smoke!!!   ...and it was JUST that easy.
    Spent HOURS trying to resolve.
    thank you, THANK you, thank YOU!!!
    I don't know why I didn't find this in my previsou Discussions searches.

  • How to delete all file in a directory

    Hi,
    Myself is Lokesh....can anyone tell me how can we delete all existing mail file which i kept in linux (PATH IS: /usr/share/mailfile/)...the mail file extension is *.MAIL. Please help me in sortout this problem...

    See listFiles (FileFilter) and delete ().

  • How to delete one existing file before uploading a file with same name?

    Hello everybody.
    I am uploading a file to Tomcat server. But, the problem is:
    i want to delete an existing file in the server, if i upload a fresh file with same name. In other words, "First check for the file with the same name in the server. If it exists, then delete existing file in the server and upload fresh one". If such file doesnot exist, then upload the file to server.
    I have given deleteonExit()
    but, for the first time when user is uploading, i want to check for the file with same name in the server.
    i am pasting the code here. please help:
    <!-- uploading the file -->
    <%
    String contentType = request.getContentType();
    if ((contentType != null) && (contentType.indexOf("multipart/form-data") >= 0))
    DataInputStream in = new DataInputStream(request.getInputStream());
    int formDataLength = request.getContentLength();
    byte dataBytes[] = new byte[formDataLength];
    int byteRead = 0;
    int totalBytesRead = 0;
    while (totalBytesRead < formDataLength)
    byteRead = in.read(dataBytes, totalBytesRead, formDataLength);
    totalBytesRead += byteRead;
    String contextRootPath = this.getServletContext().getRealPath("/");
    contextRootPath=contextRootPath.concat("uploaded");
    String file = new String(dataBytes);
    String saveFile = file.substring(file.indexOf("filename=\"") + 10);
    saveFile = saveFile.substring(0, saveFile.indexOf("\n"));
    saveFile = saveFile.substring(saveFile.lastIndexOf("\\") + 1,saveFile.indexOf("\""));
    // Create a directory; all ancestor directories must exist
    File outputFile = new File(contextRootPath, saveFile);
    var=outputFile.getPath();
    outputFile.createNewFile();
    int lastIndex = contentType.lastIndexOf("=");
    String boundary = contentType.substring(lastIndex + 1,contentType.length());
    int pos;
    pos = file.indexOf("filename=\"");
    pos = file.indexOf("\n", pos) + 1;
    pos = file.indexOf("\n", pos) + 1;
    pos = file.indexOf("\n", pos) + 1;
    int boundaryLocation = file.indexOf(boundary, pos) - 4;
    int startPos = ((file.substring(0, pos)).getBytes()).length;
    int endPos = ((file.substring(0, boundaryLocation)).getBytes()).length;
    FileOutputStream fileOut = new FileOutputStream(outputFile);
    fileOut.write(dataBytes, startPos, (endPos - startPos));
    fileOut.flush();
    fileOut.close();
    outputFile.deleteOnExit();
    %>Please help. Thanks for taking time.
    Regards,
    Ashvini

    Thank you MartinHilpert,
    I have one more doubt,
    I am uploading the file to one folder called "uploaded". Before uploading a fresh file, i want to delete all existing files in that folder. IS that possible ?? If yes, can you please tell me how to do that ??
    Regards, Thanks for your time.
    Ashlvini

  • Mass deletion of SAP roles from users

    Hello All,
    i need to delete all assinged roles from a big number of users. I know the users but not the roles which the users have. I need to delete all roles from the users-id's.
    I know SU10 and i can select all my needed users. But in the role tab i can not work with roles-names like Z* to delete. I can select all z*-roles and select "remove" but when i click to save, i get the message no changes made on the users???
    Any idea?
    Gruß
    Toni

    Hi David.
    David Berry wrote:
    I take it this is being run in PRD? What checks are being carried out during the table entry deletions and are you 100% happy sitting at your keyboard when pressing the 'run' button?
    Changes are made in PRD. The program was tested and is approved by each customer.
    Is there an easy way back to the previous state should it go wrong and how do you explain it to the auditors if needed that you assigned-number of roles in PRD against your own user ID possibly with no CDHDR/CSDPOS entries to back you up.
    Sorry for the 'negative vibes' but I don't like direct table maintenance in PRD for security.
    Best wishes
    David
    The way back is uploading the old role assignment previously exported from AGR_USERS. The program takes an excel sheet. In addition this excel sheet is attached to the change requests.
    From risk perspective we say (and experienced): mass changes through copy and paste lead to much more errors and faulty authorizations.
    Regarding direct table maintenance: standard function modules are used (like the one mentioned above) and the changes are visible in the change documents, Therefore the auditors grant an exception for using such tools.
    Cheers, Tobias

  • Deletion of mass roles from GRC CUP 5.3

    Dear All,
    I have requirement to delete 1000 roles from GRC CUP 5.3.
    I can see option to delete the roles individually under "search role" option but I am not able to find option to delete mass roles.
    Please advice.
    Regards
    Trinadh Bokka

    Hello Trinadh,
    It is not possible to delete all the roles at once through the User Interface. However, you can select a lot of roles at the same time by searching for a role pattern. For example, retrieve all roles starting with Z*:
    Hope it helps,
    Fernando

  • Not able to delete all child data

    Hi
    I would like to delete all existing data in Child Form, but the below code is deleting just one record.
    What am I missing here..
    public void RemoveProcessFormChildData(long pKey, tcDataProvider tcdp){
              try
         tcFormInstanceOperationsIntf f = (tcFormInstanceOperationsIntf)tcUtilityFactory.getUtility(tcdp, "Thor.API.Operations.tcFormInstanceOperationsIntf");
         tcResultSet childFormDef = f.getChildFormDefinition(f.getProcessFormDefinitionKey(pKey),f.getProcessFormVersion(pKey));
         long childKey = childFormDef.getLongValue("Structure Utility.Child Tables.Child Key");
         String plChildTableName = childFormDef.getStringValue("Structure Utility.Table Name");
         logger.info("Child Key::"+childKey);
         logger.info("Child table name: "+plChildTableName);
         tcResultSet childFormData = f.getProcessFormChildData(childKey, pKey);
         logger.info("No. of records in Child Form::"+childFormData.getRowCount());
         for(int i=0;i<childFormData.getRowCount();i++)
              long plChildFormPrimaryKey = childFormData.getLongValue(plChildTableName + "_KEY");
              logger.info("Child Form Primary Key::"+plChildFormPrimaryKey);
              f.removeProcessFormChildData(childKey, plChildFormPrimaryKey);
         logger.info("After calling RemoveChildData()");
              catch(Exception e)
                   logger.info("Exception Occured::"+e);
    Thanks

    forgot to add the below line :)
    lookupRes.goToRow(i);

  • HT204053 How do I delete my existing iCloud account (on ALL my apple devices), and start over from scratch??

    How do I delete my existing iCloud account (across ALL my apple devices), and start over from scratch??
    (cant seem to get calendars to ever sync right, on my devices, and across to my wifes'....so want to start with a "clean installation")

    Settings>icloud, scroll to bottom of screen and tap Delete Account (this disconnects the device from icloud but doesn't delete any data on icloud or on other devices).
    If you then want to sign back in using a different ID, do so on the same screen.
    I also strongly suggest that you and your wife use different icloud accounts, otherwise all your devices will have the same data on them, same emails, reminders, etc.  Most likely not what you want.

Maybe you are looking for