Delete/Remove Adhoc Roles

Hi All,
I am creating an adhoc role in my workflow for a notification and i want the Adhoc role to be removed/deleted when ever the notification is responded.
Is there any API for removing/deleting the Adhoc roles?
If so could you please explain me it?
Thanks & Regards
Santhosh

Hi,
You need to call WF_PURGE.Directory to remove them. Have a look in the API reference guide.
HTH,
Matt
WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
Have you read the blog at http://thoughts.workflowfaq.com ?
WorkflowFAQ support forum: http://forum.workflowfaq.com

Similar Messages

Issue while Removing a role

Hi,
Here is my scenario.
User 'test1' is created by assigning a role (say A). Role A has AD and database table resource assigned, so there are 2 resources assigned to the user i.e. AD and a database table resource. (This is the exisitng process, I cannot change this process at all).
Now while removing the role, my requirement is to delete only AD resource account and it should not try to delete the database table resource account. Is there a way to do this?
Please share your ideas.
Thanks in advance.

Do you only want to keep the ressource account or also keep the link? If you want to keep the link, do what the previous poster suggested. If you only want to prevent the deletion of the database row, you can configure this in the database table resource adapter by deactivating the capability to delete accounts.

I tried to remove a role from one of my 2012R2 DC's

I tried to remove a role from one of my 2012R2 DC's and now I basically can't do anything to that DC. Attempting pretty much anything on it tells me that it can't do it because it needs a reboot, and a reboot fixes nothing. The role I wanted
to delete is removed (print services), but I can't re-add it, or change any other role or feature. There is a 'pending.xml' file, and it is rather large. I can't delete, or rename the 'pending.xml' file, as it is owned by 'TrustedInstaller'. This
is the FSMO DC and there are some other services on it that I would rather not have to re-install and reconfigure. I've looked for other things that could prohibit installs and more, but there are no 'Pending Renames' in the registry.
At least getting server manager to stop complaining would be a good start.
Thanks in advance for any assistance.

Hi Mike,
Just addition, please run
sfc /scannow command to scan all protected system files and use
Chkdsk command to check the status of the disk in the current drive. any find?
à
The role I wanted to delete is removed (print services), but I can't re-add it, or change any other role or feature.
Just a confirmation, did you mean that had un-install
print services successfully? No error occurred? Please check relevant log file (such as event log file and so on) if find some errors. In addition, I noticed that you attempt to re-install the role. Did you get any error message when failed to re-install?
Did you use Install-WindowsFeature PowerShell command to install? Any difference?
If any update, please feel free to let us know.
Hope this helps.
Best regards,
Justin Gu

Role Approver of Removal of Roles

HI Everyone,
We are coming across a situation where the management team would like to have the "removed roles" in the access request not require the role approver approval and review.
Is there a way that AE allows for this? I have tested various ways and can only come up with situations where the role approver has to approved removed roles.
Thoughts?
Thanks,
Jerri,

Hello Jerri,
For achieving the role deletion without the approver of the role owner, create a different initiator with Request type change and probably some custom attribute and have this initiator configured with a path which has no Role Owner at any of the stages.
This wil have the Request type "role deletion" with no Role Owner required to approve.
Regards,
Hersh.

PFUD - profiles are removed, but role is in

Hello,
I am testing background job based on report RHAUTUPD_NEW. I assign role to a user via SU01 and time-limit it. When limit expires I check user's record via SU01. I see that the profile is being removed from the user's record, but role's assignment still shows in the user's record. Is this a correct behavior? Is there a way to remove role from the user's master record as well?
Thanks
Galina

That is indeed interesting question.
If might make sense to agree on an approach with them.
If your provisioning of access support model and infrastructure supports it, then removing the role is a better option in my opinion. SAP seems to be going that way as well, since IdM also without deleting the user ID which is usefull.
It helps a lot if you do not have too many (sets of) roles and the tools interogate their validity.
It is without a doubt a very usefull control to set the date of expiry when assigning the access. At that point in time you know most about the user and their request for access!
Cheers,
Julius
Edited by: Julius Bussche on Mar 30, 2010 12:14 AM

Mass deletion of SAP roles from users

Hello All,
i need to delete all assinged roles from a big number of users. I know the users but not the roles which the users have. I need to delete all roles from the users-id's.
I know SU10 and i can select all my needed users. But in the role tab i can not work with roles-names like Z* to delete. I can select all z*-roles and select "remove" but when i click to save, i get the message no changes made on the users???
Any idea?
Gruß
Toni

Hi David.
David Berry wrote:
I take it this is being run in PRD? What checks are being carried out during the table entry deletions and are you 100% happy sitting at your keyboard when pressing the 'run' button?
Changes are made in PRD. The program was tested and is approved by each customer.
Is there an easy way back to the previous state should it go wrong and how do you explain it to the auditors if needed that you assigned-number of roles in PRD against your own user ID possibly with no CDHDR/CSDPOS entries to back you up.
Sorry for the 'negative vibes' but I don't like direct table maintenance in PRD for security.
Best wishes
David
The way back is uploading the old role assignment previously exported from AGR_USERS. The program takes an excel sheet. In addition this excel sheet is attached to the change requests.
From risk perspective we say (and experienced): mass changes through copy and paste lead to much more errors and faulty authorizations.
Regarding direct table maintenance: standard function modules are used (like the one mentioned above) and the changes are visible in the change documents, Therefore the auditors grant an exception for using such tools.
Cheers, Tobias

Adhoc roles in workflow

Can someone please tell me why we should create adhoc roles? I thought if the user has his fnduser name and an email address in fnd_user table, then he/she gets the notification.
Thanks
Jim

Hi,
One slight point that I'd make is to insert the word "can" - they can exist for a defined period of time, then they are removed from the tables using the purge program.
Setting an expiration date is completely optional, so you can keep your ad-hoc roles for as long as you want to - I know a number of clients that choose never to purge their ad-hoc roles.
As you say, though, if you need to notify someone who isn't in the directory service as standard, then you need an ad-hoc role.
HTH,
Matt
WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
Have you read the blog at http://www.workflowfaq.com/blog ?
WorkflowFAQ support forum: http://forum.workflowfaq.com

Mass Removal of Roles through SU10

I have thousands of expired accounts that still have valid roles. I want to remove all roles from these expired accounts. In Su10 to remove roles do you have to list the roles you want to remove? Is there a function in SU10 to simply remove any roles these users have? In Su10 I tried checking the remove box and the change box but then when I execute it is not removing any of the roles when I look in SU01. So to actaully remove the roles does it require you to list them?
Edited by: Alex Williams on Apr 23, 2008 3:13 PM

Sorry I misread your post. I suppose there is a reason why you want to keep the expired accounts ? Otherwise the quickest way is simply to delete the expired accounts.
You can use SU10, but you would need to list every role. You also have to make sure that the role dates encompass the dates of the roles that are assigned to the ids. Usually it is the start date - so you may want to put in a start date prior to even implementation to catch everything.
Edited by: JC on Apr 23, 2008 9:47 AM

Removing a role from a user

Hi All,
My requirement is to remove a role from the user so the resources assigned to that role has to be deleted once the role is removed from the user. But I am having some trouble to remove the role in the workflow.
I am checking out the view of type User and removing the role from waveset.roles and then checking in the view. I don't see any errors but the role is not getting removed from the user and in turn the end resource is not getting deleted.
Can anybody post some points like what is the correct way to remove the role from the user in the workflow itself.
Thanks in advance.

Thanks for the reply.
Nevermind, actually I managed to solve the issue, there was mistake in the express code.
I have one question, can you help me? I am removing a role from a user and for example there are 2 resources (A and B) assigned to the role, while removing the role from the user it is deleting the account in both resources A and B but I don't want to delete the account in resource B. Is there a way to do this?
I am the checking out and checking in the user view and I am using the following code but it is not working. It is deleting the account from both the resources.
+<set name='delview.update.selectAll'>+
+<s>false</s>+
+</set>+
+<set name='delview.update.accounts.selected'>+
+<s>false</s>+
+</set>+
+<set name='delview.update.accounts[A].selected'>+
+<s>true</s>+
+</set>+
+<remove name='delview.waveset.roles'>+
+<ref>myrole</ref+>
</remove>
can anybody post some points regarding this issue?
Thanks

Restricting an administrator to only adding or removing Business Roles

Hi:
Is there an out of the box rule or form in IDM that can restrict an administrator to only adding or removing business roles from accounts?
Thanks.

Hi Dwayne,
This BU ruling is somewhat of a newer function with OIA. For mass alteration, the old-school way would be to execute a SQL script directly towards the DB.
Simply change the last line on what correlation you wish (in this situation, it's looking at the BU Name and the GU office name)
delete from BU_GLOBALUSERS where businessunitkey > 0;
insert into BU_GLOBALUSERS(BusinessUnitKey,GlobalUserKey)
select BU.BusinessUnitKey, GU.GlobalUserKey from BUSINESSUNITS BU, GLOBALUSERS GU
where BU.BusinessUnitName = GU.officename;
Regards,
Daniel Redfern
Technicalconfessions.com

How to delete/remove DigiNotar in Mac OS X 10.5.8's Safari?

Hello.
I noticed Apple never released an update to delete/remove DigiNotar in Mac OS X 10.5.8 since I have all updates. I was able to tell Keychain to untrust it from http://fairerplatform.com/2011/09/how-to-disable-diginotar-ssl-certificate/artic le, but it won't let me delete it. Mac OS X just beeps at me when I hit delete key on this Intel MacBook Pro (from October 2008). I tried dragging it to the trash can, but that didn't do anything. Am I missing something? I did unlock this Keychain screen and was able to untrust.
Thank you in advance.

andyBall_uk wrote:
Specifically the 'can't delete' problem you asked about seems similar on Snow here & yet choosing the items via search does enable the Edit-Delete menu command.
Perfect. Search to find two hits and then deleting them (right click and then delete option for me) worked! Weird design!
Even more weird, http://fairerplatform.com/2011/09/how-to-disable-diginotar-ssl-certificate/artic le is gone! I wanted to read its instructions on how to test it.

How to delete/remove DigiNotar in Mac OS X 10.5.8?

Hello.
I noticed Apple never released an update to delete/remove DigiNotar in Mac OS X 10.5.8 since I have all updates. I was able to tell Keychain to untrust it from http://fairerplatform.com/2011/09/how-to-disable-diginotar-ssl-certificate/ article, but it won't let me delete it. Mac OS X just beeps at me when I hit delete key on this Intel MacBook Pro (from October 2008). I tried dragging it to the trash can, but that didn't do anything. Am I missing something? I did unlock this Keychain screen and was able to untrust.
Thank you in advance.

WZZZ wrote:
You may be better off leaving it as "never trust," since if you delete it and you encounter a site using it, it will just be reinstalled and you will be worse off.
Really? Thanks.

How do I delete/remove an app from phone after ios7 update?

I updated my iphone 4 with the ios 7 update. all my current app icons are missing. I want to delete/remove one of them completely from my phone but I cannot figure out how?

I'm the same as clydernd, tap and hold till the app wiggles and tap the (x) just like ios6
Message was edited by: jonathans blog [woggles are the things that hold your neck thing on in the scouts, the icons in iOS wiggle ;) ]

Workflow Notifications not sending for AdHoc Role

Hi,
I am trying to send my workflow to multiple dynamic users, using the call createAdHocRole.
Here is my code (I currently am using 2 user names for testing. This will be eventually be a variable) :
+-- create role --+
apps.wf_directory.createAdHocRole(v_role_name -- role name
+, v_role_name -- role display name+
+, null -- language+
+, null -- territory+
+, null -- role description+
+, null -- notification preference+
+, 'JEHANSEN,DCDRIGGS' -- role users+
+, null -- email addresses+
+, null -- fax+
+, 'ACTIVE' -- status+
+, trunc(sysdate) + C_PURGE);+
When I run the workflow, it runs with no errors, but I am not receiving any emails. I can view the workflow in the Status Monitor and I see the Notification being created and it shows my new role as the performer. Both usernames that I am using for the Role Users are setup as Users and Employees in the environment.
I've queried the WF_USER_ROLES_ASSIGNMENTS table and I see my new role there, and both usernames are in the table. Both users are also in WF_USERS with email addresses, and also in WF_LOCAL_USER_ROLES. When I query WF_NOTIFICATIONS, I see the notification being created there, with a status of OPEN, receipient_role being my new role, mail_Status is blank, responder is blank, original_recipient is my new role, from_user is the supplier, and to_user is my role name .
Can anyone see what I am missing? I thought if I create the role with a null email_address it then sends email to all users in that role? It probably doesn't matter, but these are being submitted upon the change of a PO in iSupplier (Oracle Apps).
Thanks,
Janel

Hi,
Once you have created the role, they can be referenced in your Workflow process in the same way as an other role. For example, create an ad-hoc role "MYTEST123" using the standard WF_DIRECTORY API. Then you can use this as the notification recipient in your process.
If you are creating the roles dynamically within a process, then once the role has been created, set an item attribute (e.g. attribute NTF_RECIPIENT) to the name of the new adhoc role, and then have the notification recipient set to the value of the item attribute.
HTH,
Matt
WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
Have you read the blog at http://www.workflowfaq.com/blog ?
WorkflowFAQ support forum: http://forum.workflowfaq.com

Does Oracle ever automatically create internal adhoc roles for sending notifications? If yes, then when?

Hi All,
I am aware that the Oracle workflow directory service creates a role whenever a new user / responsibility is created and that workflow notifications can be sent to these users through their respective roles.
Also, for external parties such as suppliers or customers who do not have an account in the E-Business Suite, adhoc roles can be created in order to enable them to receive notifications.
While going though the workflow status of POAPPRV worlflow, i noticed that in one of the 'E-mail PDF PO to Supplier' notification, the recipent was some ADHOC<<some_random_number>>PO.
Can anyone please shed some light on this?
Thanks,
Kabir

Hi,
Thanks for your posting.
This development mode can exclude some errors, such as the file upload complete at the same time... from my experience, this is a good choice to achieve the goal.
Best Regards,
Jambor
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Delete/Remove Adhoc Roles

Similar Messages

Maybe you are looking for