Different Acitvities, different CIC Profile, Same user

Is it possible to grant a user authorization to create a certain transaction type in e.g. CIC profile Z01 and is not authorized to create the same transaction type in e.g. CIC profile Z02?
I'm facing this problem because my client wants to be able to work in the new-situation and old-situation as well.
I would really appreciate your help!
Best regards,
Joost Goudriaan

We are using the Winclient but the solution you provided for the Winclint didn't bring the result we wanted.
I will explain the problem in more detail:
A user with authorization to create transaction types oooo (Contact) and 0001 (Sales Call) is assigned to 2 different CIC profiles.
If this user uses the first CIC profile he/she must be able to create both the above mentioned activities. But if this user uses the second CIC profile he/she only must be able to create transaction type 0000.
Thanks in advance!
Best Regards,
Joost Goudriaan
Message was edited by: Joost Goudriaan

Similar Messages

  • Assigning different authorization to same user based on Query

    Hi experts,
    I am redefining my issue,
    Is there any way i can assign different authorizations to the same user but based on either Query/Workbook.
    lets say i have two Analysis authorizations A & B and two Queries X and Y.
    If the Query/Workbook is X then Add Authorization A to user ABC.
    else if the Query/Workbook is Y then Add authorization B to user ABC.
    this is because i have two set of workbooks the same user can access and authorization for these two set is different based on the workbook.
    I tried using the auth objects 0TCTWORKBK,0TCTQUERID OR 0TCTQUERY but no success so far.
    thank in advance.
    Edited by: youmenbi on Feb 12, 2008 1:20 AM
    Edited by: youmenbi on Feb 12, 2008 1:31 AM

    Hi
    We have set same kind of authorizations based on the users. The Cost Center Manager is assigned a role and the authorizations for each of the Report/Layout/Workbook is based on his/her profile...some are Read only, some or Read & Write...etc.
    If you go through that route......and assign each of the Reports/Layouts/Workbooks to Users....you may succeed.
    I know it is a bit time consuming but that is one alternative we could think of as it addressed seamlessly any changes in CC Managers.
    Regards
    Srinivas

  • Can Exchange have 2 different mailboxes for same user

    hey guys,
    I need to know whether Exchange 2010/2013 can have two mailboxes for the same user e.g.
    1st mailbox is configured to send and receive emails for: xxxxpride.co.ke and 
    2nd mailbox is configured to send and receive emails for: xxxxsolutions.co.ke
    is this possible? if not how should i go about this scenario?
    will it mean I have to run two different exchange and AD servers which will have a different public IP?

    No you can not have 2 mailbox for one user. Because, mailbox is associated with AD account and you need authentication to send emails.
    In this case you can do  following 
    1. Create a different user account with 2nd email address and Forward that 2nd email to first one. So User is reading 2 email in one mailbox. TO send email from 2nd mailbox assign the send as permission to first account.
    2. Add the Alias email address in your first mailbox. (By doing so) User will recieve the emails for both address but cant send from 2nd email address.
     You can have multiple domains configured to recive and send emails in one exchange server.Yes certainly
    we can create multiple recipient for multiple domains.. Under authoritative domains section of hub transport. External Relay and Internal relay and authoritative domains can be created. you can create email address policies for each domain as well. See the
    link below to understand more.
    http://technet.microsoft.com/en-us/library/aa996314%28v=exchg.150%29.aspx
    UMESH DEUJA MCP,MCTS,MCSA,CCNA

  • Auth: Restrict Infoobject for Queries differently for the same user

    Hi guys,
    I need to restrict an infoobject differently for some queries (analysis authorization). For example, I need to give full hierarchie access for query 1 to user 1.  But for another query for the same user I need to restrict the hierarchie authorization. Furthermore, both queries are based on the same multi provider. It is not possible to use different multi provider ... the adjustment effort is to high (to many queries).
    I have set up an authorization with rsecadmin
    QUERY1:
    ZHier1     Hyrarchie 1
    ZHier2     Hyrarchie 2
    0TCAACTVT     Activity in Analysis Authorizations
    0TCAIPROV     Authorizations for InfoProvider
    0TCAVALID     Validity of an Authorization
    0TCTQUERY     Query
    -->I added the respective values for the queries, the used multiprovider, hierarchies, etc.
    I have set up the same for QUERY 2 with different Hierarchy and Query values, but it does not work correctly. The user is always authorized for the hierarchie values of both queries.
    Thanks foryour helpin advance!!
    Regards,
    Sven

    Hi Sankar,
    Sorry for the confusion. Lets focus only one hierarchy ... ZHier1. 
    QUERY1:
    ZHier1     -> value: node2
    0TCAACTVT     -> value: 2 & 3
    0TCAIPROV -> value: multiprovider1
    0TCAVALID     -> value: *
    0TCTQUERY     -> value: query1 (based on multiprovider1)
    QUERY2:
    ZHier1     -> value: node2.1 (sub node of node 2)
    0TCAACTVT     -> value: 2 & 3
    0TCAIPROV -> value: multiprovider1
    0TCAVALID     -> value: *
    0TCTQUERY     -> value: query2 (based on multiprovider1)
    But this does not work. When I use query2 in reports the user has access to node2 and not only to node2.1.
    Any idea?
    Thanks again!
    Sven

  • Configuring IDM menus for different roles for same user?

    Looking forward to Sun IDM 8.x and Sun Role Manager 4.1 installation. Couple of points before the decision are -
    1. If a user A has two roles R1 and R2 (for Sun IDM) then how does Sun IDM decide how the IDM console should appear (menus etc.) to the user based on whether he's logging in with Role R1 or R2? The login screen doesn't contain any input entry for choosing the role with which to log-in. With that in mind, is it even possible to have multiple roles for same login id? Or does the user have to maintain two seperate login identities?
    2. Same question for Role Manager
    3. Does Sun Role Manager 4.1 provide Roles merging feature?
    Thanks,
    AG

    IDM combines the two roles. So if a user has the two roles and role R1 grants access to menu items 1,2,3 and role R2 grants access to menu items 3,4,5, the user will have access to menu items 1,2,3,4,5. If you want to separate these two roles, you will need two different login users - but what exactly are you trying to achieve there?
    Can't help you with Role Manager, sorry.

  • Trying to sync different 700p under same user

    Hello.  Hope someone can help.  My 700p died.  Like the calendar/planner so I bought a used one.  Trying to sync my calendar to the different 700p.  my computer and hot sync are not recongnizing the different phone.  Any hints?
    Post relates to: Treo 700p (Verizon)

    Did you Hard Reset the "new" used phone before trying to sync it?  This should be done, then when you try to sync it after erasing it, choose your original HotSync name and all the data should migrate to the phone from your computer.
    To perform a Hard Reset: (Palm Knowledgebase article #887)
    http://kb.palm.com/wps/portal/kb/common/article/887_en.html
    WyreNut
    I am a Volunteer here, not employed by HP.
    You too can become an HP Expert! Details HERE!
    If my post has helped you, click the Kudos Thumbs up!
    If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

  • TS1398 I am unable to connect to two different wifi at different locations having same name but different passwords

    I am unable to connect to two different wi if at different locations having same user name but different password one is at home other at work

    I was able to do a full reset on the router (pushing the tiny button near the power input). Then ran through the setup process and it started working on my device.

  • Email accounts with same user id

    Hi,
    how can we create 2 different email accounts in different domains with the same user id's . When i try to create an email account with a username thats already exist it shows the message that, 'user already exist'
    Is it not possible to create 2 different accounts with same user id ? please help me to solvwe this issue
    Regards

    She can't. She needs to setup her own AppleID and then create an iCloud account using that.
    You can still continue to share your existing AppleID for iTunes and App Store purchases.

  • Need help in setting up Group Policy for same user in local system and Terminal server

    Hi All,
    Currently our remote users are using our network using VPN client over internet.
    They are generally at their home computer and doing VPN as they have to work only in one RDP server for application.
    We actually have a OU created for these RDP users and assign then some strict policy like they can not use any other .exe,they can not user any explorer ,they can not even use windows explorer when they are on RDP they just use one exe of their application.
    Now what my management want is they want their home computers in Domain and want them to login via their same credentials they are using for RDP but they don't want them to restrict in their home computers with any strict policy.
    Now my confusion is how can I configure different policies for same users or same OU.
    Can any one guide me please...

    you can achieve this fairly easily with group policy.
    create an OU and put your remote desktop servers in that OU.
    configure both user and computer policies in a group policy and link it to that ou.
    you need to enable loopback mode - you may want it in merge or replace depending on your other policies you have. Probably replace though I would guess. this is set in the computer configuration > admin templates > system / group policy section.
    now remove the policy you have currently setup for your users on the users OU containing the rdp users. If you want you can move these users back to your main users OU.
    when your users login to the RDP server the settings in the user section of the GPO linked to the RDP Servers OU will apply.
    when the user logs in to their own computer the policies from the user OU and computer OU will apply - but not the more restrictive RDP OU.
    hope that makes sense.
    Regards,
    Denis Cooper
    MCITP EA - MCT
    Help keep the forums tidy, if this has helped please mark it as an answer
    My Blog
    LinkedIn:

  • Same user with administrative rights on all the servers in single domain versus domainadmin as a part of administrator group in all the servers

    same user with administrative rights on all the servers in single domain user as a part of administrator group in all the servers:
    same user is configured as administrator on all the servers in one domain at windows 2003 server. Should this user be made part of domain admin and then this can be set up in the group of administrator for all the servers.
    How this is technically different?
    If same user is set up as an administrator on all the servers in domain, will it have the same access on all the files as a domain admin user?
    dhomya

    If the account is not admin on the domaincontrollers and the account is not member of domain admins or any other privileged AD group, the account has only user privileges on AD and thus cannot perform actions like creating and managing  accounts,
    groups, OUs,policies, sites, ...in other words cannot potentially ruin Active Directory.
    I think that is a pretty big difference.
    In fact, it is bad practice to perform you daily server management with an AD privileged account.
    In regards of file access. The domain administrator will be just an admin, and thus has the privilies assigned to the local admin group, just as any other admin. But if it are different accounts they might be member of different groups assigning different
    privileges. Always be carefull when assuming resulting privileges will be the same.
    MCP/MCSA/MCTS/MCITP

  • I have multpulpe Firefox profiles on one windows user account, how do I move a bookmark folder to a different Firefox profile on the same windows user account?

    ''locking this thread as duplicate, please continue at [https://support.mozilla.org/en-US/questions/1015870 /questions/1015870]''
    I'm trying to organize my different Firefox profiles like into profiles such as, Jeep Stuff, Shopping, things to build, computers, ect. So how can I move a bookmark folder to an other Firefox profile bookmark bar. Or how can I move all my bookmarks into one area to organize them and then place them into the different Firefox profiles?

    What happens if you rename the iPhone "Wife" when it shows up as "Hubby", then choose a different set of apps/playlists to sync with? iTunes is supposed to be able to manage multiple devices, each with their own selection of content. Perhaps you "restored" "Wife" with a backup from "Hubby" when you first set things up which is now causing confusion.
    To create a new library press and hold down the shift key as you click the icon to start iTunes and keep holding shift until asked to choose or create a library. You need to use the same technique to switch back.
    tt2

  • Same user in tacacs and local database with different privilege

    Hi there,
    i am just not sure if this is correct behavior.
    i am running NX-OS image n5000-uk9.5.1.3.N1.1.bin on the nexus 5020 platform.
    i have configured authorization with tacacs+ on ACS server version 5.2 with fall back to switch local database.
    aaa authentication login default group ACS
    aaa authorization commands default group ACS local
    aaa accounting default group ACS
    a user test with priv 15 is craeted on ACS server, password test2
    everything works fine, until i create the same username on the local database with privilege 0. ( it doesnt matter if the user in local database was created before user in ACS or after )
    e.g.:  
    username test password test1 role priv-0   (note passwords are different for users in both databases)
    after i create the same user in local database with privilege 0,
    if i try to connect to the switch with this username test and password defined on ACS,  i get only privilege 0 authorization, regardless, that ACS server is up and it should be primary way to authenticate and authorizate the user.
    is this normal?
    thank you for help...

    Hello.
    Privileges are used with traditional IOS. Privileges are part of "command authorization". Other operating systems (like IOS-XR, Nexus OS , Juniper JunOS) use "role-based authorization" instead of "command authorization".
    So traditional IOS can use the "privilege" attribute but other operating systems can not.
    Although IOS-XR, Nexus, ACE, Juniper  have "roled-based authorization" feature, every single one of them use their particular attributes.
    When I was configuring TACACS with ACE, Juniper and other devices I had to capture the packets to find out what were the particular attributes of ACE, what were the particular attributes of JunOS, etc, etc and to search deeply some hints the documentation , because sadly  documentation is not very good when talking about TACACS details.
    If you find which attributes to use, and what values to assign to the attributes then you can go to ACS and configure a "Shell Profile".
    Now back to Nexus 5000. It seems this particular device has the option to mix "role-based" with "command authorization" by overriding the default roles with other roles which names are called "priv". It seems this was an effort to try to map the old concept of "privileges" to the new concept of "roles". Although you see the word "priv", it's just the name of the role. My particular point of view is that this complicates the whole thing. I would recommend to use just the default roles, or customize some of them (only if needed), but not to use "command authorization".
    http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/security/502_n1_1/Cisco_n5k_security_config_gd_rel_502_n1_1_chapter5.html
    I will search the particular attributes Nexus use to talk to TACACS server. If I got them I will post them here.
    Please rate if it helps

  • Multiple users with different Ipods on same computer

    My household has one general computer that is used by myself and my two teenage daughters. We don't use separate logins because it is used mostly to just go online, check our email, and use Itunes along with updating our Ipods. This works fine for us except that we have different Ipods. My girls have the Ipod Mini's and I have the Ipod (with video screen).
    My question is this: Can one computer (running WinXPProSp2)authorize two different Ipods under the same user name? Also, can two (or three) different Ipods be "authorized" on the same computer?

    Yes, your not really authorizing ipods, you just authorize a PC to play songs you buy from iTUnes. Once its authorized all ipods can play the song that connect to it.
    You can separate the music that is loaded to each iPod (Like your music only added to your ipod and your girls ipods only updating there music to there ipods) By creating your own playlist and setting the ipod to update them. This is covered more here http://docs.info.apple.com/article.html?artnum=300432

  • My boyfriend and I have our own iPhones but share an iPad. How do we create two different profiles or user accounts, etc?

    My boyfriend and I have our own iPhones but share an iPad. How do we create two different profiles or user accounts, etc?

    Unfortunately, at the moment you cannot create two user profiles on one iOS device.

  • Project Web App (PWA)/Sharepoint 2013: is there any way to display two different views of the Project Center PWA web part to the same user in a site collection?

    i want some of my users to see all the projects in the Project Center at my top-level site, and those same users to see only the projects they own at a subsite level in Project Center. that way they could see an 'all project' view on the homepage and only
    their projects on their dashboard pages (which also have an instance of Project Center web part on them). i have searched and searched but cannot find a solution to this. is there any way to acheive this functionality? thanks in advance for your assistance!

    I have tried this in the past, but was not successful, as far as I can recall. Once you access the project center webpart in one page, the view will be retained regardless where you see it again. (until you apply a different view or clear your browser cache). 
    May be an easier solution is to display a 'report' on the home page with ALL projects (much easier to do), and use the Project Center webpart for the My projects view as it is easier to achieve via Project Server Security, than a report.
    Cheers,
    Prasanna Adavi, Project MVP
    Blog:
      Podcast:
       Twitter:   
    LinkedIn:
      

Maybe you are looking for