Disable AD Account via API

I'm trying to use disableAppsForUser found in tcUserOperationsIntf:
The method requires 2 parameters:
plUserKey - The key of the user.
plObjectInstanceForUserKey - The key of the object instance for a user in the system.
what is the plObjectInstanceForUserKey? Is this is the Process Definition > Process Instance? I tried passing that but it's giving me the error:
Class/Method: tcUserOperationsBean/disableAppForUser encounter some problems: Object instance for user with key '242' does not exist.

Here is an old post i made. Re: Disable/Enable in place of Revoke/Provision while lifecycle of user
>
You will want to make sure the value you are getting is OIU_KEY for the object instance key. For each value, you can use the following API :
userIntf.disableAppForUser(userKey, objectInstanceKey);
Rather than trying to do the multiple apps, just do a single instance, and try that.
You could also put the following query to use. Generate your list of objects you want to disable. This will give you all the oiu_keys and you can loop through it:
select oiu.usr_key, oiu.oiu_key
from obj, oiu, ost, obi, usr
where oiu.obi_key = obi.obi_key
and obi.obj_key = obj.obj_key
and oiu.ost_key = ost.ost_key
and oiu.usr_key = usr.usr_key
and obj.obj_name in ('<Resource 1>', '<Resource Two>', '<Resource ...>')
and ost.ost_status in ('Provisioned', 'Enabled');
>
-Kevin

Similar Messages

  • Disable resource account via Workflow

    Hello I created a transition in the Update User workflow to disable a resource account if a field is indicated in the admin tabbed user form.
    This activity works but all resource accounts (email, AD) are being disabled. Only email needs to be disabled. How do I get the 'services' value to take effect?
    <Activity id='9' name='DisableAccountAccess'>
            <Action id='0' application='com.waveset.session.WorkflowServices'>
              <Argument name='op' value='disableUser'/>
              <Argument name='accountId' value='$(user.waveset.accountId)'/>
              <Argument name='doWaveset' value='false'/>
              <Argument name='services'>
                <list>
                  <s>emailResource</s>
                </list>
              </Argument>
            </Action>
            <Transition to='Notify'/>
          </Activity>also tried below code but have been unable to get it to work.
    <Activity id='9' name='DisableAccountAccess'>
            <Action id='0' application='com.waveset.session.WorkflowServices'>
              <Argument name='op' value='checkoutView'/>
              <Argument name='type' value='disable'/>
              <Argument name='id' value='$(user.waveset.accountId)'/>
              <Argument name='authorized' value='true'/>
              <Return from='WF_ACTION_ERROR' to='error'/>
              <Return from='view' to='disableAccView'/>
            </Action>
            <Action id='1'>
              <expression>
                <block>
                  <set name='disableAccView.resourceAccounts.currentResourceAccounts[emailResource].disabled'>
                    <Boolean>true</Boolean>
                  </set>
                  <set name='disableAccView.accounts[emailResource].disabled'>
                    <Boolean>true</Boolean>
                  </set>
                </block>
              </expression>
            </Action>
            <Action id='2' application='com.waveset.session.WorkflowServices'>
              <Argument name='op' value='checkinView'/>
              <Argument name='view' value='$(disableAccView)'/>
              <Argument name='authorized' value='true'/>
            </Action>
            <Transition to='Notify'/>
          </Activity>I would prefer to use the first method. Thank you in advance for your help

    After having a chance to actually look at the documentation I figured I'd add one more thing for those who happen to stumble across this in a search later. You are, of course, right. The services argument is what you need for disable user.
    For others reading this I should correct my previous posting. The "TargetResources" setting tends to be more of a form property rather than a workflow argument although it can be used with the checkoutView and checkinView workflow services. It is recommended by Sun, in the performance tuning guide, to keep views as small as necessary in order to speed things up.

  • Disable provisioned resource via API

    Hi All,
    could anyone of you post an example of request "Disable Provisioned Resource" by using the OIM API?
    Thank you,
    Giuseppe.

    there is no API for enable/disable but you have to call Enable User and Disable User task using OIM API
    Use below API for same
    use tcProvisioningOperationsIntf API.
    public void addProcessTaskInstance(long plTaskKey,long plOrcKey)
    plTaskKey - The key of the process task defined in process definition(nothing but MIL_KEY)
    plOrcKey - The key of the process order instance
    Use belo query to get MIL_KEY/plTaskKey before executing above method
    String sqlquery="select mil.mil_key from mil,pkg,tos,obj " +
    "where mil.mil_name = "Enable User" +
    "and obj.obj_name='<RO NAME>' " +
    "and obj.obj_key = pkg.obj_key " +
    "and tos.pkg_key = pkg.pkg_key " +
    "and mil.tos_key = tos.tos_key" ;
    use below for db connection in oim 11g
    Connection con=Platform.getOperationalDS().getConnection();
    Statement st=con.prepareStatement(query);
    ResultSet rs=st.executeQuery();
    while(rs.next())
    ong milkey=rs.getLong("mil_key");
    similarly you can get the ORC_KEY and call this method for running process task using code. Make sure 'manual insert' and 'Allow Multiple' property is enabled for this task. if not do it using design console

  • Disabled GL account but still allows postings

    I have disabled Oracle financials account segment values with immediate effect. However, users have reported balances being posted to these accounts via an automatic upload. How can I stop this?
    Presumably the account combinations are still enabled but what is the process for disabling accounts that are not in use?
    IS there a checklist that I need to follow?
    e.g disable all combinations using that account
    then disable the account?
    Please help
    Thanks
    JS
    Edited by: 966017 on 17-Oct-2012 09:44

    Once you have disabled flex values, you can run the "Program - Inherit Segment Value Attributes". This program will propogate the changes that you have made to the segment to all account combinations that contain that segment value.

  • Process AR Receipts via API

    Dear Friends,
    I have below few querys related to AR Receipts process via API.
    1)     Can we change the receipt status (APPROVED  CONFIRMED REMITTED  REVERSED/ CLEARED) through any API? Any one can explain how it is happening in real world?
    2)     Can we change the receipts accounting through any API. I want to mean here, the receipts GL accounts are defaulted from Receipt Method & MISC receipt activity (in case of MISC receipt). Can we change those defaulted accounts through any API?
    3)     In case of MISC receipt can we populate the “Paid By” field thought the MISC receipt creation API?
    Thanks & Regards
    VB

    Hi Muktech,
    Currently there is no API for BPM 11g. There is an API for the human task but this will not be sufficient for completing a process activity.
    Hope this helps.
    Kind Regards,
    Nils

  • I have a problem with disable my account in apple store

    hi i got a problem with disable my account apple store... so what should i do?

    You might be able to re-enable it via this page : http://appleid.apple.com, then 'reset your password'
    You might then need to log out of your account on your phone by tapping on your id in Settings > iTunes & App Store and then log back in so as to 'refresh' the account on it.
    If that doesn't fix it then you might need to contact iTunes Support : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page

  • Accessing the password store (PSTORE) via API

    After having created portal users via API srcipt, we now would like to register users
    for an external application programmatically.
    I.e. we have a portal user and we know his account info ( user / passwd ) for the external application. Portal seems to store account infos for external applications in a "Password Store". So i am looking for an API to register portal users for external applications providing the known acount info,
    i.e. sth. like
    PSTORE.InsertExtAccount( PortalUser, ApplicationName, ExtUser, Extpasswd).
    I had a look at http://www-sso.us.oracle.com/
    but could not find API description or any hints when an API like that will go production.
    Can anyone help me with that issue ?
    Thanks a lot.
    null

    This is probably the wrong forum for this question - I would try the 9iAS Portal forum.

  • Need Help Writing Server side to submit form via API

    Hey
    I need help writing a serverside application to submit
    information via API to a separate server.
    I have a client that uses constant contact for email
    campaigns. We want to add to her website a form taht submits the
    information needed to subscribe to her email list, to constant
    contact via API.
    FORM.asp :: (i got this one under control)
    name
    email
    and submits to serverside.asp
    SERVERSIDE.ASP
    In serverside.asp i need to have
    the API URL
    (https://api.constantcontact.com/0.1/API_AddSiteVisitor.jsp)
    username (of the constant contact account)
    password (of the constant contact account)
    name (submited from form.asp)
    email (submitted from form.asp)
    redirect URL (confirm.asp)
    Can anyone help get me going in the right direction?
    i have tried several things i found on the net and just cant
    get anyone to work correctly.
    One main issue i keep having is that if i get it to submit to
    the API url correctly - i get a success code, it doesnt redirect to
    the page i am trying to redirect to.
    ASP or ASP.NET code would be find.
    THANKS
    sam

    > This does require server side programming.
    > if you dont know what that is, then you dont know the
    answer to my question. I
    > know what i need to do - i just dont know HOW to do it.
    If you are submitting a form to a script on a remote server,
    and letting
    that script load content to the browser, YOU have no control
    over what it
    loads UNLESS there is some command you can send it that it
    will understand.
    No amount of ASP on your server is going to change what the
    remote script
    does.
    http://www.constantcontact.com/services/api/index.jsp
    they only allow their customers to see the instructions for
    the API so i
    can't search to see IF there is a redirect you can send with
    the form info.
    But posts on their support board say that there is.
    Alan
    Adobe Community Expert, dreamweaver
    http://www.adobe.com/communities/experts/

  • Can I upload color themes via API?

    I would like to upload color themes to Kuler accounts from our Android app, Real Colors (https://play.google.com/store/apps/details?id=com.macaw.pro).
    Is it possible via API?

    Hi AndreiBlaj,
    Kuler currently does not have any public APIs that support uploading color themes to Kuler acounts. However, we are actively looking into how can we help the Kuler customers in this regard. We will inform the community via forum posts if and when we have any news to share on this front.
    Thanks,
    Kuler team

  • Auto Disable Rogue Accounts

    We have a requirement to automatically disable any accounts within Active Directory (and/or other targets) when OIM cannot match the account to a known user. This could happen during target recon or as a separate scheduled task.
    What would be the most efficient way to accomplish this task? Your ideas are appreciated.
    Kerry

    Hi,
    Both the scheduled task and Event handler solution will work however in case of task you have the option to schedule in offline hours. May be you already thought but just to mention-
    1. In terms of Event handler you have to put an extra check for real event received which couldn't link to the user for some error as Event Linked/Process Matched will also go via Event Received. Kevin can confirm this!
    2. Are you running the reconciliation for disable users. In that case put a check to filter those events!!

  • How can a parent restrict a child's access to a PARENT'S PRE-EXSISTING iTunes account via iCloud's Family Sharing Program?

    How can a parent restrict a child's access to a PARENT'S PRE-EXSISTING iTunes account via iCloud's Family Sharing Program?  To explain further... I have a young son who is on my iCloud family sharing program... I am excited to be able to share SOME of my music in my iTunes library, but there are some songs and music videos that are not age appropriate for him and currently there is no way to restrict him from viewing and downloading anything off of my iTunes library.  Yes, I suppose I can delete the songs he shouldn't have access to, but I don't think I should have to do that... I paid for them and still like them and listen to them while I work out or am without my kids.  Is there a way for me to personally select which songs/videos I would like to "hide" from my children in an effort to shield them from inappropriate content?

    Hello ggg39,
    Welcome to the Apple Support Communities!
    I understand that you have some content in your iTunes library that you would like to restrict access for the child set up on Family Sharing with you. To do this, you can set restrictions on the child’s device as described in the attached article. 
    Family Sharing - Apple Support
    Now kids under 13 can have their own Apple IDs. As a parent or legal guardian, the family organizer can create an Apple ID for a child and add the child to the family group automatically. Ask to Buy is turned on by default, and the organizer can also limit the content kids have access to on their devices through Restrictions on an iOS device or parental controls in OS X and iTunes.
    For more information on restrictions and how to set them up, please reference the next attached article. 
    About Restrictions (parental controls) on iPhone, iPad, and iPod touch - Apple Support
    Have a great day,
    Joe

  • How to populate Values in Value Set via API or Interface

    Dear frds:
    i need to know is there any API or interface available to load thousands of values in particular valueset via API or Interface. I know Dataload is the alternative but i don't want to use that as the data is too much so its not feasible.
    waiting for your response
    Thanks.

    There is no API for fnd_flex_values.
    You will have to do a direct table insert (or call FND_FLEX_VALUES_PKG which does nothing but a direct table insert).
    Sandeep Gandhi

  • I synced two of my email accounts via gmail's POP3 thing. But now my iphone's gmail inbox shows a random selection of emails (not most recent ones that are in my inbox). How can I make my iphone inbox match what I see when I log on using a PC?

    I synced two of my email accounts via gmail's POP3 capabilities. But now my iphone's gmail inbox only shows a random selection of emails (i.e. right now it is May 31, 2013 but the emails in my inbox are a couple from Nov 12, a few from Oct 12, and then some way older than that and so on.When I log into my gmail from a computer, I see all my emails in the logical, standard order. How can I make my iphone inbox match what I see when I log on using a PC?

    If you're trying to decide between using POP and IMAP, we encourage you to use IMAP.
    Unlike POP, IMAP offers two-way communication between your web Gmail and your email client. This means when you log in to Gmail using a web browser, actions you perform on email clients and mobile devices (ex: putting mail in a 'work' folder) will instantly and automatically appear in Gmail (ex: it will already have a 'work' label on that email the next time you sign in).
    IMAP also provides a better method to access your mail from multiple devices. If you check your email at work, on your mobile phone, and again at home, IMAP ensures that new mail is accessible from any device at any given time.
    Finally, IMAP offers a more stable experience overall. Whereas POP is prone to losing messages or downloading the same messages multiple times, IMAP avoids this through two-way syncing capabilities between your mail clients and your web Gmail.
    That is from the page that you linked- does highlighted part of message ring a bell?

  • Apple disabled my account and disallowed my credit card!

    I'm so angry at Apple now that I don't know where to begin. There were unauthorized in app purchases from my account and I contacted a Apple asking for a refund. They first refused blaming me or someone else in my household did the purchases. I wrote back that no one but me knew the itunes password. I got a reply that they would make an exception in my case and refund me and for that I'm happy. But they also said this: "To prevent further purchasing, I have disabled your account and have disallowed your Credit card from being used on the iTunes Store.". Now its not even possible to install free apps on my iphone since I only get a message that my account is disabled. I contacted them again asking how I could get my account back and credit card enabled again. They said that there was nothing they could do, I had to make a phone call to their support to get help. Should I call them? I'm scared they will be just as bad and unhelpful as the mail support. I just want this solved as fast as possible, actually I regret asking for a refund. If I knew this would happen I would rather have paid the unauthorized purchase than have go through this ****.
    I really need to get my account back since I have done lots of earlier purchases that I don't want to lose.

    After talking to Apple support over phone, they have now enabled my account, but he couldn't do anything about the disallowed credit card. He said that I should contact Apple again by mail to get my credit card unbanned, so that's what I did. This is part of the reply I got from them:
    "-----, Apple takes the security of your account very seriously as you had earlier reported for unauthorized activity on your credit card, so it has been prevented from being used on the iTunes Store.
    If you have not done so already, please ask your card issuer to cancel the card and provide a replacement card with a new number."
    I never said there were any unauthorized activity on my credit card, there was absolutely no need for them to ban it in the first place. Now they refuse to unban it and suggest that I should get a new credit card (I only have one)? I will not do that, if you do not unban my credit card you lost me as a customer and I will never buy anything from Apple again.
    How can I convince Apple to unban my credit card? What should I do? I can't believe how bad support I got by e-mail from Apple. The person I talked to over phone was very nice and helpful, but the e-mail support is really horrible.

  • How can I add credit to my account via PayPal? I don't have a credit card? Thanks.

    How can I add credit to my account via PayPal? I don't have a credit card? Thanks.

    Open iTunes.  Scroll to the bottom.  Click "Redeem".

Maybe you are looking for

  • Delivery split based on schedule lines

    Hello toghether, I hope someone could help me. I have the following problem. I need to split a delivery, if some data on the schedule lines is different. That means, if I have 3 schedule lines with different data (except the delivery date) I need 3 d

  • PDF printing out background placeholder text in fillable forms

    I'm trying to print out a PDF which has fillable form fields. The Date of Birth text field has a faint grey placeholder text dd/mm/yyyy. Everytime those fields are filled in, the dd/mm/yyyy will also print out in the background. Is this an option tha

  • Unable to connect to Aventail Connect after upgrade to Lion 10.7

    Hello Thought i would try here before restoring back to 10.6. I use Aventail Connect with smart tunnelling to connect to my work. This worked perfectly in Snow leopard. Now get error message "failed to open tun device" Any idea's anyone. Thanks

  • Question about 'cin' & 'cout' (C++) (SOLVED)

    Probably a stupid question with a simple answer but here goes; when i compile the following code #include <iostream> #include <string> int main(int argc, char* argv[]) string buffer; while (1 == 1) cout<<" ## "; cin>>buffer; it compiles fine, when ru

  • BRCONNECT with error -1017 at location db_connect-2 when installationsap

    Hi guys, I am experiencing some problems when I install the NW CE7.1 with SID CE1 on Windows server with oracle. Note,At this server , the PI7.1 have been installed with SID PI1, now I want to install the CE7.1 on that with MCOD,  the oracle db insta