Disabling policy rules with a post-db-creation sql script

I want to disable some policy rules with a post-db-creation sql script.
Is this possible?
Can You provide me a how to?
Or a link?

The only way to do this, is to remove the policy rules from the target within OEM, or by disabling them.
Rob

Similar Messages

  • Disable AD account with access policy

    Hi all,
    how can I disable AD account with access policy (or create AD account in disabled state)
    Regards,
    Vladimir

    Dewan.Rajiv wrote:
    Access Polcies are just for triggering provisioning. You can custom AD connector or write your own to create user in disabled state using JNDI.Hi Dewan,
    I have to create a simple demo system, and I need a solution which is not too weird (that means use as little of disparate technologies as possible).
    I have two connected systems:
    1. HR system, which is a trusted source for user and organizational data.
    2. AD system, which is my provision destination.
    I want to comply to the following requirements:
    1. When a user is created in HR system, a new OIM account shall be created, and a new AD account shall or shall not (depending on HR data) be created in AD in disabled state
    2. When a user is marked as dismissed in HR system, the AD account if exists, shall be disabled and moved to some special place in AD tree.
    3. Same rules shall apply if the OIM account is created or marked as "Dismissed" manually by OIM administrator.
    I use OIM reconciliation to get source data and it is no problem for me to create any reconciliation event I need.
    I was considering creating Group->Access Policy->Resource chains, but Access Policy allows only to manage AD attributes, not account enable status.
    Or should I add some unmapped pseudo-attribute to AD connector and a task which will enable/disable AD account based on the value of this attribute?
    What other options do I have?
    Regards,
    Vladimir

  • ACS 5.3 Authorization problem with using Identity Groups in Access Policy Rule

    Hello guys, I am found a problem which I can't solve regarding authorization with using Identity Groups in Access Policy rule.
    ACS version: 5.3.0.40.6 (internal build B.839)
    I have very simple RADIUS Authorization rule which authorize user on behalf of right Identity Group.
    Requested Identity Group exist
    Testing user is created in Internal Users and has assigned requested Identity Group
    Radius Access Policy: 
    Authentication against Identity Store Sequence, where authorization server is external RSA SecurID device and additional attributes retrieval is configured from Internal Users.
    Authorization is very simple – One Rule with only one Condition which is: Identity Group - in - Requested_Testing_Rule. Then Default rule is set to Deny.
    When I will try login with my testing user then authentication against RSA SecurID is OK, but authorization will be denied by Default rule – It looks like my Rule with Identity Group is totally omitted.
    I am managing several other ACS servers (version 5.3 but with older patches) where similar rules are working without problem.
    What I am tested:
    Remove testing user and create his account again.
    Rename Identity Group
    Use another Identity Group
    Remove Access Policy rule and create it again
    Use Compound Condition: System:Identity Group
    Use Compound Condition: System:UserID instead of Identity Group in Rule (it is working without problem)
    Do you have any idea where problem can be?

    OK guys, it started working yesterday without any configuration change. Maybe it was some database inconsistence wich was solved by ACS itself.

  • Bank statement upload - change posting rule with search pattern function

    Hi Experts,
    I am trying to set up electronic bank statement. When clearing customer accounts I have some cases where the posting rule should be changed.
    I have for example the following text somewhere in the reference field:
    CASHPOOL.
    If found, I would like the posting rule changed so only GL-area is posted and not a clearing on customer account required.
    I set this up in the search pattern
    C > G
    A > L
    S > 0
    H > 1
    P
    O
    O
    L
    GL01 is the posting rule, that only posts area 1.
    I have assigned this pattern to the specific external code and also activated it. In the simulation function in the definition of the pattern I get the result (2 hits).
    However, when reading the statement (FF_5) nothing is changed and also in simulation transaction FEBSTS or in statement post-processing I do not see anything.
    Does anyone know whether I could get around this with the search pattern functionality here? What and how would I need to set it up to cover those case as above?
    Any help much appreciated.
    Thanks + Regards
    Hein

    Hi Shannon,
    we have assigned the search string as well as the external transaction in global EBS settings to 031 algorithm`(customer from document nubmer), as in normal cases customer invoices are to be cleared here and this is working fine.
    For this search pattern here with GL01 we would like to change the rule.
    However, my tests with statement does not work for that. The rule stays as is.
    So, from your words I read that I need to have here a second rule that changes the algorithm? Is this possible, what would I need to set so the original use is still working out (that customer items are cleared).
    Tanks + Regards
    Hein

  • 2lis_02_scl extract records with wrong posting date for Good Receipts.

    Hi Experts,
    We are currently having issue of mismatch between BW Schedule Line data with R/3 values for the Goods Receipts posting date updating incorrectly in to BW.
    Example.
    In table EKBE purchase order history we have following records.
    MANDT EBELN        EBELP   ZEKKN VGABE GJAHR BELNR      BUZEI BEWTP BWART BUDAT      MENGE
    501   5600453404   00010   00    1     2010  5012473031 0001  E     101   23.01.2010        1.250,000
    501   5600453404   00010   00    1     2010  5012473031 0002  E     101   23.01.2010        1.250,000
    501   5600453404   00010   00    1     2010  5012473031 0003  E     101   23.01.2010        1.250,000
    501   5600453404   00010   00    1     2010  5012693310 0001  E     101   26.02.2010        1.250,000
    Which means we have on posting date of 23.01.2010 1250*3 i.e. 3750 quantity of Goods Receipts.
    However when we check the extractor we get multiple records in internal table C_T_DATA and in psa.
    Line BWV ETENR   SLFDT              MENGE    ROCA BEDAT                            BUDAT          EBELN
           ORG                                                        NCEL
    1     001     0001     20100125     3750.000          20100113     ZNB     F     00000000     5600453404
    2     001     0002     20100226     1250.000          20100113     ZNB     F     00000000     5600453404
    3     002     0001     20100125     3750.000     X     20100113     ZNB     F     20100123     5600453404
    4     002     0001     20100125     3750.000          20100113     ZNB     F     20100123     5600453404
    5     003     0001     20100125     3750.000     X     20100113     ZNB     F     20100127     5600453404
    6     003     0001     20100125     3750.000          20100113     ZNB     F     20100127     5600453404
    7     002     0001     20100125     3750.000     X     20100113     ZNB     F     20100226     5600453404
    8     002     0001     20100125     3750.000          20100113     ZNB     F     20100226     5600453404
    9     002     0002     20100226     1250.000     X     20100113     ZNB     F     20100226     5600453404
    As can be seen we have record no 8 for ETENR (Schedule line 1) with posting date 26.02.2010 and another record with posting date 23.01.2010.
    Since we are getting 2 records the record with incorrect posting date overwrites the record with correct one.
    Any idea if this could be a standard extractor problem or any other way to resolve this issue.
    Any help would be appreciated.

    First of all, are you using a staging DSO? (You should ideally)
    If yes, is it a Write Optimized DSO? (Again, this is ideal)
    If its a standard DSO, the values maybe over-writing upon activation.
    You have 3 records (quantity = 1250 * 3) that have been receipted on 23.01.2010, where Posting Date = 23.01.2010.
    You also have a record (quantity = 1250 * 1) that has been receipted on 26.01.2010. Posting date = 26.01.2010.
    Now, in RSA3 & in PSA you can see more records than intended.
    This is because you have before & after images. (ROCANCEL = X or blank).
    ROCANCEL = X --> Before Image (record before change)
    ROCANCEL = blank --> After Image (record after change)
    This is a standard property of the extractor.
    Now, we also have something known as BWVORG (Process Keys). Each process, i.e. creating a PO, Goods Receipt, Invoice etc.. have different Process Keys.
    Creation - 001
    Goods Rcpt. - 002
    Invoice - 003
    We can see that record 8, i.e. BWVORG = 002 (GR) has been modified on 26.01.2010.
    That is why there is before image and after image.
    Which one should be the correct posting date? 23.01.2010?
    Normally in a Write optimized DSO, you will have all the records (before and after images & others as well).
    I hope this helps.
    Please let me know if otherwise.

  • Rule usage in Document template creation

    Dear all,
    In our scenerio,I am using document template(TS) creation step in WS.
    In this task I have created different word document templates.In my requirement based on the user, any one of the document template should come for creation.(not all the document templates).How can I do the config for that?Does it work,suppose the task is assigned with a Rule(The template is in creation mode)?

    Hi Srini,
    Use of background step indicates that it is additional step prior to your Document template. Do the processing what you were supposed to do in rule , get the required results from this step , store them in workfow container elements and Use them in your Document for template step.
    Regds,
    Akshay

  • Manual Bank Statement (One entry posted with wrong Posting Key)

    In The Manual Bank Statement, the user has posted one entry with wrong posting key, How can that be rectified? Or Is there anyway wherein the entire statement can be reversed?

    Hi,
    The standard document change rule will never allow to change the posting key irrespective of the transaction being used.
    You can use program RFEBKA96 to delete the statement so that you can post the same statement.
    If document generate with wrong posting key can be reversed through regular FB08
    Regards,
    Chintan Joshi

  • Rule with applescript does not run

    I made this script to get rid of special spam messages that the usual filter would detect, it's very effective, the only problem is that Mail does launch it from the rule I set up ...
    Weird ! Any idea welcome ...
    Fred (from France)

    Sometime Applescript is a bit like magic - you need the right incantation. I have several scripts that are fired by Mail rules, and am posting below the skeleton I use. I store the scripts in ~/Library/Scripts/Applications/Mail. I don't know if this is a requirement, but it does have the advantage of being able to run them as well from the script menu. To run them from the script menu they need the on run handler; they may run without it via a rule, but having got them working with it I am reluctant to remove it.
    In the rule I put "stop evaluating rules" after the "run applescript" action.
    AK
    click here to open this script in your editor<pre style="font-family: 'Monaco', 'Courier New', Courier, monospace; overflow:auto; color: #222; background: #DDD; padding: 0.2em; font-size: 10px; width:400px">using terms from application "Mail"
    on perform mail action with messages theMsges --for rule TheRule
    tell application "Mail"
    repeat with ThisOne in theMsges
    --your stuff goes here ...
    end repeat
    end tell
    end perform mail action with messages
    end using terms from
    using terms from application "Mail"
    on run
    tell application "Mail" to set sel to selection
    tell me to perform mail action with messages (sel)
    end run
    end using terms from
    </pre>

  • Disabling Auto Restore with TextEdit

    I have a brand new MacBook Pro with Lion 10.7.2 on it.  I don't like the "restore windows when quitting and reopening apps" option in the General preferences, so I've unchecked that.  This works for most apps, but not TextEdit.
    For some reason, TextEdit refuses to honor the general preference, and if I quit TextEdit with a file open, it reopens that file the next time I launch TextEdit.  I don't like this behavior -- I want it to work like it did in Snow Leopard.
    I've downloaded a third-party control panel called RestoreMeNot which is supposed to let you pick apps to disable this function with. But it says it can't disable TextEdit.
    What's going on?  And how do I prevent TextEdit from restoring windows the next time it launches?
    Thanks in advance.

    It appears that none of the information in any of the above responses to the original poster offer any resolution to this problem. When responding to a question, it would be VERY helpful to actually test the response rather than just posting blind speculation. Otherwise this forum becomes no more useful than using Yahoo! Answers as an online substitute for professional medical advice.
    I've made two calls to AppleCare in attempts to resolve this, and after speaking with an upper tier support rep, we determined there currently is no solution: Auto-resume with TextEdit is absolutely unavoidable, and closing windows must be done manually, one at a time. I use TextEdit for a variety of reasons, and I use it a lot - so it's very easy for me to have dozens - if not 150+ - TextEdit windows open at any given time, and being forced to close each of those individually, each time selecting "Don't Save," is ridiculous. If TextEdit must by default use auto-resume without the option of turning it off - which frankly is fine with me - Apple's OS X team MUST implement a way to kill all open documents if the user chooses to do so.
    You know, something along the lines of "Permanently close all open documents - Warning, all unsaved changes will be lost."
    (A similarly aggravating issue existed with Preview - but at least there's a wonky workaround that actually worked... as opposed to the wonky workarounds suggested for the problem with TextEdit.)

  • Link rule with workflow

    Hi everyone,
    I'm new to workflows and I'm testing the creation of rules. I created the fm to determine the right agent, I created the rule, but I'm having some problems linking the rule with my workflow. Can someone point me in the right direction ?
    thanks !!

    Hi Bjorn
    Open the step you want to assign the role to in the workflow builder (make sure it is a dialog or decision task).  In the Agents section choose 'Role (or Rule dep on Release level)' and put the number of your rule in the next field to the right (do not enter the 'AC' identifier).
    Hit enter and you will see the Binding button appear.  Use this to assign elements from your workflow container to your rule parameters.
    Regards
    Gareth

  • FPBW: Extract Open Items with a posting date in the future

    Dear all,
    I'm are currently searching for possibilities to extract Open Items with a posting date in the future from SAP IS-U 4.72 into SAP BW 3.5.
    Currently I'm using the Business Content extractor 0FC_OP_01 together with the mass transaction FPBW in IS-U.
    The problem I'm facing is within the mass transaction FPBW. I've have set the key date at 01.11.2007, but this job already runs for 52.000 seconds on the same database select-statement.
    Does anybody know a possible solution to improve the performance of the statement below? (I pasted it from the process overview)
    ================================
    SELECT
    /*+
      INDEX("DFKKOP" "DFKKOP~1" "DFKKOP^1" "DFKKOP____1" "DFKKOP____1__X" "DFKKOP_1")
      "BETRH" , "BETRW" , "BUDAT" , "BUKRS" , "FAEDN" , "GPART" , "GSBER" , "INKPS" , "SPART" , "VKONT" ,
      "WAERS" , "MAHNV" , "ABWBL" , "APPLK" , "AUGBD" , "AUGBL" , "AUGBT" , "AUGDT" , "AUGRD" , "AUGST" ,
      "AUGWA" , "BLART" , "BLDAT" , "EMGPA" , "GRKEY" , "HVORG" , "MANSP" , "MWSKZ" , "OPBEL" , "OPSTA" ,
      "OPUPK" , "PERSL" , "PYMET" , "QSSHB" , "SBETW" , "SPZAH" , "STUDT" , "TVORG" , "VTREF" , "XBLNR" ,
      "XMANL" , "HKONT" , "OPUPZ" , "OPUPW" , "STAKZ" , "WHGRP" , "AUGBS" , "XANZA" , "XRAGL" , "ABWTP" ,
      "ASTKZ"
    FROM
      "DFKKOP"
    WHERE
      "MANDT" = :A0 AND "AUGST" = :A1 AND "GPART" BETWEEN :A2 AND :A3 AND ( "AUGDT" = :A4 OR "AUGDT" > :A5
      AND ( "BUDAT" <= :A6 OR "AUGBD" <= :A7 ) OR "WHGRP" <> :A8 AND "OPUPW" = :A9 )
    ORDER BY
      "AUGST" , "GPART"#
    =================================
    I have already tried to create an index on the following fields (in the same order):
    - MANDT           Client
    - AUGST           Clearing status
    - GPART           Business Partner Number
    - AUGDT           Clearing date
    - BUDAT           Posting Date in the Document
    Any help would be appreciated!
    Thanks in advance,
    Steven Groot

    Hi Marcos,
    When you have created the Restricted keyfigures for Open Items, You have to add the date characteristic on which you are looking open item and add the variable there.Here you have to use a variable of type Interval and select the operator "<" the date of the Variable.If you go through, there are standard variable for keydate, which you can use directly.
    Hope you got the idea
    Regards
    Happy Tony

  • How to do binding of rule with workflow

    hi all
    i have a problem regarding the binding of rule ,which i have maintained ,with the workflow on which i am working.
    can any one please guide me how to do the binding of rule with workflow,the way am doing is like:
    i have vreated a container element in workflow compatible with container element used in rule where agents are kept.
    problem is arising when am trying to import that container in rule to my workflow ,at this step please suggest what should i bind in the binding of the workflow container.
    the exact parameters detail will really appreciated.
    am not new to the rule or workflow but somehow thing am doing is not working exactly the way i want it to be so.
    full marks will be rewarded
    best regards
    ashish

    Hi Ashish,
    Please refer the following link. It may be helpful.
    http://help.sap.com/saphelp_crm60/helpdata/en/c5/e4b0ae453d11d189430000e829fbbd/content.htm
    Regards,
    Johnny.

  • Issue with the Posting Date of the Purchase Order.

    Hi All,
    There are fields in BW like SSL1: Time OK, SSL2: Qty OK, SSL3: Time & Qty Ok, SSL4: Days Late (Routines are written to calculate). These fields will indicate whether the delivery against a GR is OK or not with respect to Time, Quantity and the No. of Days..
    But here the issue I am facing is
    If there is only1 delivery/ GR against a single item the calculation in BW are correct - i.e. for a particular PO if there is only one delivery the above fields like SSL1: Time Ok, SSL2: Qty OK will show like the delivery is done within the specified time and everything is OK (in case if it is delivered within the allotted time)
    But if there are multiple deliveries or multiple GR's  posted for one PO item, the calculations are going wrong i.e. even if the delivery is done well within the specified time it is showing the wrong calculations like it is delievered too late. Because in this case the earlier dates are overwritten.
    Can anyone throw me some light on how can I go about solving this issue.
    I am thinking of declaring the Posting Date as the KeyField of the DSO as of now it is a Data field  I also want to know the impact of assigning this as a Keyfield.
    Thanks in advance,
    Prasapbi

    Hi,
    As I understand, you have a DSO based on Purchase Order and your key field is PO and its line item. The problem as you stated will always be there if you have multiple deliveries/GRs created for a single line item because the system will overwrite the entries for same key.
    Problem with adding Posting date as keyfield will be that then your key will be PO-PO Lineitem-Date. When PO will be created, the Posting date will be blank(correct me here if I am wrong), therefore you will have one entry for same PO-line item combination. One without date and other with date, which again would be incorrect. If my assumption about Posting date was wrong, even then your data may not be correct because then you may have many entries with same posting date which again would overwrite each other.
    If there is any direct link between PO line item and number of deliveries that will get created for them, then you can bring that field in DSO as keyfield. But I don't think there is any such field.
    Looking at your report requirement, I would suggest that you make a DSO based on Goods Receipts and then calculate these keyfigures by comparing the dates between GR posting date and PO line item date.
    Else you can change the way your datasource works(if its generic one based on function module). Since your main requirement is to check whether the GR posting date has met your SLA or not, you should fetch all the details only when GR is created and make your key field as PO-PO Line item-GR

  • Using Quota templates with Self Service Site Creation

    I am having an issue with quota templates not getting assigned to site collections created with Self Service Site Creation.
    I set up a quota template in 'Specify Quota Templates' and give it the name 'test'.  I then go to self service site creation management and select the name 'test' from the 'Quota template to apply' dropdown.  I then create a site using self service
    site creation and when completed no template is applied to the new site collection.  I am wondering if anybody has seen this or if not am I incorrect in what I am expecting, that is that all site created in that web application should have the quota template
    applied that I selected in self-service site creation management
    Steven Albrecht
    University of Colorado Denver
    Steven Albrecht

    Hi Steven,
    Please create a quota template named "Personal site" and apply in self service site creation page, then check again.
    http://blogs.msdn.com/b/jimmiet/archive/2012/07/22/10332361.aspx
    http://danmyhre.wordpress.com/2010/03/16/my-sites-do-not-have-a-quota-when-they-are-created/
    Thanks
    Daniel Yang
    TechNet Community Support

  • How to install unlimited strength policy files with 2003 windows server

    Hi all,
    I am working on encryption AES 256 bit key encryption.
    128 is default encryption key.But for use 256 bit encryption key need to add unlimited strength policy file with jdk.
    That is working fine on windows xp.
    Now problem
    But when i run on client machine with operating system windows 2003 server standard.
    I replaced all files under folder Java\jdk1.6.0_10\jre\lib\security with files which i am using on windows XP.
    Restarted the computer after update files but on windows server 2003 256 bit key encryption not working.
    Giving following exception
    java.security.InvalidKeyException: Illegal key size or default parameters
         javax.crypto.Cipher.a(DashoA13*..)
         javax.crypto.Cipher.a(DashoA13*..)
         javax.crypto.Cipher.a(DashoA13*..)
         javax.crypto.Cipher.init(DashoA13*..)
         javax.crypto.Cipher.init(DashoA13*..)
    Please suggest me how to run encryption on windows server 2003..
    Thanks
    Anu

    anu1106 wrote:
    I replaced all files under folder Java\jdk1.6.0_10\jre\lib\security with files which i am using on windows XP.Why? Why not just install the unlimited strength files in the normal way according to the installation instructions given in the distribution file?

Maybe you are looking for