Displaying AD Organizational Unit Lookups specific to an IT Resource

I have the OIM Active Directory Connector 9.1.1.1 installed to connect to Microsoft Active Directory server 2003 target system. I currently am able to create OU Lookups from the Design Console that populate the AD User form for a particular Server type – AD server.
Using the connector guidelines, currently if I create a Lookup for an OU in Lookup.ADReconciliation.Organization and map it to Group “AD”, then in my AD User Form I see all the lookups created that link to Resource type AD server.
In my client environment there are several 100 OU's per network (each network being an IT resource). Therefore I would like to create OU Lookups pointing to one particular IT resource rather than the entire resource type.
Requirement: I have Resource Type AD Server with 2 IT resources - ADITResource, GCADITResource
Using the OIM web console , in the Edit AD user process form, If I choose AD Server = ADITResource , I want to see all OU's specific to ADITResource in the corresponding Organization Name lookup screen.
If I choose AD Server = GCADITResource, I want to see all OU's specific to GCADIT Resource only in the Organization Name lookup.
Currently if I choose either IT Resource, in the organization lookup I see all OU's for the Resource Type = AD Server.
Has anyone done this before?
Also in the Lookup Definition screen ( Lookup.ADReconciliation.Organization) what does the field “Group” signify? The AD connector document says to give a value of “AD” for this. What configuration changes would I have to make in the Design console in defining the Lookups and other elements to achieve the requirement described above?
Any suggestions would be much appreciated.
Thanks

The feature you are talking about is out of the box feature , It should work .
Make sure when reconciling the OUs you should have corresponsding value of IT Resource in the task scheduler.
Thanks
Suren

Similar Messages

Displaying business role and organization unit info in context area

Hi gurus,
I want to bring the business role and organizational unit details with which the user has loogged in the web UI in context area.
Other idea may me next to the logo. Below is the example how it should look like
Logged on as: Business role/Organization unit details
Can anybody please help.
Regards
Yogesh

Hi
The following link provides required solution.
https://wiki.sdn.sap.com/wiki/display/CRM/WelcomeUserMessageinWeb+UI
Paparao

Display only current organizational units

Hi,
If you use transaction S_AHR_61016495 to display organizational structure, you can choose which evaluation period to use. If you choose Today as evaluation period, you only display organizational units that are currently connected to the organizational unit you search for. If you choose All as evaluation period, you also display org. units that are no longer connected to the org. unit.
Does anyone know if you can set up to only display currently connected org. units when searching for org. units in for example shift planning?
BR
Magnus

You could do this using calculated field formula. Refer to the following posts for more information
http://modery.net/showing-only-this-weeks-events-of-a-sharepoint-calendar/
http://ankursharepoint.wordpress.com/2011/01/19/list-filter-current-week-items-only/
http://abstractspaces.wordpress.com/2008/05/14/filter-list-view-by-current-week/
--Cheers

Sharepoint audience targeted items no longer showing for specific people due to Organizational Unit was renamed,

we found one day that audience targeted items were no longer showing for specific people.
After a bit of troubleshooting, we discovered that one of the active directory domain groups that we were using was in an Organizational Unit (OU) that had been renamed.
After a bit more research, it appears that whenever a profile import occurs in SharePoint and the corresponding membership import occurs, SharePoint stores all the domain group membership in
a database table in the SSP database called MemberGroup. This table stores all the groups with a corresponding count and the group's canonical name.
When the group's canonical name changes in active directory SharePoint finds the new group and adds it as a duplicate entry into the table, and orphans the old record.
However, the audience rules still point to the old record, which is no longer valid and the audience compiles without any members.
http://vspug.com/mcotw/2008/07/28/do-you-use-sharepoint-audiences-beware-of-ad-changes/#comment-83
looking for solution for this problem ?

Hi,
There is a way to restore Membership information synchronization between content database and profile database for all site collections. How to do this is described in a microsoft support case:
http://www.google.no/url?sa=t&rct=j&q=&esrc=s&frm=1&source=web&cd=1&cad=rja&uact=8&ved=0CCcQFjAA&url=http%3A%2F%2Fsupport.microsoft.com%2Fkb%2F2703630&ei=4QFNU9yLGKfS4QSbvoDoBw&usg=AFQjCNFPI949Iehb8nObcQlkMf5BdfixDA&sig2=JiNfXlHX4Tf8VCS_sxvBog
Hope this can be helpful.
Heidi Lillebuen

Create a portal user with a specific Organizational Unit in the OID??

I would like to split my portal users by Organizational Units in the OID.
e.g.:
ou=country1, cn=user1
ou=country1, cn=user2
ou=country2, cn=user3
is it possible?
is it possible trough the administer tab of Portal?
Any experience ?
feedback??
Thanks
Didier

I think it is feasible.
But not through Administer tab.
Use your own api to add users (DBMS_LDAP.add_s + WWSEC_API.add_portal_user)
cn=user1, ou=country1, cn=user_search_base
cn=user2, ou=country2, cn=user_search_base
or maybe try to change dynamically user_create_base, I don't know if it is possible or not

How to Disable Group Manager Tab for Specific OU(Organizational Unit)

Hi All,
How can i disable Group Manager Tab for particular OU(Organizational Unit) in OAM 10.1.4.0.1? Where should i configure to disable this particular stuff?
Can someone please give suggestions on this issue?
Thanks,
Ganesh

Hi Ganesh,
If you have many OUs under the searchbase that you want to include, but one that you want to exclude, then you could add a filter to the Group Manager tab (in Identity System Console/Group Manager configuration/Tabs menu item) like:
(!(ou:dn:=mygroup))
where mygroup is the ou that you want to exclude
Depending on your ldap sctructure, it may be more appropriate to add searchbases that you want to include rather than use filters to exclude those that you don't want.
Regards,
Colin

How to exclude specific PCs or Organization Unit from discovery and All system collection?

We want to exclude some PCs from discovery and All System collection.
1. We want to exclude with out modfing query of All System collection and without modifiing registry.
2. We want to exclude with Organization unit container.
We have also tested Include and exclude option which is avaible in system discovery (Discovery method) but it is not working as per expected.
Please help us.

Jason messaged me offline and said that the method of denying read access does not always work. I was thinking that I had done that back in 2003 but have not tested it in the past 10 years or so. It would be easy to test though if you want to give it a try.
Just browse to the OU on ADUC, right click, properties, security tab. Click Add, change the object type to computers, enter the same of the server that performs discovery, click ok, click deny on all boxes and click OK.
Actually I just did it to write the instructions above. When I see in my adsysdis.log clearly indicates to me that, in my environment, this works.
John Marcum | http://myitforum.com/myitforumwp/author/johnmarcum/

CLM Company-Organization Unit in Master Agreement

Hi guys
In a CLM Master Agreement, after I select a company, I am able to select any organizational unit, even if it does not belong to that company. The system does not issue any error message. Is it standard behavior?
Shouldnt the system validate that only the organizational units which are belonging to a particular company be displayed?
Thanks and regards
Ajay

Hi,
It looks it is standard behaviour.
We have put in script to validate and added a query to query group so that user can search ORG UNIT by company code.
//........................Gets company code
getChildFieldByFieldId(parentFieldId,childFieldId){
        value=doc.getExtensionField(parentFieldId).get();
     if(hasValue(value)){
          parenthome=IBeanHomeLocator.lookup(session,value);
          parentbean=parenthome.find(value);
          childField=parentbean.getExtensionField(childFieldId).get();
          return childField;
     return null;
validateCompanyCodes(parentfieldId,childFieldId){
        flag=false;
     maCompanyCode=doc.getExtensionField("SAPCCODE").get();
        companyCode=getChildFieldByFieldId(parentfieldId,childFieldId);
     if(companyCode==null @or !hasValue(maCompanyCode)){
          flag=false;
     }else if(maCompanyCode.equals(companyCode)){
          flag=true;
     return flag;
purchasingOrgCompanyCodeMatch=validateCompanyCodes("SAPPORG","sapccode");

Dimensional Hierarchy - Organizational unit

Hi all,
I have the following queries related to Dimensional hierarchy.
1. Why we associate logical columns in the dimensional hierarchy?
2. For a particular organization unit there is no dimensional hierarchy, i mean data is at detailed level..
How to display data? ....i mean is it required to build dimensional hierarchy.
Please clarify.
regards
chandra kanth

1. Why we associate logical columns in the dimensional hierarchy?
Dimension hierarchies establish levels for data groupings and calculations in your report, they also provide paths for drill down.
2. For a particular organization unit there is no dimensional hierarchy, i mean data is at detailed level..
How to display data? ....i mean is it required to build dimensional hierarchy.
Data will always be at granular level for any dimension in a typical data warehouse. In order to report the fact at higher level for business users we create this dimensional hierarchy in the BMM. So, if you want to create your report that shows measure at specific level of organization then create it, else no need.

How do I activate the object history for an organizational unit ?

Dear experts,
we're using organizational units, positions, persons and users of the
organizational management (Transactions PPOCE and PPOME) for
the determination of (possible) agents in our Workflows.
The objects seem to have an object history, at least you find such an
option in the "find by" window on the left hand side of the maintenance
transactions, but in our system there are no entries and I can't figure
out how to activate history entries to be written.
Do you ?
Thanks in advance
Andreas

Hi,
In OM all relation have a validity. I think you mean this with object history.
If you double click an organizational unit for instance and then open the detail tab (if it wasn't open already)
there you'll see Valid On with todays date this is the date which is used for determining the organizational structure, also you'll see No Periods with a green square to the left of the text.
Just above the text Valid On, you'll see a button, when you click on the display periods button you can change the date to see what the relation of the object was at that time.
You can also search the HR forum for more on organizational management.
Kind regards, Rob Dielemans

Regarding workflow organizational unit

Hi,
I have FM SWI_GET_USERS_OF_ORG_UNIT passing some oranizational unit number of the production system which was not there in devlopment server. I am testing in development server now to work the workflow I need to chnage the number to developemnt server organizational unit number. How to find that number.
thanks,
Kishore B A

Hey Shaurya,
I had gone thru tht link and already got answer as -
"This addition specifies which selection screen is called. dynnr is a data object that must contain the screen number of a selection screen defined in the called program when the SUBMIT statement is called.
u2022 If the addition USING SELECTION-SCREEN is omitted or the screen number 1000 is entered, the standard selection screen is called. If no standard selection screen is defined in the called program, no selection screen is called.
u2022 If a screen number that is not 1000 is entered in the addition USING SELECTION-SCREEN, the corresponding independent selection screen is called. If no selection screen with this screen number is defined in the called program, this leads to an untreatable exception."
==========
But now my query is ....as by writing this code ...report is getting executed directly...ok...
Can u suggest if there is any possibility of calling the t-code 'RE_RHAKTI00' with 3 values before execution...coz there r also other check boxes and radiobuttons which user will select as per requirement before executing the report.
Regards
Nitin

Have to diplay all the active employees in an Organizational unit n HR ABAP

HI,
I am new to HR ABAP.
In my selection screen I have to get the Organizational unit from the user and based on that organizational unit value i have to display the details like pernr,fname and other fields of all the active employee in that OU.
I have to use logical database in the program .
so it would be helpful if anyone of you can give some idea or send some sample programs or materials for reference.
Regards,
Kiruthi

HI,
I am new to HR ABAP.
In my selection screen I have to get the Organizational unit from the user and based on that organizational unit value i have to display the details like pernr,fname and other fields of all the active employee in that OU.
I have to use logical database in the program .
so it would be helpful if anyone of you can give some idea or send some sample programs or materials for reference.
Regards,
Kiruthi

Getting the organization unit of a responsibility used ...

Hi,
Are there any manners to get the organization unit according to the responsility the user selected...????
For example...
Assume that the user has the following responsibility:
inventory employee <-----------role as a single inv. employee(access only to view)
admin of inventory N234 <-----------role as an admin to this particular inventory(access to view, edit, check, ...)
admin of inventory N239 <-----------role as an admin to this particular inventory(access to view, edit, check, ...)
e.t.c..
How is it possible to correlate the responsibilities 2,3 (of the above list) to the organization units(units of a company) coded as 234, 239 respectively..???
I assume that this can be done using a profile (at responsibility level and/or user level)...In this case is there any profile name i can use..or i should create a new one...??? ----{I use the MO:Organization Unit to get the business group id/company}.
Is it possible to acheive the above through the use of a form parameter...(but the question is how to correlate the specific to an organization unit responsibility to a code representing this unit (inventory N234) without the use of a profile - as a second manner)...???
Note: I use 11.5.10 EBS
Many thanks,
Sim

Hi Sim,
One thing you need to be carefull about is in what context you need the ID of a certain organizational unit. There are different types of orgs that are in play at different times.
e.g. Operating Unit is the securing attribute for many subledgers such as Order Management, Accounts Receivables/Payables, Purchasing.
Inventory Unit is relevant when you look at Inventory Transactions, Costing, Planning etc.
If we assume that you are only interested in INV orgs then whenever you enter a form that deals with inventory related issue the user is prompted to choose an organization and the choice results in setting the context variable MFG_ORGANIZATION for the session.
If you want to control which Inventory Organization a user or responsibility has access to you go to Inventory > Setup > Organizations > Organization Access. Here you can restrict access by Responsibility. Take a carefull look into the help text to understand implications - I have copied the first couple of paragraphs:
+You can specify which organizations a responsibility can access by mapping responsibilities to organizations. Once this mapping is set up, a user logging into an Oracle Manufacturing product is restricted to the organizations mapped to the responsibility chosen. The Change Organization window is restricted as well.
Attention: Until you assign an organization to a responsibility in this window, all responsibilities have access to all organizations. Once you have restricted any responsibility to an organization, you must then explicitly define the organizations which all responsibilities can access.
Attention: This feature does not restrict access once the user is in the product. Users with access to functions that cross multiple organizations (such as ATP, Inter-organization Transfers, Item Search, Multi-organization Quantity Report, and so on) can still specify any valid organization when running these functions.+
/Niels LM

How to get users from Organizational Unit and with worker's subgroup

Hi
I am looking for a f. module to get the list of users from specific Organizational Unit and with specific worker's subgroup.
I found f. module SWI_GET_USERS_OF_ORG_UNIT but it seems not working and only returns the users, how can I narrow the selection to get only from specific worker's subgroup?
Thank you

Hi,
Try with FM RH_STRUC_GET with following parameters:
ACT_OTYPE = O
ACT_OBJID = worker's subgroup
ACT_WEGID = SBESX
Most important is to specify OBJID as the workers's subgroup, values for the others parameters may vary.
Cheers.

Organizational Unit is managed by Position

i want to know which organizational Unit is managed by which position i.e. which is the chief position in particular Organizational unit.
In which table i can get this relation ship.

hai..
standard reports are available in easy access
Existing Organizational Units (Report RHXEXI00)
Staff Functions for Organizational Units (Report RHXSTAB0)
Organizational Structure with Persons (Report RHXSTR02)
Organizational Structure with Work Centers (Report RHXSTR02)
Existing Jobs (Report RHXEXI02)
Job Index (Report RHSTEL00)
Job Description (Report RHXDESC0)
Complete Job Description (Report RHXSCRP0)
Periods for Unoccupied Positions (Report RHFILLPOS)
Existing Positions (Report RHXEXI03)
Staff Assignments (Report RHSBES00)
Position Description (Report RHXDESC1)
Staff Functions for Positions (Report RHXSTAB1)
Authorities and Resources (Report RHXHFMT0)
Planned Labor Costs (Report RHSOLO00/RHXSOLO00)
Vacant Positions (Report RHVOPOS0)
Obsolete Positions (Report RHVOPOS1)
Complete Position Description (Report RHXSCRP1)
Reporting Structure without Persons (Report RHSTR05)
Reporting Structure with Persons (Report RHSTR04)
Existing Work Centers (Report RHXEXI05)
Work Centers per Organizational Unit (Report RHXSTRU06)
Existing Tasks (Report RHXEXI04)
Activity Profile of Positions (Report RHXSTR07)
Activity Profile of Positions with Persons (Report RHXSTR08)
Existing Objects (Report RHEXIST0)
Structure Display/Maintenance (RHSTRU00)
Reporting on an Infotype (Report RHINFAW0)
Starting an HR Report (Report RHPNPSUB)

Displaying AD Organizational Unit Lookups specific to an IT Resource

Similar Messages

Maybe you are looking for