Granting an admin rights to view and execute a task with user actions

I am trying to grant an admin the rights to view and execute a new task that i have created from the search results and user actions applet.
I have added an auth type to the authorization types configuration object with the following:
<AuthType name="terminateUser" extends="TaskDefinition,TaskInstance,TaskTemplate"/>
I created a new task and assigned it this auth type. I then created the new admin group and assigned the following permissions:
<Permission type='terminateUser' rights='View'/>
I then added this capability to the admin role to which the user has been assigned. This admin role also has the view user capability and has been assigned to the top level of this organization as a controlled organization.
I also added the task to the user actions configuration so that the menu item appears in the context menu and on the find users page.
The user can see all users but cannot see the new task. The only thing that is visible is the "view" menu item.
I have other users that have lots more capabilites that can execute this task with no problems. I am wondering if the view user capability is the problem or is there some other capability that anyone knows of that I must add in order to allow this admin role to view and execute this task.
Thanks,
Ruth

BTW, the answer is to restart the app server. Duh!
Ruth

Similar Messages

  • Is it can grant an admin right for special application ?(No Runas as Administrator)

    Dear All
    Background: We have an application which run on users group in server 2000 SP4 is normal.
    We want upgrade the OS to Win7 , on the Win7 the application can not launch on normal users group.
    I was try the properties of compatibility to server 2000 and choose "Run this program as an administrator" and edit the regedit key permission , both of all is not work on my case.
    It is ok right-click the application and runas as administrator, but on the other hand I find runas administrator has some other error with the application.
    May I know is it has a method can grant the admin right to special user when running special application ?
    Regards All

    Hi,
    What application can not run in Windows 7? I think there is a application compatibility issue, so please attempt to run Program Compability troubleshooter.
    Also, you said you got some error while you ran as administrator with runas command. And what are the errors?
    RUNAS /user:<Username> Program
    Based on my knowledge, we cannot grant the special user with admin right unless you add this special user to Administrators group. When a special user is running a application requiring administrator permission, it will prompt to input administrator username
    and password.
    Andy Altmann
    TechNet Community Support

  • Execute SQL Task with Parameter - from DB2 to SQL Server

    I am pulling data from DB2 to SQL Server.
    1st Execute SQL task runs the following against DB2:
    SELECT TIMESTAMP(CHAR(CURRENT_DATE - (DAY(CURRENT_DATE)-1) DAYS - 1 MONTH)) as START_MONTH
    FROM SYSIBM.SYSDUMMY1;
    I'm storing it as a Result Set.
    Next I have a Data Flow Task.  This pulls data from DB2 where the date matches the parameter.
    FROM SCHEMA.TABLE t
    WHERE DATE_TIME_COLUMN= ?
    This works fine. Guessing, because the parameter source is DB2 and the Data Flow source is DB2.
    The problem is, I want to remove existing data for the same date in the SQL table.  IE, if I'm pulling March 2014 data from DB2, I want to be sure there is no March 2014 data in the SQL table.  The main use is for re-runs.
    So, I added another Execute SQL task after the first one that assigns the variable, and before the Data Flow Task. This runs the following statement against SQL Server:
    DELETE FROM
    database.dbo.table
    WHERE DATE_TIME_FIELD >= ?
    The package fails at the new Execute SQL Task with the following error message:
    Error: 0xC002F210 at Execute SQL Task, Execute SQL Task: Executing the query "DELETE FROM
    SBO.dbo.tblHE_MSP_FEE_BUCKETS
    WHERE T..." failed with the following error: "Parameter name is unrecognized.". Possible failure reasons: Problems with the query, "ResultSet" property not set correctly, parameters not set correctly, or connection not established
    correctly.
    Task failed: Execute SQL Task
    SSIS package "Load_MSP_Fee_Buckets_SQL.dtsx" finished: Success.
    The program '[14240] Load_MSP_Fee_Buckets_SQL.dtsx: DTS' has exited with code 0 (0x0).
    I am assuming this is something to do with the Parameter source being DB2, and trying to use against SQL?
    Any suggestions on how to make this work??
    Thanks,
    -Al H

    Parameter name is unrecognized
    is the key, how come DB2 is related if it runs against SQL Server
    What I think is happening you do not use the OLEDB connection to SQL Server.
    Likewise, if it is ADO then the query needs to be
    DELETE FROM
    database.dbo.table
    WHERE DATE_TIME_FIELD >= @MyDate
    Arthur My Blog

  • Grant an account rights to read and modify files in all Redirected Documents folders?

    We have set up redirected Documents folder with the default recommended permissions that does not grant Administrators any access to the folders.  If an administrator needs access to a folder, they take ownership of the folder, grants themselves permissions
    and does whatever they need to do with the folder such as delete it or give access to a new person.  This is rarely needed so it is not a big deal.
    However,  we  now need to import everyone's Outlook PSTs (stored in their redirected MyDoc's so they are backed up) into their new  Exchange Archive mailboxes.  We will also need to be able to verify all PSTs are gone from the file server
    once the contents are imported into their archive mailbox.  We also need to be able to run reports showing which users are storing music and video files in their folders and how much.
    When I tried to run Windirstat against the share containing the redirected MyDocs folders to see what file types where taking up space, I got very incomplete results even with using psexec running as system account due to inadequate permissions on the user's
    folders.  
    We also need  the PST Capture Tool to have rights to read into their documents folders and move any psts found into the users archive mailbox.
    Rather than having to go to each user's redirected documents fiolder one by one and take ownership to change permissions, is there a more efficient way to have an account running the PST Capture Tool and WindirStat have access to read and change files in
    the user's redirected documents folders?
    I thought of just removing the option in the GPO that says "Grant the user exclusive rights to My Documents," but I don't think that will work on pre-existing
    folders that already have permissions set.

    Hi,
    Based on my research, if you already have a bunch of existing redirected My Documents folders set up with the
    Grant the user exclusive rights to My Documents check box selected, the only documented way to regain access to the folders is to take ownership of each individual folder and manually edit the permissions to give the Administrators group full
    control.
    We can use powershell script to help regain access to the folders, for more details, please go through the below link:
    http://mypkb.wordpress.com/2008/12/29/how-to-restore-administrators-access-to-redirected-my-documents-folder/
    Regards,
    Yan Li
    Regards, Yan Li

  • How to view and edit videos made with Vixia HF R300 on my computer

    I downloaded all the software that came with the camcorder.  And impoted the videos.  I cannot play the videos on the computer.  Is there software that should have came with the camcorder that would allow me to view and edit the video?  Thanks

    Hi Brianpucci,
    For the best answer, I recommend calling Pixela for assistance.  Here's their contact information:
    Telephone support: 1-800-458-4029 Monday-Friday 9:00 a.m. - 6:00 p.m. (PST)
    Did this answer your question? Please click the Accept as Solution button so that others may find the answer as well.

  • Combining package configuration and Execute SQL task at run time

    Hi everyone,
    I have an issue regarding setting values at run time
    I use package configuration to manage different enviroments scenarios (DEV, PROD):
    XML file to store the connections string of SSISConfigDB
    and the actual values of parameters in that SSISConfig DB tables Filtered by ConfigurationFilter column
    Now, one of my packages needs in addition setting at run time value of a flat file name
    i used an Execute SQL task - within the task i read into a variable the file name using command line
    then, the full path of Flat File Connection is set by expression concatenating the root folder and the variable
    the problem is that the variable stays empy! as if the Execute SQL task was never executed!
     Am i doing something incorrect? in the package configuration wizard the configured value are only XML file and the connection string of the DB.
    to summerize - how can i combine package configuration, default value, Execute SQL task and expression at runtime?

    1.EvaluateasExpression=TRUE (Full Path variable)
    2. Do you mean to invlole a ISNULL() function in the expression? if so, no
    3. Of course i recieve a valid value
    4. The Full path expression is evaluated to the root folder - without the portion of the file name
    here is the syntax in Execute SQL Task:
      truncate table OnErrorFlagTable
      Declare @Path varchar(128)
      Declare @FileName varchar(128) 
      Declare @SenderID varchar(5)
      Declare @INST_COD varchar(5)
      Declare @Flag int = 0
     Declare @FileType varchar(2)='01'
      Truncate table TraumaRecords
    Select @Path = 'C:\RootFolder\'
     --***Insert into Temp table the file so we can take his name***--
    Create Table #Tmp(Txt Varchar(Max))
    Insert Into #Tmp(Txt)
    Exec master..xp_cmdshell 'Dir *.txt C:\RootFolder\/b'
    select top 1 @Filename = Txt From #Tmp
    Where ISNUMERIC(substring(Txt,1,1))=1
    order by Txt desc
    Insert into OnErrorFlagTable
    Select 2,@FileName
    Select @FileName as TraumaFileName,@FileType as FileType
    Then, in ResultSet TraumaFileName and FileType are mapped
    Expression of @TraumaFlatfileFullPath is
    @[User::TraumaFlatfilePath]+ @[User::TraumaFlatFileName]
    where the variable @[User::TraumaFlatfilePath] is evaluated in variable window (default value)
    and it's value is C:\RootFolder\
    and @[User::TraumaFlatFileName] is the ResultSet of the ExecuteSQLTask
    and for some reason when executed in SSIS return null while in SSMS return the expected value
    Can you try making this into a procedure with required parameters and call it from SQL task to see if you get return value correctly? Use OUTPUT parameters for getting back required values
    Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

  • How to view and print xps documents with Safari

    Is there a way to view and print Microsoft *.xps using Safari?

    xps is a Microsoft Proprietary format. There is a third-party viewer app, but I don't know how well it works or if it is compatible with Lion: http://www.nixps.com/index.html

  • HELP: SSIS 2012 - Execute SQL Task with resultset to populate user variables produces DBNull error

    I am experiencing an unexplainable behavior with the Execute SQL Task control in SSIS 2012. The following is a description of how to simulate
    the issue I will attempt to describe:
    1. Create a package and add two variables User::varTest1 and User::varTest2 both of String type with default value of "Select GetDate()"
    for each, have shown this to not matter as the same behavior occurs when using a fixed string value or empty string value.
    2. Add a new Execute SQL Task to the control flow.
    3. Configure an OLE DB connection.
    4. Set SQLSourceType = "Direct Input"
    5. Set the ResultSet property of the task to "Single Row"
    6. In the ResultSet tab add two results as follows: 
    Result Name: returnvalue1, Variable Name: User::varTest1
    Result Name: returnvalue2, Variable Name: User::varTest2
    7. Set an expression for the SqlStatementSource property with a string value of "Select 'Test' returnvalue1, 'Testing' returnvalue2'"
    The idea is that the source would be dynamically set in order to run a t-sql statement which would have dynamic values for database name
    or object that would be created at runtime and then executed to set the user variable values from its resultset. Instead what occurs is that a DBNull error occurs.
    I am not sure if anyone else has experienced this behavior performing similiar actions with the Execute SQL Task or not. Any help would be
    appreciated. The exact message is as follows:
    [Execute SQL Task] Error: An error occurred while assigning a value to variable "varRestoreScript": "The type of the value
    (DBNull) being assigned to variable "User::varRestoreScript" differs from the current variable type (String). Variables may not change type during execution. Variable types are strict, except for variables of type Object.
    User::varRestoreScript is the first return value. And even with the a dummy select the same result occurs. I have narrowed the issue down
    to the T-SQL Statement structure itself. 
    The following works just fine within the execute sql task control as long as no resultset is configured for return:
    "Declare @dynamicSQL nvarchar(max)
    Select @dynamicSQL = name 
    From sys.databases 
    Where name = 'master'
    Select atest_var1=@dynamicSQL, atest_var2='static'"
    I have tried various iterations of the script above with no success. However, if I use the following derivative of it the task completes
    successfully and variables are set as expected.  This will not work for my scenario however as I need to dynamically build a string spanning multiple resultsets to build one of the variable values.
    "Select atest_var1=name, atest_var2='static'
    From sys.databases
    Where name = 'master'
    I have a sample package which can reproduce this issue using the above code.  You can get to that through the post on www.sqlservercentral.com/Forums/Topic1582670-364-1.aspx
    Scott

    Arthur,  the query when executed doesn't return a null value for the @dynamicSQL variable.  It returns "master" as a string value.  Even the following fails which implements that suggestion:
    Declare @dynamicSQL as nvarchar(max)
    Select @dynamicSQL = name
    From master.sys.databases 
    Where name = 'master' -- (or any other DB name)
    I believe I have found the cause of the issue.  It is datatype and size related.  The above script will properly set the variables in the resultset as long as you don't use nvarchar(max) or varchar(max).  This makes the maximum data size for
    a String variable 4000 characters whether unicode or non-unicode typed.

  • [All Platforms][Your Music] Make it possible to tag and filter "My Music" with user-defined tags

    It would be very nice and convenient to be able to tag and filter "My Music" (playlists, songs, albums and artists) with user-defined tags. I'm sure quite a few users would like to classify their music by genre. Myself, I would like to tag my albums, assigning them to different virtual collections.

    Updated: 2015-07-23Hello and thanks for the feedback!
    A similar idea has also been suggested here:
    https://community.spotify.com/t5/Live-Ideas/Your-Music-Grouping-or-Sorting-by-Tags/idi-p/744947
    Add your kudos and comments there please! ;)

  • Granting workstation admin rights to windows users

    Is it possible to setup OD users to have administrator rights on the local workstation? In order to do this the user needs to be a member of the Administrators group on the local machine, however, I can't see any way of doing this in Workgroup Manager.
    Thanks
    Ian
    iMac CoreDuo   Mac OS X (10.4.6)  

    To make an account defined in Open Directory an administrator of a client's local domain, you have to define that account as an administrator at the client system.
    On a Mac OS X system, log on as that user, then open the Accounts preference pane. Authenticate as an existing local administrator, then select the network account in the list and check "allow user to administer this computer." This effectively adds the network account as a member to the local admin group, as well as to the /etc/sudoers file, for allowing root access via su.
    On a Windows XP system, log on as that user, open Control Panel, then Users & Accounts. You should have to authenticate as an existing local administrator to be able to continue. Select the network account and edit it, changing its type to Administrator. Note that you must have Windows XP Pro to do this; XP Home won't work.

  • How to set up help desk to view and reset password for all users?

    Hello,
    I am on OIM 11.1.2.1.0 and would like to assign the helpdesk role to a small group of users.  I created an organization ORG1 and ORG2.  They have the parent organization as "Top".  I have a user USR11 and USR12 that belongs to ORG1 and USR2 that belongs to ORG2.
    I would like USR11 to be able to see all users in ORG1 and ORG2.
    I assign the User Viewer admin role of the Top organization to USR11.  After logging in to OIM as USR1, I could see users USR11 and USR12 (same organization) but couldn't see USR2 (different organization).
    How can I configure OIM so that user USR11 will be able to see all users?
    If I add the User Viewer admin role for both organizations ORG1 and ORG2, then it worked.  But I thought with the admin role of the Top organization, this will allow the user USR11 to be able to see all users.
    Thanks
    Khanh

    Hi,
    You can achieve everyone can see each other by providing User Viewer admin role to each user under each organization present in ur OIM.
    Thats the only way supported in OIM 11g R2. APIs are present for this and you can automate it.
    Regards,
    J

  • Job auit and execute sql task

    I am a running a jobtask in management studio and it was taking forever to proceed to the next task.
    I went to the ETL to execute  it manually .It loads  but stops at running mode not not going all the way till it turns green.to indicate sucessful.
    I perceive this to be the problem in the job task.
    Any ideas why?
    Thanks,

    It has no Precedence Flow constraints to move on. You may want to simply connect both of the bottom destinations to a Script Task that has no code implemented.
    Arthur My Blog

  • How can I manage and share iWork templates with users on OSX Lion Server?

    I would like to use the iWork templates shared in a local Lion OSX Server network.
    I would like everybody in the network to use the same iWork templates (is it possible to share these on the server?)
    And I want to be able to change or add templates to this shared folder so everybody in the organization has always the same and most up to date templates.
    Can somebody please tell me how to do this?

    The templates delivered with the apps are embedded in the apps and the license states:
    The folder used by the application to reach custom templates is on the local machine.
    You may store your custom templates in a folder on the Network but the users would be unable to reach them thru the "Create from a template" menu item. An easy workaround is to install an alias of the folder on every machine.
    I'm writing about templates with the official meaning.
    If, as several askers, you use the word to name documents, Pages is not designed for this kind of use.
    There is no provision in the app to allow several users to work simultaneously on a given document.
    Yvan KOENIG (VALLAURIS, France) lundi 20 février 2012
    iMac 21”5, i7, 2.8 GHz, 12 Gbytes, 1 Tbytes, mac OS X 10.6.8 and 10.7.3
    My Box account  is : http://www.box.com/s/00qnssoyeq2xvc22ra4k

  • Playback Not Working Choppy and Get Spin Wheel With Every Action

    SOMEBODY PLEASE HELP ME!!!!
    I have a MacBook Pro Running on Snow Leopard 10.6.5
    Processor 2.4Hhz Core 2 Duo
    4GB Ram
    External Drive 1Tb-Brand New Files on it.
    File Type Imported: .mov
    When ever I try to playback it gets choppy, and Spin Wheel comes.
    Whenever I click on anything im noticing the spin wheel appear.
    I have been looking at various forums,,,trying everything.
    Does anybody have the trick to get this thing to playback the clip smooth....
    I used Final Cut Express on my MacBook, and I never had this problem ever.
    Just upgraded to the MacBook Pro, and Final Cut Pro 7,,,and all types of issues.
    Please is the answer out there?

    jerseyjoey wrote:
    H.264
    1280X720
    24FPS
    44.1 Aud Rate
    So what do I have to do from here?
    I suck when it comes to technical if you can walk me through it.
    Thanks
    Joey
    You'll need to transcode teh H.264 to a more stable and useful editing codec. It's in the manuals and we see several H.264 questions every day around here so it's pretty easy to research.
    jerseyjoey wrote:
    I used Final Cut Express on my MacBook, and I never had this problem ever.
    Just upgraded to the MacBook Pro, and Final Cut Pro 7,,,and all types of issues.
    <
    I do not you were using H.264 on your your previous rig. Did you get yourself a new origination camera when you got your new Mac?
    bogiesan

  • Installation Server and Windows 7 - Admin Rights Issue

    Here is a good one.  Completely reproducible error when granting Local Admin Rights by the LSH Service.
    For those with SAPGui Installation Server (SAPGui 7.20 Patch 6 or above) ... try this on a Windows 7 SP1 front end when you are NOT logged on with local admin rights.
      1) Open the Windows RUN dialog
      2) Type path to your installation server\setup\nwsapsetup.exe
      3) You should find the install wizard starts (granting local admin rights) as expected.
    NOW TRY THIS
      1) Type path to your installation server\setup\nwsapsetup.exe /uninstall
      2) You will find that you get a dialog about can't grant admin rights. Un-install will abort.
    This only appears to happen with the /uninstall switch!  Using /product= for example it will still grant admin rights.
    BIZZARE ...
    I've opened a Customer Support Message (Friday) priority - MEDIUM  have not heard back from SAP Support yet.
    Bob

    Jude,
    Thanks, it looks like that note has been getting a lot of update activity lately because the newly released Patch 8 has nwsapsetup.exe as version:  8.6.1.62   and that version also has the issue with the /nnnnnn switches. 
    I do have to say however, that this issue with nwsapsetup.exe and admin rights (requiring SapSetup.exe_Patch) first appeared with the release of Patch 6 for the Gui.  It was fixed for WinXP (I had a customer support message opened on this).  So why didn't anyone also test on Win7?
    Who is QA-ing these software releases? 
    Patch 8 had the same problem. 
    The change log for SapSetup.exe_Patch, is up to 8.1.6.70 now. 
    How are we in large enterprises to feel comfortable deploying any of this?
    End of rant ....
    Bob
    P.S. I really appreciate your presence here ... the tech assigned to my formal Support Message on the matter still has not gotten back advising of the updated release of SapSetup.exe_Patch. 
    Message: 0000746888
    Edited by: Bob Held on Sep 16, 2011 10:30 PM

Maybe you are looking for