Group Assignment

Good morning.
Just a quick question....
In MDM, can we group assignments and run multiple of them together, similar as we do with group validations.
Thanks

Hi Anuj,
As per my understanding, I think Group Assignment is not possible unlike Validation Group.
You can try with below MDM workflow:
Start Step>Assign(assignment1)>Assign2(assignment2)>and so-0nStop step. I think If in MDM workflow it allows Assign step one after other then you can execute all assignments in one go. Set this workflow trigger action on Record Add, Record Import and Record Update which automatically execute this workflow and thus Populate your all assignments automatically..
Regards,
Mandeep Saini

Similar Messages

The business system HRK_005 is not a business system in the group assigned

Hi there,
i have a Problem. I want to transport a Scenario from our Consolidation to our Prod System.
In this Szenario, there are XI and HR Systems included.
On Consolidation Side:
XIK_001
HRK_005
in Prod
XIP_001
HRP_001
When i now export the whole Scenario from our K System and want to import it to our P Systems the following error occurs:
The business system HRK_005 is not a business system in the group assigned to production.
I have no System HRK_005 in production. HRK_005 is in Group Consolidation?!?
Can someone help here?
Thanks
Bjoern

Oops i spoke with u r key code it bounced back .
Well i explained standard way to export and import Intergration Directory objects.
K - Development System ( SLD_Dev)
P - Production System (SLD _Prod)
In K - SLD_Dev needs Group -- This is based on the Integration Server (IS) of the K / P XI server.
IS (K) -- Group1 / IS (P) -- Group2 (All this in the SLD_Dev)
Assign all BS of K to Group1
Assign all BS of P tp Group2
For BS of K specify the target transport as Production BS (P).
Now goto P (SLD_Prod) create the BS as same in K what you have created in Group2
Now export from K (Dev) to P(prod)
am not able to view the link provided.
Any ways i have listed standard way for transport, hope this helps
Srini

Report User (groups) assigned to Bundles

Hi,
i need a report of users or user groups assigned to Bundles. I can create a report of Workstations assigned to Bundles. But the users are LDAP users, so they're not available in the user database of ZCM? Is there an option to report Bundles and there assigned LDAP Users or User Groups?
Regards,
Patrick

petjez,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://www.novell.com/support and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Forums Team
http://forums.novell.com

Static Identity Group Assignment

                   Does anyone know a way to bring in an endpoint with the following attributes?
Endpoint Policy Name       Static = True
Static Group Assignment   Static = True
The 1.2 manual says;
If the file used for import contains endpoints that have their MAC addresses, and their assigned endpoint profiling policy is the static assignment, then they are not re-profiled during import.
To change a dynamic assignment of an endpoint identity group to static, check the Static Group Assignment check box. If the check box is not checked, then the endpoint identity group is dynamic as assigned by the profiler based on policy configuration.
Statically Profiled Endpoints
An endpoint can be profiled statically when you create an endpoint with its MAC address and associate a profile to it along with an endpoint identity group in Cisco ISE. Cisco ISE does not reassign the profiling policy and the identity group for statically assigned endpoints.
A) Does anyone know a way to import from an LDAP database and maintain the Static Group Assignment = True.
I successfully do an LDAP import of the MAC and Endpoint Group (which comes in as True) but the Static Group Assignment has the Endpoint Group Assignment correct but static is false unchecked. I don't want these profiling any more. These are thousands of endpoints and I do not see any way to do a bulk change. I have tried exporting and re-importing but that doesn't really scale.
B) Would creation of an endpoint group that is not part of the Profiled endpoint group change the behavior I see above when I do my LDAP import?
If there were a way to do the bulk selection and change the static property or the Static Group Assignment that would be of huge benefits. The changes apply to the fields selected within the endpoints while maintaining the MAC property of the endpoint.
Thanks in advance for any suggestions.

James,
That is possible but do you have the dhcp probe enabled and have you thought about setting up an ip helper statement or assigning the ISE node as one of the dhcp servers on the WLC?
There is a built in check such that if the dhcp class identifier contains MSFT will profile the endpoint as a windows workstation.
However if this is not the case then you can create the following condition under the Policy Elements > Conditions > Profiling > New Profiler Condition, you will use the create (advanced...) then select NMAP > 135-tcp > then set the operator EQUAL to msrpc.
Then go under the Microsoft-Workstation and select the option to create a matching identity group (its much easier rather than using the heirarchy option) and set the certainity factor 30. Then add this new condition and set the certainity to 30 also.
Hope that helps,
Thanks,
Tarik Admani
*Please rate helpful posts*

Group Assignment and Analytics Visibility

Hello,
We are thinking of using the Group Assignment feature in On Demand. However, I have not found documentation on how this affects Analytics reporting visibility. I see the options for Manager, Team, and Full Visibility for Analytics. However, I would like to find out if users belong to a particular Group, would they also have visibility to those associated Accounts, Opptys, etc associated with that group in Analytics by using Team Visibility?
Thanks!

Imagine if we two are sales rep belonging to the same team then I would see records for which i am owner and also records for which my team members are owner.So we can see each others data provided we are on the same team and team visibility is applied under our user profile.

Effective start and end dates for roles/group assignment

Hi,
Does Access Manager (in legacy or realm) mode support effective start date/end date on a role/group assignment on a user?
Thanks,
Srinivas

Hi Ankush,
I am also of the same opinion. Start and end dates can probably be enforced by a policy condition in AM but would lead to proliferation of policies as we would end up creating policies per role entitlement duration for a user.
Any thoughts on whether the sunrise/sunset concept of Identity Manager can be used for this requirement.
Thanks,
Srinivas

Multiple Sales group assigned with sales office to Sales area

I need to know whether i could be able to assign different sales groups to Sales area in BP master.
Eg Sale grp 1 assigned with sales office 1 to Sale org 1, DC1,DIV1.
      Sale grp 2 assigned with sales office 1 to Sale org 1, DC1,DIV1.
      Sale grp 3 assigned with sales office 1 to Sale org 1, DC1,DIV1.
The standard system is not allowing to maintain more than one combination if the same Sales Area. In the practical scenario, there could be more than one sales group can look after the sales in Sales Area thats attached to one sales office. Is there otherway to check this requirement?
Another requirement is i need to read the sales group value during processing the transaction ( Remember still i have not saved the transaction and i am processing it). I have found the some BADI which is not helped me lot. Eg i am processing the lead by entering existing BP/ prospect, i need to read the sales group assigned in the transaction.
Any body can help me out.
Thanks
Edited by: K Srikrishna on Feb 20, 2009 12:17 PM

Hello,
As of release CRM 4.0, it is possible to use the "Enhanced Backend
Integration Model", where you may assign a sales office to more
than one sales org, and a sales group to more than one sales office
However this assignments are shown in a different way as in the
standard model: multiple assignment are not viewed in the tree
structure but in tab "FUNCTION".
This is the standard design of the system. You can find more
information about this new model in symptom of the note 691015.
Also Please go through the documentation under following path:
Customer Relationship Management
Master Data
Organizational Management
Data Transfer
Convert Org. Model to Represent Multiple Assignments in SAP ECC
( Documentation).
I hope this information helps you.
Regards,
Sri.

ISE Identity Group Assignment

I need to avoid a large set of devices to get access to Internet through the Wireless Guest Service. I had made some test and know I can block a MAC address through the Policy Authorization (If Blacklist then DenyAccess).
In order to blacklist a large set I would like to import the MAC list and include in the CSV the Identity Group Assignment. It appears it is not possible ... I can have an easy way to change the Identity Group Assignment instead of one by one?
Regards.
Daniel Escalante.

Additional Information and Question:
Currently my Authorization Policy has this:
The result is that any user trying to acesss the Guest Service can see the Guest Portal, introduce Credentials and if they are valid, the AUP is displayed, after that if the device is in the Blacklist, service is denied and the Guest Portal is displayed again, but any message about the situation is indicated to the user. I wonder if I can generate a message and even avoid the AUP if the device is in the blacklist.
Any comment will be greatly appreciated.
Regards.
Daniel Escalante

Please select an appropriate pay group assigned to this operating unit

Hello All ,
A new pay group is created and assigned to the new supplier site and when an invoice is created against that pay group
its is populating an error message saying that Please select an appropriate pay group assigned to this operating unit.
As result I am unable to complete creation of invoice.
Any inputs Suggested ? Appreciate it !
Thanks,
Deepthi.

Hi,
Please obtain a FND Debug log on the issue and upload the log to a free hosting site and provide the link here for our reference.
Meanwhile also raise an SR.
Please see:
How to enable and retrieve FND debug log messages (Doc ID 433199.1)
Thanks &
Best Regards,

No material group assigned to this value

Hello, I am trying to add new value to a purchasing organization in extended attributes about product categories.
When I add new value system throws an error message: "No material group assigned to this value", this material group is created in R/3 backend but not in SRM. How can I transport this value to SRM? Only 3 values not all data about material groups.
Thanks in advance
Rosa Rodríguez

Hello, I have this in the transactions that you mentioned:
r3ar2
Request Name: ESN
Adapter Object: DNL_CUST_PROD1
RequestType: Request: Objects could be loaded from R/3 backend / CRM DB
Use One with mark
Table: T023T
FieldName: MATKL
I/E: I Inlusive defined set/array
Opt: BT
Low and High: range of material groups that I want to replicate.
I put in transaction R3ar4 the request name and when I check on transaction r3ar3 this transaction is running and take long time .... I think there is a problem because are only 3 product categories
What can I do to check if the system failed or something similar?
Thanks
Rosa Rodríguez

Error "There is no material group assigned to this value.Message BBP_ATTR01

Hi Experts,
We are in SRM 7.0
When assigning a new product category to a Purchasing Group. In the course of the assignment of the product category , the following error popped up: "There is no material group assigned to this value. Message number: BBP_ATTR010.Also,material group is there in R/3 & we have executed the necessary maintenace in V_BBP_DET_ACCT.
Any pointer will be highly appreciated,
Regards,
Rupesh

Hi
Did you bring the new material group into SRM or not?
can you see new product category in comm_category table?
Muthu

Deprovisioning AD Group Assignment fails when setting MX_INACTIVE

Hi,
IdM 7.1 SP5 Patch Level 2
We have an Identity which has some AD Group privileges assigned to it via a role. So these privileges exist as MX_AUTOPRIVILEGE attributes on the identity.
If we remove the role, the privileges are removed and the SAP provisioning framework task DeprovisionADSGroupAssignment works ok.
If we set MX_INACTIVE, de-provisioning is triggered for each repository but the task DeprovisionADSGroupAssignment fails because it cannot determine the DN for the AD groups from the privilege master records.
My analysis so far has deduced the following:
The SAP provisioning framework task DeprovisionADSGroupAssignment uses a javascript sap_getGroupDN to determine the DN value for the ad group. It uses the audit record's UserId field to determine which old_id to read from the MXIV_OENTRIES table. The audit record UserId has the format: e.g. #15:DELETE;0;205081 i.e. attribute 15 on our system is (MX_AUTOPRIVILEGE), the operation is DELETE, the checksum is 0 and the OldValuesId is 205081.
From there the script uses the mskey of the privilege to look up the DN<repository name> attribute on the privilege master. This DN is then used in the To LDAP pass to remove the identity from the AD group.
So unless you actually remove the privileges from the identity, the values don't exist in the MXIV_OENTRIES table and therefore, the script cannot find the mskey for the privilege and therefore cannot get the DN.
Does anyone know if setting MX_INACTIVE is supposed to remove roles and privileges before triggering de-provisioning or how this is designed to work?
Has anyone else de-provisioned AD accounts and groups by just setting MX_INACTIVE?
Edited by: Paul Abrahamson on Dec 3, 2010 5:54 PM

We've now set up a scheduled job to pick up all users which should be made inactive on a given day and this job first removes roles and privileges (triggering de-provisioning of AD groups because the privileges are removed) and then after a while sets the MX_INACTIVE attribute.
Incidentally I also found this [SAP Note 1540835 - LDAP group assignment fails due to ambiguous bchecksum |https://service.sap.com/sap/support/notes/1540835] which 'corrects' some logic in the sap_getGroupDN global script - it now uses context variables instead of reading the MXIV_OENTRIES table etc...

Need user and Groups assigned to each folders(KM) under service permission

Hello Experts,
Need you help for one requirement , in which i need to provide a list of users and groups assigned under Service permission for each KM folders. There is huge amount of folders so it is quite time consuming to get each folders open & to check the service permission and user.
Do you have any idea on this? Any sugesstion would be appreciated in points.
-Regards
AK
Edited by: AlokSBP on Oct 7, 2011 8:46 AM

Hi,
You'll find a lot of help on this if you search for ACL and permission in this forum.
Here is a code sample of what to use:
IAclService aclService = (IAclService) repServiceFactory.getRepositoryService(resource, "ServiceAclRepositoryService");
                    IResourceAclManager servAclMgr = aclService.getAclManager();
                    if(servAclMgr != null) {
                         IResourceAcl servAcl = servAclMgr.getAcl(resource);
                         if (servAcl == null) {
                              logger.debugT("no ServiceAcl found ");
                              logger.debugT("getting ServiceInheritedAcl ");
                              servAcl = servAclMgr.getInheritedAcl(resource);
                         if(servAcl == null){
                              logger.debugT("no ServiceInheritedAcl found");
                         }else{
                              // Iterating through the ACL list
                              IResourceAclEntryListIterator servAclList = null;
                              IResourceAclEntry servAclEntry = null;
                              for(servAclList = servAcl.getEntries().iterator(); servAclList.hasNext();)
                                                //here do what you need to do. For example
if(servAclEntry.getPermission().getName().equals(IAclPermission.ACL_PERMISSION_FULL_CONTROL))
                                        logger.debugT("This is a Full Group ");
Regards,
Thomas
Edited by: Thomas Pary on Oct 10, 2011 1:59 PM

LT41 - No active selection for group assignment

Hello Guru,
i need to group transfer requirement by transaction LT41 but when i try to select TR to assign them a group I always get the same error " No active selection for group assignment" and I´m not able to select transfer requirements.
Maybe is there a customizing not done?
Anyone can help me?
thanks in advance
Boris

Hi,
I'm not sure this help you or not but as a prerequisit of this sceanrio you have to make some settings for your WH (allow partial processing / SPRO > LE > WM > Master Data > Define control Parameters for WH No.). Please check the customizing step in SAP help:
http://help.sap.com/saphelp_47x200/helpdata/en/c6/f841f24afa11d182b90000e829fbfe/frameset.htm
Please also check whether you follow the proper steps during creation of a group:
http://help.sap.com/saphelp_47x200/helpdata/en/c6/f841ff4afa11d182b90000e829fbfe/frameset.htm
Csaba

Display all groups assigned to a particular group

Hi ,
Can anybody post the details for How to display all groups assigned to a particular database?
I am wondering that there is no command available to do the above. We are able to display all the groups using "Display groups all" but how can i know all the groups assigned to a particular database?
Thanks in advance!!!!
Subbu

I'm not sure what version you are on, but have you tried using the export security_file maxL command? You could also use the API to get the security.

Group Assignment

Similar Messages

Maybe you are looking for