Group based rule

Dear All,
I am trying to apply a rule based on a group but when i pass the name of the group in the
if group = groupname clause
and in then clause i assign the respective desktop for the Rule
but when the users of that group logs in,the rule is not applied to that users.
one of my problem is if i assign the rule to a Role the changes are reflected but not in case of groups.
i am creating the group from user admistraion via create group is there any other way to create a group.
where are groups located, i need the path for groups
please help me on the same
Thanks
Gunjan

The location of groups depends on the UME source. For database, the groups are stored in the Java database. For LDAP, the groups are in the LDAP and in the Java database. For ABAP, the groups are PFCG roles from ABAP plus any groups stored in the Java database.
If the UME is readonly, then any groups are created in the Java database. If it's read/write and LDAP, then the groups are created in the LDAP.
Clear!!!!
If you use the useradmin tool (/useradmin) you can see the groups and get their full id from there. The full id will tell you if it's stored in the Java database or somewhere else.
Cheers

Similar Messages

  • How to create LDAP filter-based rule to check Group membership in OAM

    Hi folks,
    I'm having hard time creating an authorization rule to verify ldap group membership. I've followed "Configure User Authorization" article from Oracle website (http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/b32420/v2authz.htm#BABHBFEJI) and created an Authorization scheme w ldap_attribute_name as User Parameter and ruleExpression as Required Parameter. Then, inside my policy I created an Authorization Rule based on my Authz scheme w Allow Access attrib filter-based Rule which looks like this:
    ldap://ldap_server:port/ou=People,o=Company,c=US??sub?(ldap_attribute_name=ldap_attribute_value)
    This works fine.
    Now, I've added another filter-based rule under the same Authz Rule/Allow Access:
    ldap://ldap_server:port/ou=Groups,o=Company,c=US?uniqueMember?sub?(&(objectClass=groupOfUniqueNames)(cn=ldap_group_name))
    While query looks somewhat correct and works as a command-line argument (slightly modified format), it does not work in OAM (meaning people w out req-d group membership can still login).
    Can someone steer me to the right direction as to what do I need to do:
    1. Change/fix the ldap query
    2. Create new Authz scheme with uniqueMember userParameter; create new Authz rule based on new authz scheme; create new Allow Access filter rule with the ldap query I have
    3. Do smth else
    Any help is greatly appreciated.
    Thank you, Roman

    You can create two authorization rules
    First for user with attribute
    and second for group
    and then in authorization expression you can have AND of these two.
    Regarding your query...
    First ... If your requirement is to give access to all the members of a particular group then you don't require any ldap filters
    All you have to do is in the authorization rule -> Allow access -> Select People (here you have to select group so click on the group tab, its little hard to see but its there in light blue color on dark blue tab) -> select the group you want to give access
    Second.. If your requirement is such that you want to give access to a member of a group which has certain attribute lets say group with status active ( In this case you are not aware of the name of the group because user can be a member of any group but you want to give access only to the group with specific attribute.) then you have to write custom authorization plugin.
    If the option is second let me know i can give you a solution which will work for a single domain without any effort of developing a major plugin.
    Hope this helps,
    Sagar

  • How to send notifications to different user groups based on payload value

    Hi Gurus,
    I have a scenario in BPM where i have to send notifications to different user groups based on the payload value.
    ex:
    Payload sample:
    <employees>
    <emp1>
    <state>TX</state>
    </emp1>
    <emp2>
    <state>AZ</state>
    </emp2>
    </employees>
    Requirement: I have to send notification through Humantask to users of TX and AZ as mentioned in payload.
    Can you please help me out in achieving this in BPM?
    Thanks,
    Raju
    Edited by: user0808 on Mar 1, 2013 12:58 PM
    Edited by: user080811 on Mar 4, 2013 11:06 AM
    Edited by: user080811 on Mar 4, 2013 11:07 AM

    Hi Daniel,
    thanks a lot for your quick response.
    I went through your blog and tried implementing the same.
    But in my case i have to send parallel notifications to both the states.
    Please correct me if i am wrong, using if conditions in rules is allowing me to send to only one state.
    I also tried the following approach
    1) setting the organization units in bpm workspace
    2) passing values using human task parametric roles
    3) and looping the subprocess that has the humantask for the count of states.
    I am able to loop the subprocess but i am not able to change the parametric role value for the next iteration of the subprocess.
    Can you please help me in resolving this?
    thanks,
    Raju

  • Creating a target group based on the BP email address only in CRM

    Hi there,
    I am currently trying to create a target group based on the business partner email address only.
    I have a list of over 1000 email addresses - these email addresses equate to a BP in our CRM system, however I do not have a list of the equivalent business partner numbers, all I have to work on are the email addresses.  With these 1000 BP email addresses I need to update the marketing attributes of each of these 1000 BP records in CRM.
    What I need is a method to find the 1000 BP numbers based on the email addresses and then use the marketing expert tool (tx. CRMD_MKT_TOOLS) to change the marketing attributes on all of the 1000 BPs.
    The issue I am having is how can I find the list of BP numbers just based on the BP email address, I tried creating an infoset based on table BUT000, BUT020 and ADR6 but I after creating attribute list & data source for this I am stuck on what to do next. In the attribute list the selection criteria does not allow me to import a file for the selection range.  I can only enter a value but I have 1000 email addresses and cannot possibly email them manually in the filter for the attribute list.   I also looked at imported a file into the target group but I do not have any BP numbers so this will not work.
    Does anyone know a method where I can create a target group based on the email addresses only without having to do any code?
    Any help would be most appreciated.
    Kind regard
    JoJo

    Hi JoJo ,
    The below report will return you BP GUID from emails that is stored in a single column .xls file and assign the BP to a target group.
    REPORT  zexcel.
    * G L O B A L D A T A D E C L A R A T I O N
    TYPE-POOLS : ole2.
    TYPES : BEGIN OF typ_xl_line,
    email TYPE ad_smtpadr,
    END OF typ_xl_line.
    TYPES : typ_xl_tab TYPE TABLE OF typ_xl_line.
    DATA : t_data TYPE typ_xl_tab,
           lt_bu_guid TYPE TABLE OF bu_partner_guid,
           ls_bu_guid TYPE  bu_partner_guid,
           lt_guids TYPE TABLE OF bapi1185_bp,
           ls_guids TYPE  bapi1185_bp,
           lt_return TYPE bapiret2_t.
    * S E L E C T I O N S C R E E N L A Y O U T
    PARAMETERS : p_xfile TYPE localfile,
                  p_tgguid TYPE bapi1185_key .
    * E V E N T - A T S E L E C T I O N S C R E E N
    AT SELECTION-SCREEN ON VALUE-REQUEST FOR p_xfile.
       CALL FUNCTION 'WS_FILENAME_GET'
         IMPORTING
           filename         = p_xfile
         EXCEPTIONS
           inv_winsys       = 1
           no_batch         = 2
           selection_cancel = 3
           selection_error  = 4
           OTHERS           = 5.
       IF sy-subrc <> 0.
         CLEAR p_xfile.
       ENDIF.
    * E V E N T - S T A R T O F S E L E C T I O N
    START-OF-SELECTION.
    * Get data from Excel File
       PERFORM sub_import_from_excel USING p_xfile
       CHANGING t_data.
       SELECT but000~partner_guid FROM but000 INNER JOIN but020 ON
    but000~partner =
       but020~partner
         INNER JOIN adr6 ON but020~addrnumber = adr6~addrnumber INTO TABLE
    lt_bu_guid FOR ALL ENTRIES IN t_data WHERE adr6~smtp_addr =
    t_data-email.
       CLEAR: lt_guids,ls_guids.
       LOOP AT lt_bu_guid INTO ls_bu_guid.
         ls_guids-bupartnerguid = ls_bu_guid.
         APPEND ls_guids TO lt_guids.
       ENDLOOP.
       CALL FUNCTION 'BAPI_TARGETGROUP_ADD_BP'
         EXPORTING
           targetgroupguid = p_tgguid
         TABLES
           return          = lt_return
           businesspartner = lt_guids.
    *&      Form  SUB_IMPORT_FROM_EXCEL
    *       text
    *      -->U_FILE     text
    *      -->C_DATA     text
    FORM sub_import_from_excel USING u_file TYPE localfile
    CHANGING c_data TYPE typ_xl_tab.
       CONSTANTS : const_max_row TYPE sy-index VALUE '65536'.
       DATA : l_dummy TYPE typ_xl_line,
              cnt_cols TYPE i.
       DATA : h_excel TYPE ole2_object,
              h_wrkbk TYPE ole2_object,
              h_cell TYPE ole2_object.
       DATA : l_row TYPE sy-index,
              l_col TYPE sy-index,
              l_value TYPE string.
       FIELD-SYMBOLS : <fs_dummy> TYPE ANY.
    * Count the number of columns in the internal table.
       DO.
         ASSIGN COMPONENT sy-index OF STRUCTURE l_dummy TO <fs_dummy>.
         IF sy-subrc EQ 0.
           cnt_cols = sy-index.
         ELSE.
           EXIT.
         ENDIF.
       ENDDO.
    * Create Excel Application.
       CREATE OBJECT h_excel 'Excel.Application'.
       CHECK sy-subrc EQ 0.
    * Get the Workbook object.
       CALL METHOD OF h_excel 'Workbooks' = h_wrkbk.
       CHECK sy-subrc EQ 0.
    * Open the Workbook specified in the filepath.
       CALL METHOD OF h_wrkbk 'Open' EXPORTING #1 = u_file.
       CHECK sy-subrc EQ 0.
    * For all the rows - Max upto 65536.
       DO const_max_row TIMES.
         CLEAR l_dummy.
         l_row = l_row + 1.
    * For all columns in the Internal table.
         CLEAR l_col.
         DO cnt_cols TIMES.
           l_col = l_col + 1.
    * Get the corresponding Cell Object.
           CALL METHOD OF h_excel 'Cells' = h_cell
             EXPORTING #1 = l_row
             #2 = l_col.
           CHECK sy-subrc EQ 0.
    * Get the value of the Cell.
           CLEAR l_value.
           GET PROPERTY OF h_cell 'Value' = l_value.
           CHECK sy-subrc EQ 0.
    * Value Assigned ? pass to internal table.
           CHECK NOT l_value IS INITIAL.
           ASSIGN COMPONENT l_col OF STRUCTURE l_dummy TO <fs_dummy>.
           <fs_dummy> = l_value.
         ENDDO.
    * Check if we have the Work Area populated.
         IF NOT l_dummy IS INITIAL.
           APPEND l_dummy TO c_data.
         ELSE.
           EXIT.
         ENDIF.
       ENDDO.
    * Now Free all handles.
       FREE OBJECT h_cell.
       FREE OBJECT h_wrkbk.
       FREE OBJECT h_excel.
    ENDFORM. " SUB_IMPORT_FROM_EXCEL
    Just copy paste the code and run the report select any local xls file with emails and pass the target group guid.
    snap shot of excel file:
    Let me know if it was useful.

  • Dynamically creating a Record Group based on Previously entered Record Grou

    Forms [32 Bit] Version 10.1.2.3.0 (Production)
    Hi,
    I know how to dynamically create a record group based on a query and putting the code in When new form instance.
    My query is. I have a form which has multiple Record Groups and the user wants to dynamically create subsequent groups based on previous groups.
    For example
    I have a record group with selects a Location,
    when the user selects the Location from a list of values
    the 2nd record group called 'Cost Centres' will have to filter out only those with the locations selected above.
    How can I populate the 2nd record group at run-time when I do not know what site the user will select?
    If I simply populate in when new form instance as in location and just select everything, the list of values populates.
    CC field is a LIST ITEM and the list style is a POP LIST, it is not required.
    I have put the code in the Location field in the when-list-changed trigger.
    I am getting this error:
    frm-41337: cannot populate the list from the record group
    here is the code:
    DECLARE
    v_recsql Varchar2(1000); -- The SQL for creating the Record Group.
    v_recgrp RecordGroup; -- Record Group
    v_status Number; -- Return Value of Populate_Group function.
    c_where VARCHAR2(1000);
    BEGIN
         IF :location = '1' THEN
              c_where := ' substr(cost_centre,1,2) in (''01'',''02'')';
         ELSIF :location  = '2' THEN
              c_where := ' substr(cost_centre,1,2) in (''02'',''03'')';
         ELSIF :location   = '3' THEN
              c_where := ' substr(cost_centre,1,2) in (''01'',''11'',''07'')';
                   ELSE
              c_where :=  ' 1=1'; --EVERYTHING
         END IF;
    v_recsql := 'SELECT cost_centre, description  FROM   cost_centres  where '||c_where;
    -- Create the Record Group
    v_recgrp := CREATE_GROUP_FROM_QUERY('v_recgrp', v_recsql);
    IF NOT ID_NULL(v_recgrp)
    THEN -- No Error, record group has been successfully created.
    -- Populate Record Group
    v_status := POPULATE_GROUP('v_recgrp');
    IF v_status = 0
    THEN -- No Error. Record Group has been Populated.
    POPULATE_LIST('block.CC', 'v_recgrp');
    END IF; -- IF v_status = 0
    -- Delete the Record Group as it is no longer needed.
    DELETE_GROUP('v_recgrp');
    END IF; -- IF NOT ID_NULL(v_recgrp)
    END;thanks for your assistance.

    Hi,
    Once record status gets change for block you can not populate/repopulate the list item. Keep those list items as non-database item with different names and create different items as database orignal items. Than assign the values in WHEN-LIST-CHANGE trigger to the actual database items.
    -Ammad

  • Create a group based on file contents

    Hello!
    I'm investigating options to create a dynamic group based on periodic check of file content. I have a Shavlik updater which is patching custom groups based on file contents. I would like to create a dynamic group which should return all Windows Computer
    classes that are found from this file. Anything close to sensible was found at https://www.youtube.com/watch?v=gxASdzHFTOU where author created an attribute of based on "SELECT * FROM CIM_DataFile" and then created a group out from it - but it checks
    file existence, not content, would launch against all Windows Clients (and we have 1000+ of these monitored) - certainly not a valid way.
    Is there any way I could do that in a simple, straightforward way?
    Thanks in advance

    Ok, I got it. Have you tried modifying the group membership with powershell?
    Modifying Explicit Group Membership in SCOM 2012 with PowerShell
    http://blogs.msdn.com/b/rslaten/archive/2013/06/27/modifying-explicit-group-membership-in-scom-2012-with-powershell.aspx
    Automate your group creation with Powershell
    http://blog.coretech.dk/kra/automate-your-group-creation-with-powershell/
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Create a group based on row count

    I am looking for a way of reducing the size of tables I am displaying in my monthly report, by counting some rows together, and naming them 'other'
    I would like to always show all rows, where count of item is >= 50, but all rows where count of item < 50, total up and call 'other'.  I will add an example image as soon as my account has been verified
    I can hide rows using this in the visibility =iif(Count(Fields!Item.Value) >= 50, False, True)
    I have duplicated the line, and added a filter to each (one for greater than 50, one for less than 50) but my totals are still counting all the data, and not just the filtered data.
    Ideally, I would like to add a column using something like =iif(Count(Fields!Item.Value) >= 50, "Over50", "Under50"), or a group based on the same sort of idea, but I keep getting errors about using aggregates in columns.
    Any suggestions?
    Cheers

    What you can do is to add derived column in query behind like this
    SELECT other columns...,
    CASE WHEN Cnt >= 50 THEN YourGroupingField ELSE 'Other' END AS GrpName
    FROM
    SELECT *,COUNT(1) OVER (PARTITION BY YourGroupingField) AS Cnt
    FROM Table
    )t
    Then in your reports use =Fields!GrpName.Value as the Grouping column and you will get required output
    Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

  • Grouping Based on Parameters

    Hi
    can anyone lease explain me how to create a group  based on the parameters entered by the user ?

    hmm, are your parameters set to dynamic? if yes here is the solution which might work - Direct from Crystal Report Help file
    Adding dynamic grouping using parameter fields
    You can design your report so that users can change the grouping presentation of the report without refreshing information from the database. For instance, users can move from a customer-focused view of the report to either a region-focused or an order-focused view. Dynamic grouping combines the use of group selection formulas and the Parameter Panel.
    To add dynamic grouping using parameter fields
    Create a report using the sample data, Xtreme.mdb, and place the following fields from left to right in the Details section:
    {Customer.Customer Name}
    {Customer.Country}
    {Orders.Order ID}
    {Orders.Order Date}
    {Orders.Order Amount}
    Create a new parameter field and call it GroupBy.
    Select String from the Type list.
    Add the following values to your parameter:
    Customer
    Country
    Order
    Select Editable from the Show on (Viewer) Panel list, and click
    OK.
    Create a new formula field and call it GroupField.
    Type the following formula into the Formula text box.
    If {?GroupBy} = 'Customer' then
    {Customer.Customer Name}
    Else if {?GroupBy} = 'Country' then
    {Customer.Country}
    Else if {?GroupBy} = 'Order' then
    *ToText({Orders.Order ID})
    Note: Crystal Reports formulas do not allow conditions to return different data types. Both the Customer Name and Country fields return strings, so the ToText function must be used to convert the
    Order ID from a number to a string as well.
    Save your formula and close the Formula Workshop.
    In the Group Expert, select the GroupField formula as your group field, and click OK.
    Customize summary fields and section formatting as you like.
    Users can now change the grouping presentation of the report by modifying the GroupBy parameter value on the Parameter Panel.
    Note: Changing parameter values will not cause a database refresh as long as the parameter is a non-data parameter.
    hope this helps
    Regards
    Jehanzeb

  • Sort Group Based on Running Total

    Is there a way to sort the group based on the running total of the group?
    Thanks!
    Deanna

    I think it is not possible to sort the group based on a running total. You can sort based on a summary field using group sort expert. Since the running total executes whileprintingrecords we cannot sort based on running totals.
    Regards,
    Raghavendra

  • Group based on Shared variable

    Hi Experts,
    Can we create a Group based on Shared variable in subreport?

    Hi Praveen,
    A shared variable evaluates in Pass 2 and hence No!
    You can't create a group on such formulas in the Main Report or the Subreport.
    -Abhilash

  • Insert group based on values in array

    Is it possible to do the following:
    formula 1
    currentdate - 9
    formula 2
    currentdate - 2
    create another formula that will store the dates in between formula 1 and formula 2 into an array and then insert a group based on each value in this array?
    Thank you in advance,
    Zack H.

    Yes it is possible but luckily you don't need to engage this difficult (and inefficient method). If you absolutely do need it after reading this post, then give a shout.
    @f_begin
    currentdate - 2
    @f_end
    currentdate - 9
    Then in Select Expert:
    {mytable.myDateOrDateTimeColumn} In In {@f_begin} To {@f_end}
    The create a group by pressing the Group Expert button Click on Options... button and choose "Section will be printed by: for each day". Order as you wish.
    No arrays needed.
    Does this do the trick for you?

  • How to create Profile Based Rule in Endeca Studio Developer

    Hi,
    Can anybody tell me how to create Profile based rule in the Endeca Studio Developer. and how to fecth the data in the JSP. what are the parameter required to pass in the ENEQuery
    Thanks
    Shailesh

    I use visual studio 2012.
    I dont see rule set editor which can help me create busineesss rule.
    Where can I find it?
    Hi Rajesh,
    If you want to learn more information about RuleSet Editor in .net framework 4.5, check out https://msdn.microsoft.com/en-us/library/ee960221(v=vs.110).aspx
    for more information. 
    Best regards,
    Angie
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Issue with AD group based collection

    Hi,
    We are using AD security group based membership. Also, we are uing the same SCCM infra to cover other domains as well.
    From Activie Direcoty, it could able to discover the machines (computer objects) belongs to other domains but those computer objects not reflecting onto the collections.
    Any suggestions woud help us!
    Many Thanks.

    Check your collection refresh interval also is any machines added to the AD group getting populated ie. from the same domain xxx ? if so, i think you need to add the IP sub-net details on the boundary and
    also  discover the another domain machines using LDAP query for it(ex. sccm discovers and manages xxx domain where as its not discovering yyy domain machines becoz its not discovered ,you can also do it using the IP subnet details ie n/w discovery) the
    machines to the ALL systems then it may get added to the collection.
    Kamala kannan.c| Please remember to click “Mark as Answer” or Vote as Helpful if its helpful for you. |Disclaimer: This posting is provided with no warranties and confers no rights

  • Property Based Rule - Backward compatibility

    We have the following structure in a Model.
    Decimal Feature A
    Decimal Feature B
    Option Feature C (min 0 , Max - no value)
    Option 1 - Property X : 100 , Prop Y : 200
    Option 2 - Property X : 200 , Prop Y : 300
    Option 3 - Property X : 300 , Prop Y : 400
    Option 4 - Property X : 400 , Prop Y : 500
    Option 5 - Property X : 500 , Prop Y : 600
    Options in 'Option Feature C' are being selected based upon values in Decimal Feat A and B. Example, if the user keys in a value between 200 to 300 in Decimal A , and a value between 300 to 400 in Decimal B, then thru property based rules Option 2 and Option 3 are selected automatically.
    Now along with the above logic we want an additional logic which enforces the backward compatibility too.
    i.e. if the user selects Option 2 and Option 3 then one of the decimal feature should have a value between 200 to 300 and another decimal deature should have a value between 300 to 400.
    Any thoughts on this can be done without using an extension ?
    If an extension is required then what can be the best approach to accomplish this.

    Hi Akhil -
    I am working on our forum backlog. Please let me know if this is still an issue for you.
    Regards,
    Daniel

  • OIM Group membership rules

    Hi Friends,
    I want to create groups in oim on the basis of complex rules(It requires some Java coding) but for attaching group membership rule we use Rule Designer and in rule designer we can't user adapter that means no java code.
    What is the solution for this problem?
    One solution could be create entity adapter for group membership and execute it on pre-update.
    Thanks
    Edited by: user10968321 on Oct 28, 2009 7:06 AM

    The entity adapter on the user form in pre or post update mode is the standard way to solve complex membership rules.
    Works well as long as you can accept a slight performance decrease on user updates (including things like password resets). Make sure your code is decently fast.
    Good luck
    /Martin

Maybe you are looking for

  • Problem with multiple Toplink/JPA apps in same server

    Anyone have experence of running serveral Toplink/ EJB-3 Web apps in the same server (OC4J, alas)? We seem to get a problem with the second app failing to initialise toplink, with an entity not found message. Each app runs OK on it's own.

  • Won't load

    Hi Everyone! I have issue with Logic & I REALLY need HELP! Ok, I boot logic everything is fine.. Load one of my session... Loads fine.. Close one session out to go to another... Nothing from Logic... I go down to the dock & click on logic & I blank l

  • 9ias ENTERPRISE MANAGER

    Please i have installed 9ias infrastructure on W2k Pro and it installed successfully, but can't log into enterprise manger with ias_admin as user and oracle1 as password. Is there any other password to use to get in. I can access the http://hostname:

  • Reducing file sizes with symbols when it's already too late

    Is it possible to turn something into a symbol when you have already placed it multiple times on the artboard? I have created very complex artwork that my client is very happy with, but I haven't shown her the file sizes! Ultimately this has to be up

  • Continually have to force quit mail,

    .Mac mail keeps "freezing", I have to force quit very often. Mail that I have read is still marked as unread.