How can I add a user Role member that is from a different domain

We are currently building out SCOM 2012 R2 to provide monitoring as a service to some of our customers.  As of now we have the RMS on our own department's domain (Domain A) which we have full control of and we have a gateway server that is on the company
wide domain (Domain B) so that we can monitor other departments devices as the leverage this system.
Monitoring is working just fine on both domains and we are just working on fine tuning SCOM so that we can roll it out as a service we offer to our customers.  One of the next steps we are working on before rolling it out is giving specific users access
to view only their own devices, dashboards, and groups.  So I created a Read-Only profile and went to add a user to test it out, but that user is on Domain B and SCOM is unable to resolve this account.  I'm seeing Event ID 26319 with Error Code 1332.
How can I get SCOM to discover devices on a different domain so that I can give them different permissions for accessing the Operations Console and/or Web Console?  Is this possible?
Here is the Error I'm seeing.
Log Name:      Operations Manager
Source:        OpsMgr SDK Service
Date:          2/4/2015 1:11:59 PM
Event ID:      26319
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      xxxxx.xxxx.xxxxxxxx.xxx
Description:
An exception was thrown while processing UpsertUserRolesV2 for session ID uuid:f3b4015e-9583-4237-b7a6-406826434553;id=40.
 Exception message: The creator of this fault did not specify a Reason.
 Full Exception: System.ServiceModel.FaultException`1[Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException]: The creator of this fault did not specify a Reason. (Fault Detail is equal to Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException:
Unable to resolve the user [email protected] associated with the user role. Error code 1332. Check your active directory configuration.).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="OpsMgr SDK Service" />
    <EventID Qualifiers="49152">26319</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-04T21:11:59.000000000Z" />
    <EventRecordID>172748</EventRecordID>
    <Channel>Operations Manager</Channel>
    <Computer>xxxxx.xxxx.xxxxxxxx.xxx</Computer>
    <Security />
  </System>
  <EventData>
    <Data>UpsertUserRolesV2</Data>
    <Data>uuid:f3b4015e-9583-4237-b7a6-406826434553;id=40</Data>
    <Data>The creator of this fault did not specify a Reason.</Data>
    <Data>System.ServiceModel.FaultException`1[Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException]: The creator of this fault did not specify a Reason. (Fault Detail is equal to Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException:
Unable to resolve the user [email protected]  associated with the user role. Error code 1332. Check your active directory configuration.).</Data>
  </EventData>
</Event>
Thanks for any help I can get in resolving this issue.
Jake

The SCOM Management Server is in Domain A.  I've tried it already and it has failed.  
So just to clarify the method I used was to go to Administration>Security>User Roles.  Then New User Role>Read-Only Operator.  In the Create User Role Wizard I then gave the User Role a name, Clicked "Add" under User Role Members.
 Then the Select Users or Groups window pops up and I changed the Locations from Domain A to Domain B and searched for the user, which it's able to find, then clicked "OK" to add it to the User Role members which it does just fine.  On
the next page which is Group Scope I checked the one group I want this account to have access to and then click next.  This brings me to Dashboards and Views where I click the radio button for "Only the dashboards and views selected in each tab are
approved" and chose the folder of dashboards I want this account to access and then click next.  This brings me to the Summary and I click "Create".  At this point it thinks for a moment then closes out the wizard but the new Read-Only
Operator does not appear.  I then look in Event Viewer and see the Event I pasted above.
Am I doing something wrong here?  Any guidance on how to get around this issue would be much appreciated.
Thanks,
Jake

Similar Messages

  • How can I add new user in sharepoint list column (people or group) or in sharepoint group using loginName only

    Hi
    If I have only login name of any user like - "Donamin\login_name".
    If this user is not present in sharepoint portal.
    How can I add this user to people or group column of any list or in any  sharepoint group with permission?

    hi
    got the issue
    it should be  like this -
    string userloginname = @"DOMAIN001\vyankatesh_mujumdar"
    using (SPSite oSpSite = new SPSite(site.ID))
    using (SPWeb web = site.OpenWeb())
    try
    { SPList lst = web.Lists["TestList"];
    string userloginname = @"DOMAIN001\vyankatesh_mujumdar";
    web.EnsureUser(userloginname);
    SPUser oSPUser = web.SiteUsers[userloginname];
    SPFieldUserValue FieldValueName = new SPFieldUserValue(web, oSPUser.ID, oSPUser.LoginName);
    SPListItem oSPListItem = lst.Items.Add();
    oSPListItem["Title"] = userloginname;
    oSPListItem["People"] = FieldValueName;
    oSPListItem.Update();
    catch (Exception ex)
    ExceptionManager.LogErrorInFile("--------Exception -------", bIsLogEnabled);
    ExceptionManager.LogErrorInFile(ex.Message, bIsLogEnabled);
    ExceptionManager.LogErrorInFile(ex.Source, bIsLogEnabled);
    ExceptionManager.LogErrorInFile(ex.StackTrace, bIsLogEnabled);
    ExceptionManager.LogErrorInFile("-------------------------------------------------------", bIsLogEnabled);
    Thanks for all for the reply

  • How can i add addtional user defiend fields in infoset

    Hi,
    Can any one tell me how can i add addtional user defiend fields in infoset and make it availible in output screen.
    Also please tell me to create parameters through abap quary sq02 , as by default it creates select-option.
    With Thanks n Regards,
    Ranu

    Hi,
    As I said before it is not that straight forward.If you will decompile tcViewProfileAction .class using any java decompiler you will find out that data in setAccountProfile method is not getting set through formmetadata.xml . If you are well verse with struts then only you can achieve what you are trying to do.You need to extend tcViewProfileAction class and also tcViewProfileForm class and then you need to modify tjspViewProfileTiles.jsp .It will not be easy job.Usually in implementation we do not change action class until its absolutely required as oracle also do not recommend that so now its between you and your client to make a call if they want to go for such customization.I won't recommend you do that.
    Regards
    Nitesh

  • How can I add location to a photo that does not have a gps location? On iPhoto it was easy.

    how can I add location to a photo that does not have a gps location? On iPhoto it was easy.

    You can use the Settings in the slideshow to Show Captions,  either the Description filed be display, the Title field or both.
    If you create the slideshow in iDVD from still photos from iPhoto you can add the Description and/or Title via the settings in iDVD.
    Since iDVD adds both automatically the user must go thru the slideshow and remove those items not wanted.

  • How can I add contacts in my iphone that are backuped in a pim file in my pc

    how can I add contacts in my iphone that are backuped in a pim file in my pc

    You have to get them from the file you have into iCloud, google, yahoo, outlook.com, AOL, an Exchange server, or some other service the phone can sync with, or into MS Outlook on your PC. Then you can sync them to the phone.

  • My computer crashed. So does this mean I can not add any more music to my ipod from a different computer without all the songs being erased? Can I sync my ipod to a new computer if I allow all the songs to be erased?

    My computer crashed. So does this mean I can not add any more music to my ipod from a different computer without all the songs being erased? The ipod works fine and now i got a new computer. So it seems like my only options are leaving my ipod in a state where i cant add anymore songs or erasing all my songs and trying to use my ipod from my new computer. Can someone please inform me on how to have my ipod work from a different computer, even if i have to erase my songs. Thanks.

    Yes, if you choose the Erase and Sync option (or restore your iPod) you will be allowed to sync your iPod with the new computer.
    If you would like to save the content that's currently on your iPod, see this older thread from another forum member Zevoneer discussing the different ways to copy the content on an iPod back to your PC.
    https://discussions.apple.com/thread/2417169?start=0&tstart=0
    B-rock

  • I have the code for this project, but how do I add this user-defined exception that I want?

    For a final VB.NET project, I have to write a project that ascends and descends a word or number chosen by the user. 
    This is what I want to do:
    I want to add a user defined error that will stop the program and tell the user to input a value into the program if they did not. I do not know how to do this. I think I would use a Null Reference exception. 
    Here is the code for the project:
    Module Module1 'VB.NET Final Project 12/30/14 . Option 3: Write a program to run two separate threads printing numbers or words (It can do both) in ascending and descending orders. The words have to be given by the user.
        Dim Ascending As System.Threading.Thread = New Threading.Thread(AddressOf PrintAscend) 'Two threads are declared,
        Dim Descending As System.Threading.Thread = New Threading.Thread(AddressOf PrintDescend) 'ascending and descending 
        Sub Main()
            Console.WriteLine("VB.NET Final Project 12/30/14 . Option 3: Write a program to run two separate threads printing numbers or words (It can do both) in ascending and descending orders. The words have to be given by the user.")
            Ascending.Start() 'starts first thread
        End Sub
        Sub PrintAscend()
            Console.WriteLine("Please type in a word to print in ascending order.") 'the program asks for users to input a word
            Dim input As String 'as a string
            input = Console.ReadLine()
            For i As Integer = 0 To input.Length - 1
                Console.WriteLine(input.Chars(i)) 'prints the letters of the word in ascending order 
            Next
            If Ascending.ThreadState = Threading.ThreadState.Running Then Descending.Start() 'starts second thread
        End Sub
        Sub PrintDescend()
            Console.WriteLine("Please type in a word or number to print in descending order.")
            Dim input As String
            input = Console.ReadLine() 'user inputs the word that he wants
            For i As Integer = input.Length - 1 To 0 Step -1
                Console.WriteLine(input.Chars(i)) 'prints the letters of the word in descending order 
            Next
            Console.WriteLine("Please press enter key to close the program, and thanks for your time.")
            Console.ReadKey()
        End Sub
    End Module

    Dejavu again?
    Is your teacher instructing you to use a User Defined
    error or do you just want to accept the user input, check it, give a message, and repeat?
    It seems to me you are missing the basic program loop? This example checks the user input and then performs an action, then repeats. If the user enters Quit execution stops. Is that what you want to do?
    Module Module1
    Sub Main()
    Console.Title = "Make a Decision"
    Dim theline As String = ""
    Do While theline <> "Quit"
    Console.WriteLine(vbLf & "Enter a or b." & vbLf)
    theline = Console.ReadLine()
    Select Case theline
    Case "a", "A"
    Console.WriteLine(vbLf & ">> Result: You entered A.")
    Console.WriteLine(vbLf & " ** Output Complete **" & vbLf)
    Case "b", "B"
    Console.WriteLine(vbLf & ">> Result: You entered B.")
    Console.WriteLine(vbLf & " ** Output Complete **" & vbLf)
    Case Else
    Console.WriteLine(vbLf & """" & theline & """ is invalid.")
    End Select
    Loop
    End Sub

  • How can I add another user to my iCloud account?

    I have sandirod1@**** and want to know if and how to add another user from my household linked to the same account
    <Edited By Host>

    Firstly, it's a bad idea to post your email address - it's an invitation to spam - and I've asked the Hosts to remove it.
    If you give the other user your ID and password he will have full access to everything in your account just as if he was you, and his contacts and calendars will sync if enabled, and he will have full access to your email. (He will of course need Lion 10.7.2 or above, or iOS5, to use the syncing facilities). He can also access the iCloud website and read, move or delete emails, and alter settings.

  • How can I add a user to the current session context ?

    Hello,
    I would like to use the programmatic authorization of servlets ( the roles are defined
    in the servlet deployment descriptor web.xml ). But I don' t use the authentication
    specified in the servlet deployment descriptor.
    Is it possible to populate a user to the session/servlet context without using the
    authentication specified in the deployment descriptor ? How can I do ? ( cookie ?
    methods ? ... )
    Thank you for your answer.
    Nicolas.

    see weblogic.servlet.security.ServletAuthentication.
    - Neil
    Nicolas Dieu wrote:
    Hello,
    I would like to use the programmatic authorization of servlets ( the roles are defined
    in the servlet deployment descriptor web.xml ). But I don' t use the authentication
    specified in the servlet deployment descriptor.
    Is it possible to populate a user to the session/servlet context without using the
    authentication specified in the deployment descriptor ? How can I do ? ( cookie ?
    methods ? ... )
    Thank you for your answer.
    Nicolas.

  • On the web how can I check the user role to display the form suitable for this role i

    Hello
    How can I check on the web the use role to display the a form for each role
    Example
    If the admin login I display admin_form.fmb and if user login I display
    user_form.fmb
    Thankx
    Tamer

    In my forms I hide tab pages according the role using something like the following script in the WHEN_NEW_FORM_INSTANCE trigger.
    So the user can not navigate to tabs which are vorbiden by his role.
    CURSOR users_roles_cur IS SELECT granted_role FROM user_role_privs
    WHERE username=(SELECT user FROM dual);
    user_roles_rec users_roles_cur%ROWTYPE;
    IF users_roles_cur%ISOPEN
    THEN
    CLOSE users_roles_cur;
    END IF;
    OPEN users_roles_cur;
    LOOP
    FETCH users_roles_cur INTO user_roles_rec;
    EXIT WHEN users_roles_cur%NOTFOUND;
    MESSAGE (user_roles_rec.granted_role);
    PAUSE;
    IF RTRIM(user_roles_rec.granted_role,' ') = 'BLA-BLA'
    THEN
    tb_pg_id := FIND_TAB_PAGE('activity');
    IF GET_TAB_PAGE_PROPERTY(tb_pg_id, visible) = 'FALSE' THEN
    SET_TAB_PAGE_PROPERTY(tb_pg_id, visible, property_true);
    END IF;
    END IF;
    END LOOP;
    CLOSE users_roles_cur;
    Other solution may be is to use an initial form which only will detect the user role and run the appropriate form.
    Other solutions are also possible.
    Joseph

  • How can I add a User to the transport workflow

    Hi all,
       I want to add one user to the transport workflow in BW Dev system? How can I do it, PLEASE.
    Thanks.

    Hi,
    Check this if you can reset the workflow if the configuration of old user get damaged instead of creating a new one.
    http://help.sap.com/saphelp_erp2005/helpdata/en/06/1c3737f0e64142e10000009b38f839/frameset.htm
    Please reward if it helps.

  • How can I add a User Library or Instrument Library to my Project Installer?

    Hello All,
    I want to includ some libraries for 2014 in my distribution installer in LabVIEW 2014.
    Some of these files are located in Instr.lib and others in User.lib. There may also be some in vi.lib.
    I have some devices and custom VI's I have written and would like to distribute these with my executable.
    Is there a way to include these libraries automatically?
    As it stands now, I have to install my application then manually copy these libraries which is obtuse.
    Note that one of my user libraries is a directory of VI's, not a compiled libary (at this time).
    Thanks for any advice.
    Veni Vidi Duci

    DB_IQ wrote:
    Yeah, I believe so.
    In the past, though, none of these libraries were installed.
    But this is why:
    My main VI is the test VI that calls sub vi's from a remote location by reference. These VI's are dynamic in scope.
    As such, any of these sub VI's that refer to the libraries in my User.lib for example have no VI to reference. These dynamic VI's do not get installed. They are simply present in a library.
    Would it make sense, then, that my VI's that are called by reference should themeselves be installed using an executible so the required instrumetns and user VI's are installed as well?
    That might do the trick.
    You can manually add them as dependencies to a seperate folder in the exe build spec, and then reference that relative location in your main VI when calling them.
    There is always the Post-Build action too that might help.

  • How can I add a direct refrence to a task from an email

    Hi, I use a work flow to notify a user when a task is opened, how can I send with this task email notification a direct link to task itself? (same goes with opp/SR)
    Thanks, David

    This is a link to an Opty record on the DSA pod:
    https://secure-ausomxdsa.crmondemand.com/OnDemand/user/OpportunityDetail?OpptyDetailForm.Id=ABJA-XXXXXX
    To reuse this for any other record type or another system do the following:
    Open a record that you want to link to i.e. SR for DSA Demo and you get this URL at the top
    https://secure-ausomxdsa.crmondemand.com/OnDemand/user/ServiceRequestDetail?ServiceRequestDetailForm.Id=HU15-XXXXX&OMTGT=ServiceRequestDetailForm&OMTHD=ServiceRequestDetailNav&OMRET0=ServiceRequestHomepage&OCTYPE=Other&ocTitleField=Abstract&ocTitle=Send+copy+of+Annual+Report&ocEdit=Y
    As you can see the URL starts the same except it references ServiceRequestDetail instead of Opty detail.
    From the OnDemand screen copy everything from http:// to ServiceRequestDetail? ServiceRequestDetailFormID= and paste it into your workflow email.
    Click the Fx button and add the Row ID.
    Voila you now have a link in an email that will open the record that triggered the workflow.

  • How can I add javascript text fields to Acrobat pages from Applescript please?

    I have a real need to add text fields to Acrobat document pages from Applescript. I can't access the Headers and Footers from Applescript in Acrobat XI. I can set watermarks using the following script, but cannot for the life of me work out how to add text fields. Any advice please?
    Regards
    set TempAttachmentName to "(20140717121212Z)"
    set PreserveFileName to "This is a test"
    set bypass to false
    tell application "Adobe Acrobat Pro"
      activate
      set CountOfPages to count of pages
      repeat with PageCounter from 1 to CountOfPages
      tell application "System Events" to tell process "AdobeAcrobat"
      try
      click menu item "Page..." of menu 1 of menu item "Go To" of menu 1 of menu bar item "View" of menu bar 1
      tell current application to delay 0.1
      keystroke PageCounter as text
      tell current application to delay 0.1
      keystroke return
      if not bypass then
      my ADDHeaderFooter(TempAttachmentName, PreserveFileName & " " & CountOfPages, PageCounter)
      end if
      end try
      end tell
      end repeat
    end tell
    on ADDHeaderFooter(The_String1, The_String2, currentPage)
      tell application "Adobe Acrobat Pro"
      activate
      set myDocument to document 1
      tell myDocument
      tell page currentPage
      set cbox to crop box
      set item 2 of cbox to (item 2 of cbox) + 44
      set item 4 of cbox to (item 4 of cbox) - 44
      set media box to cbox
      set crop box to cbox
      set theResult1 to my Add_WaterMarkText(The_String1, "IDAutomationHC39M", 12, 1, 1, 1, 0, 3, 10, 3, 0)
      do script theResult1
      set theResult2 to my Add_WaterMarkText(The_String2, "Times", 16, 1, 1, 1, 0, 4, 10, -6, 0)
      do script theResult2
      end tell
      end tell
      end tell
    end ADDHeaderFooter
    on Add_WaterMarkText(cText, cFont, nFontSize, nS, nE, nTA, nHA, nVA, nHV, nVV, nR)
      set Params to "cText: '" & cText & "'," & return
      set Params to Params & "cFont: '" & cFont & "'," & return
      set Params to Params & "nFontSize: '" & nFontSize & "'," & return
      if class of nS is integer then set Params to Params & "nStart: " & (nS - 1) & "," & return
      if class of nE is integer then set Params to Params & "nEnd: " & (nE - 1) & "," & return
      -- 0 = left, 1 = centre, 2 = right
      if class of nHA is integer then set Params to Params & "nHorizAlign: " & nHA & "," & return
      -- 3 = top, 4 = bottom
      if class of nVA is integer then set Params to Params & "nVertAlign: " & nVA & "," & return
      -- offset in points
      if class of nHV is integer then set Params to Params & "nHorizValue: " & nHV & "," & return
      -- offset in points
      if class of nVV is integer then set Params to Params & "nVertValue: " & nVV & "," & return
      if class of nR is integer then set Params to Params & "nRotation: " & nR & "," & return
      set javascript to "this.addWatermarkFromText({" & Params & "});"
      return javascript
    end Add_WaterMarkText

    G'day
    Unfortunately I don't have the API. My Adobe Reader installation updating to version XI failed, and subsequent attempts to fall back on the X version are blocked by the partial install of XI. Damn Adobe stuff.
    Could someone please post the relevant part of the API to give me some pointers, please.
    I ha mucked about with some information I found on the Web, and come up with the following, which fails because I can't work out how to address the current document with the variable myDoc.
    Regards, Brian
    set Params to Params & "var myDoc = this;" & return
    set TempAttachmentName to "(20140717121212Z)"
    set PreserveFileName to "This is a test"
    set bypass to false
    tell application "Adobe Acrobat Pro"
      activate
      set CountOfPages to count of pages
      repeat with PageCounter from 1 to 1 # CountOfPages
      tell application "System Events" to tell process "AdobeAcrobat"
      try
      click menu item "Page..." of menu 1 of menu item "Go To" of menu 1 of menu bar item "View" of menu bar 1
      tell current application to delay 0.1
      keystroke PageCounter as text
      tell current application to delay 0.1
      keystroke return
      if not bypass then
      my ADDHeaderFooter(TempAttachmentName, PreserveFileName & " " & CountOfPages, PageCounter)
      end if
      end try
      end tell
      end repeat
    end tell
    on ADDHeaderFooter(The_String1, The_String2, currentPage)
      tell application "Adobe Acrobat Pro"
      activate
      set myDoc to document 1
      tell myDoc
      tell page currentPage
      set cbox to crop box
      set item 2 of cbox to (item 2 of cbox) + 44
      set item 4 of cbox to (item 4 of cbox) - 44
      set media box to cbox
      set crop box to cbox
      set theResult1 to my Add_WaterMarkText(The_String1, "IDAutomationHC39M", 12, 1, 1, 1, 0, 3, 10, 3, 0, myDoc)
      do script theResult1
      set theResult2 to my Add_WaterMarkText(The_String2, "Times", 16, 1, 1, 1, 0, 4, 10, -6, 0, myDoc)
      do script theResult2
      end tell
      end tell
      end tell
    end ADDHeaderFooter
    on Add_WaterMarkText(cText, cFont, nFontSize, nS, nE, nTA, nHA, nVA, nHV, nVV, nR, myDoc2)
      #set Params to "var myDoc = app.newDoc();" & return
      set Params to ""
      set Params to Params & "var myDoc = this;" & return
      set Params to Params & "var inch = 72;" & return
      set Params to Params & "var Bbox = this.getPageBox(" & "\"Crop\"" & ");" & return
      set Params to Params & "var f = myDoc.addField(" & "\"Text1\"" & ", " & "\"" & cText & "\"" & ", 0, [72, Bbox[1]-inch, Bbox[2]-2*inch, Bbox[1]-2*inch ] );" & return
      set Params to Params & "f.strokecolor = color.black;" & return
      set Params to Params & "f.richText = true;" & return
      set javascript to Params
      return javascript
    end Add_WaterMarkText

  • How can I add the cc line to my emails from iphoto

    I want to use the email in my iphoto program to email an invitation to a large group of people, but how do I add the cc line in my header of the email?

    You can't.  For a cc or bcc field you will have to use the regular Mail client.  However, Mail does have some photo stationary if you like the fancy iPhoto presentation of photos in the emails:
    Click to view full size
    OT

Maybe you are looking for