How do I Change Permissions for a UME Role: UME.Manage_Users

I am trying to set up a helpdesk role that will allow a limited number of users to reset passwords and unlock users.
I do not want them to be able to change user data, delete or create users.
I created a user and assigned it the user administration content. I removed all except the search, previous search and locked users options. In the permissions I clicked on yes for the manage_users capability.
However, the manage_users option is set to all by default. How can I change it so they only have reset password and unlock capabilities?

Hi,
Mangae_users action in UME is basically for delegated admin's. With this action an user can do all admin activities for the particular company.
If you want to give only password change permission assign the action
UME.Manage_all_user_passwords. With this action an user can view and change all user passwords.
Refer the link below also for more information.
http://help.sap.com/saphelp_nw70/helpdata/en/5f/670db7939b8e48999d65f8a05ad611/frameset.htm
Thanks
R.Murali

Similar Messages

How do I change permissions for the documents and files on my Mac Book Pro after I re-instaalled the HD using a Time Machine back-up?

I had to re-install the HD on my Mac Book Pro. I used a Time Machine back-up for all the apps and files. Most were restored, However, I cannot unlock a number of them. I tried changing the permissions using Get info but it is not working. I am using the latest version of Moutain Lion OSX.

Linc:
Very helpful suggestion and response, Thanks for pointing out that it is a permission issue. I am working through the issue and resolving my problem.

How do I change permissions for West Dig USB HD, how said "read only" and can't use it.

I have a West Did Hard drive from my PC that want to use on my Macbook. Looking at the permissions said "read only". I tried to move files on the drive and could not when attached to my Macbook. Where do I change these settings that will allow me to use this drive. Thanks for any help.
This is my first Mac so do not know much about the Mac process, moving slow and steady.
Donco

Was this drive in use with a windows machine previously?
If yes then I would guess that it is formatted as NTFS, Mac's can not write to NTFS discs.
If you have sufficient space on your Mac copy the disk contents to a folder on your desktop and reformat the drive for use with Mac and Windows, then put the files back.
Post back with some answers and I'll try to guide you through this

Change permissions for UME repository

Dear friends,
Is it possible to change permissions for the ume repository. By default, it has "Allow" permission for List Children and Read properties. I dont see any options to change permissions under Settings -> permissions. Does anyone here in this forum knows how can I achieve the same? I am actually trying to index the ume repository and the crawler fails. I was wondering if the repository needed to have a full control. So, I am trying to change the permissions.
We are on EP6 SP13 (all components)
Any help is appreciated,
Thanks,
Mandar

Hello experts,
any ideas?
I need aswell to change the permission in the UME repository...
Thanks in advance!
Greets
Thomas

I recently purchased an external hard drive to back up my iMovies. When I try to open the movies on the backup I get a message "you may not have permission to modify that folder" How do I change permissions on the backup?

I recently purchased an external hard drive to back up my iMovies. When I try to open the movies on the backup I get a message "you may not have permission to modify that folder" How do I change permissions on the backup?

Hi
One Must NEVER move or alter any folders named
• iMovie Event's - or -
• iMovie Projects - or - alike
on DESKTOP/FINDER - Ever ! - ONLY Within the iMovie Program ! else all connections are broken and hard to impossibly to mend !
but rather do as described here under
Moving Event's and Project's
Connection - Either connect one Mac in Target mode to the other via FireWire. Or use an external hard disk !
(Target-Mode - Start one Mac e.g. laptop - BUT keep T-key down during full up-start - Now a FW-symbol is jumping around the screen and it will work as an external hard disk when connected to the other Mac)
A. The External Hard Disk - MUST BE - Mac OS Extended (hfs) formatted to work for Video. UNIX/DOS/FAT32/Mac OS Exchange works for most other things but not for Video whatever program is used (iMovie or FinalCut)
B. Should be a FireWire one as USB/USB2 performs badly to me and especially when filling up
C. Do never Move or Alter any folder named
• iMovie Event's - or -
• iMovie Project's
on DeskTop/Finder - as this will result in iMovie losing connections to them and repair can be anything from hard to impossibly
D. Moving and Copying must be done within iMovie application and Events to Events - and - Project's to Project's.
E. Moving Project's to Event's - Do not work for me - I have to export project as a QuickTime movie then Import this into Events.
Event's window can show two faces
Like this
or like this
from one hard disk Event - You can move it to the other hard disk
You can not (at least not me) move Event to Project or other way around only
Event to Event and Project to Project
Yours Bengt W

HT5654 I have a new computer, Windows 8. My old laptop died and I used to Sync my iPad and iPhone on that device. Now I want to update, the new computer states that I do not have permission. How do i change permissions to this new computer?

I have a new computer, Windows 8. My old laptop died and I used to Sync my iPad and iPhone on that device. Now I want to update, the new desktop computer states that I do not have permission. How do I change permissions to this new computer?

Did you authorize it?

How do I change platform for downloading and installing Photoshop Elements from Windows to Mac?

How do I change platform for downloading and installing Photoshop Elements from Windows to Mac?

As long as your license supports both platforms you should only have to download the Mac version and install/activate using your serial number. If you need help finding a link to download the file, please indicate the PSE version you need.

How to get change log for z-fields in VBAk(Sales order)

Hi All,
Please help me in this.
My requirement is get the change log for z-fields in sales order.
In the sales order header level we have one tab Additioanl data.
In this we have z-fields, if we change any of the field value, it is accepting the same and updating in data base as well.
But it is not appearing in change log<. I.e. Environment->changes.
How to get the change log for the z-fields.
In data element level enable the check box of change document.
Please help me in this.
Thanks in advance
Jaya,G

Hi Jaya,
For this you need to do some coding. Here is a link which tells you, step by step procedure how to activate Change log for the Z tables.
THe Object that you need to use for Sales Document is VERKBELEG
[https://wiki.sdn.sap.com/wiki/display/ABAP/Maintaining%20Change%20Log%20for%20Database%20Tables]
Hope this helps..
This is Primarily a Technical Consultant Job. Take his help before you make any changes.
Thnks
Srini

How do the change management for the configuration of the adapters

Hi all.
How do the change management for the configuration of the adapters, when i transport the software version component from an development system to production system.
For example, for to change the url parameters of adapters soap inside the production system. I will need type, the news values in this system?
Thanks
Best Regards.

There is an option to pass all the paramters except those who changes from
system to system.
for example,
if you are reading from a file from the directory: <SYS>\CREMAS_<TS>.XML
when <SYS> is DEV or QAS or PROD, and <TS> is time stamp,
you can create channel template that read file with file pattern CREMAS_*.XML,
this can save you a lot of work, however, parameters that are diffrent in every system, (in this case the directory DEV,QAS,PROD) you must enter manually in every system.

How to implement Change pointers for Purchase order - ME22N - Custom Fields

Hi Experts,
Can you please tell me how to implement - Change Pointer for Custom fields in IDOC.
I am working on IDOC - For purchase order - acknowledgements - in custom screen/tab in ME22N.
Everything is working fine according to my requirement.
All i need to know is the process of - Creating/Change - Change pointers for Custom fields.
1.How to implement change pointers for custom fields.
2.Can we maintain - Change Document - for custom fields at data element level?
P.S. - I have browsed many previous - forums before posting a new discussion.
please share your inputs...
explaining how to create/implement - change pointers for custom fields will help me .
Regards,
Karthik Rali.

Hi,
To maintain Change Document for custom field:
1. Check if "Change document" checkbox is set in data element.
2. Find Change Document Object for transaction.
   You can use SQL trace - ST05.
   Look there for line with table CDHDR and statement insert values
   (for example for transaction KA02 Change Document Object is KSTAR)
3. Regenerate update program for this Change Document Object in transaction SCDO
Change documents for z-fields schould be generated.
I am not sure about change pointers but they are configured somehow in BD61 and BD50.

Picture Book theme - why has my book printed with text box outlines showing? and how do I change this for any future purchases? This did not occur with previous books.

Why have borders appeared around the text boxes in the Picture Book theme and how do I change them for the future. My latest book looks dreadful!

Have you checked, if your book is really set to the "Photos" Theme? This looks like you may have used one of the "Travel" themes. These themes create borders around the text boxes. When you select a theme, the book title will say "Photos", even if the theme is a different one.
For example, frames text boxes with the "travel" theme.
Have you previewed your book, before printing it? Did the framed boxes already show in the preview?
See: Previewing an order in iPhoto or Aperture
Regards
Léonie

How do I change installer for Elements 12 to 64bit ?

How do i change installer for Photoshop Elements 12 to 64 bit (I mistakenly selected the other bit option because there was NO ADVICE On WHAT TO SELECT). Now I try to complete installation of a purchased product, and just keep getting stonewalled with same error message with no advice on how to fix!

Hi Gordon
You should not have to make any selection. The program automatically installs the appropriate version. On Windows 64 bit it will install in Program Files and on 32 bit systems in Program files (X86).
http://www.adobe.com/uk/products/photoshop-elements/tech-specs.html

Solved - How to take ownership and change permissions for blocked files and folders in Powershell

Hello,
I was trying to take ownership & fix permissions on Home Folder/My Documents structures, I ran into the common problem in PowerShell where Set-Acl & Get-Acl return access denied errors. The error occurs because the Administrators have been removed from
file permissions and do not have ownership of the files,folders/directories. (Assuming all other permissions like SeTakeOwnershipPrivilege have been enabled.
I was not able to find any information about someone successfully using native PS to resolve the issue. As I was able to solve the issues surrounding Get-Acl & Set-Acl, I wanted to share the result for those still looking for an answer.
Question: How do you use only Powershell take ownership and reset permissions for files or folders you do not have permissions or ownership of?
Problem:
Using the default function calls to the object fail for a folder that the administrative account does not have permissions or file ownership. You get the following error for Get-Acl:
PS C:\> Get-Acl -path F:\testpath\locked
Get-Acl : Attempted to perform an unauthorized operation.
+ get-acl <<<< -path F:\testpath\locked
+ CategoryInfo : NotSpecified: (:) [Get-Acl], UnauthorizedAccessException
+ FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.PowerShell.Commands.GetAclCommand
If you create a new ACL and attempt to apply it using Set-Acl, you get:
PS C:\> Set-Acl -path F:\testpath\locked -AclObject $DirAcl
Set-Acl : Attempted to perform an unauthorized operation.
At line:1 char:8
+ Set-Acl <<<< -path "F:\testpath\locked" -AclObject $DirAcl
+ CategoryInfo : PermissionDenied: (F:\testpath\locked:String) [Set-Acl], UnauthorizedAccessException
+ FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.PowerShell.Commands.SetAclCommand
Use of other functions like .GetAccessControl will result in a similar error: "Attempted to perform an unauthorized operation."
How do you replace owner on all subcontainers and objects in Powershell with resorting to external applications like takeown, icacls, Windows Explorer GUI, etc.?
Tony

Hello,
Last, here is the script I used to reset permissions on the "My Documents" tree structure that admins did not have access to:
Example: Powershell script to parse a directory of User-owned "My Document" redirection folders and reset permissions.
#Script to Reset MyDocuments Folder permissions
$domainName = ([ADSI]'').name
Import-Module "PSCX" -ErrorAction Stop
Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeRestorePrivilege", $true) #Necessary to set Owner Permissions
Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeBackupPrivilege", $true) #Necessary to bypass Traverse Checking
#Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeSecurityPrivilege", $true) #Optional if you want to manage auditing (SACL) on the objects
Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeTakeOwnershipPrivilege", $true) #Necessary to override FilePermissions & take Ownership
$Directorypath = "F:\Userpath" #locked user folders exist under here
$LockedDirs = Get-ChildItem $Directorypath -force #get all of the locked directories.
Foreach ($Locked in $LockedDirs) {
Write-Host "Resetting Permissions for "$Locked.Fullname
#######Take Ownership of the root directory
$blankdirAcl = New-Object System.Security.AccessControl.DirectorySecurity
$blankdirAcl.SetOwner([System.Security.Principal.NTAccount]'BUILTIN\Administrators')
$Locked.SetAccessControl($blankdirAcl)
###################### Setup & apply correct folder permissions to the root user folder
#Using recommendation from Ned Pyle's Ask Directory Services blog:
#Automatic creation of user folders for home, roaming profile and redirected folders.
$inherit = [system.security.accesscontrol.InheritanceFlags]"ContainerInherit, ObjectInherit"
$propagation = [system.security.accesscontrol.PropagationFlags]"None"
$fullrights = [System.Security.AccessControl.FileSystemRights]"FullControl"
$allowrights = [System.Security.AccessControl.AccessControlType]"Allow"
$DirACL = New-Object System.Security.AccessControl.DirectorySecurity
#Administrators: Full Control
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("BUILTIN\Administrators",$fullrights, $inherit, $propagation, "Allow")))
#System: Full Control
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("NT AUTHORITY\SYSTEM",$fullrights, $inherit, $propagation, "Allow")))
#Creator Owner: Full Control
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("CREATOR OWNER",$fullrights, $inherit, $propagation, "Allow")))
#Useraccount: Full Control (ideally I would error check the existance of the user account in AD)
#$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("$domainName\$Locked.name",$fullrights, $inherit, $propagation, "Allow")))
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("$domainName\$Locked",$fullrights, $inherit, $propagation, "Allow")))
#Remove Inheritance from the root user folder
$DirACL.SetAccessRuleProtection($True, $False) #SetAccessRuleProtection(block inheritance?, copy parent ACLs?)
#Set permissions on User Directory
Set-Acl -aclObject $DirACL -path $Locked.Fullname
Write-Host "commencer" -NoNewLine
##############Restore admin access & then restore file/folder inheritance on all subitems
#create a template ACL with inheritance re-enabled; this will be stamped on each subitem to re-establish the file structure with inherited ACLs only.
#$NewOwner = New-Object System.Security.Principal.NTAccount("$domainName","$Locked.name") #ideally I would error check this.
$NewOwner = New-Object System.Security.Principal.NTAccount("$domainName","$Locked") #ideally I would error check this.
$subFileACL = New-Object System.Security.AccessControl.FileSecurity
$subDirACL = New-Object System.Security.AccessControl.DirectorySecurity
$subFileACL.SetOwner($NewOwner)
$subDirACL.SetOwner($NewOwner)
######## Enable inheritance ($False) and not copy of parent ACLs ($False)
$subFileACL.SetAccessRuleProtection($False, $False) #SetAccessRuleProtection(block inheritance?, copy parent ACLs?)
$subDirACL.SetAccessRuleProtection($False, $False) #SetAccessRuleProtection(block inheritance?, copy parent ACLs?)
#####loop through subitems
$subdirs = Get-ChildItem -path $Locked.Fullname -force -recurse #force is necessary to get hidden files/folders
foreach ($subitem in $subdirs) {
#take ownership to insure ability to change permissions
#Then set desired ACL
if ($subitem.Attributes -match "Directory") {
# New, blank Directory ACL with only Owner set
$blankdirAcl = New-Object System.Security.AccessControl.DirectorySecurity
$blankdirAcl.SetOwner([System.Security.Principal.NTAccount]'BUILTIN\Administrators')
#Use SetAccessControl to reset Owner; Set-Acl will not work.
$subitem.SetAccessControl($blankdirAcl)
#At this point, Administrators have the ability to change the directory permissions
Set-Acl -aclObject $subDirACL -path $subitem.Fullname -ErrorAction Stop
} Else {
# New, blank File ACL with only Owner set
$blankfileAcl = New-Object System.Security.AccessControl.FileSecurity
$blankfileAcl.SetOwner([System.Security.Principal.NTAccount]'BUILTIN\Administrators')
#Use SetAccessControl to reset Owner; Set-Acl will not work.
$subitem.SetAccessControl($blankfileAcl)
#At this point, Administrators have the ability to change the file permissions
Set-Acl -aclObject $subFileACL -path $subitem.Fullname -ErrorAction Stop
Write-Host "." -NoNewline
Write-Host "fin."
Write-Host "Script Complete."
I hope you find this useful.
Thank you,
Tony
Final Thought: There are great non-PS tools like
Set-Acl and takeown which are external to PS & can also do the job wonderfully. It may be much simpler to call those tools than recreate the wheel in pure
code. Feel free to use whatever best suits your time, scope & cost.

How do I change permissions to access a shared file?

My computer has 2 accounts, mine and my wife. She has a folder with photos. When logged in as my wife, I duplicated that folder and moved the copy to the User>Shared folder. When I log in as myself and access the Shared folder I see the copied folder with the photos but I can't open the photos. Get Info shows that I don't have any permissions. How do I change that? Thanks for any help.
Owen

Sometimes, if you highlight an item and use Get Info (or keyboard
command to generate same item) you can see what user permissions
on a file are; and as the author or superuser of a computer, you may
be able to unlock them or give them a different level of general access.
Since I don't save my images to a specific user account (though my
own computers have two accounts each) these do not have the same
permission issues when used between the accounts; and they are
saved to a file on the hard disk drive accessible to both users directly.
{This is what the Shared folder is supposed to do; but I don't use iPhoto
and so this never comes up as a problem in sharing images or exporting.}
If a user or Admin creates a folder for images, and saves them to the
hard disk drive location, the other user can see and use them; but
when there are different user permissions involved, the files have to
be changed so other users can open them. There should be a way
to make the change on more than one item at a time.
Here is a link to another Apple Discussions thread with some information
which may be of use to you to more streamline the shared folder issue:
Read/Write Permissions for all users...
http://discussions.apple.com/thread.jspa?messageID=7944908
Hopefully this helps; if not, consider each person contributing to folders
in a generic folder on the hard disk drive you create yourself; so it will
not be in a Users folder in the first place. You can connect to these by
putting an alias folder on each of the user's desktops or in their Dock.
{You could also work around the issue by making more work for yourself,
in that you can Archive images (save as .zip) images in a folder and
under one user, those tend to not be user-protected from sharing.}
Another look at how to: "Share an iPhoto Library in Tiger using ACL's"
http://ad.hominem.org/log/2005/07/acl.php
Good luck & happy computing!
edited.

How do I change permissions on many files at once?

Hello!
I recently had a large hard drive crash, and, long story short, I got all my data back but now have a different user account on a new hard drive. The permissions on all the files on the computer are fine.
However, I am a recently graduated film student and use an external drive to edit video. When I tried to open up Final Cut Pro and work on a project, I was told that the program couldn't work because I didn't have "write" access to my scratch drives. I changed the permissions on the relevant folders and can now open the application fine, but can't actually edit because ALL the medi files don't give me full read/write access.
I can change them all one at a time, which requires I enter my password for each one, but this would take a few days of work to complete.
My question is: how can I add my user account with read/write permission to many files at once? I've heard this can be done with Terminal, but I'm not sure how.
Please give me step-by-step instructions if you can! I have never used Terminal before! I am not a techie, but I want to be, and I learn quickly!
My computer specs:
15in Macbook Pro, early 2008.
System 10.5.8

In the Finder's Get Info window, under permissions, you can click the little gear icon and set the "Apply to encoded items" flag. Then when you change permissions, it will apply to everything underneath the selected folder.

How do I Change Permissions for a UME Role: UME.Manage_Users

Similar Messages

Maybe you are looking for