How to control user updates during trusted/target reconciliation

Hi All,
I am new bie to OIM.
Currently working on OIM 11g R2.
1. I have user type called 'blind' which is updated by OIM admin.
2. when I do a trusted/taget recon, I should not update user whose oim user type is 'blind'.
Note: User type 'blind' is updated by OIM admin. There is no user type called 'blind' in target system while doing trusted system all users will be in status 'alive' or 'dead'.
Kindly suggest how we can add OIM filter to prevent 'blind' user accounts from being overwritten by trusted reconciliation.
Appreciate your response

Hi GP,
Thank you for the response. Please excuse me for using the terms Live,Dead,Blind.
But we are not receiving the user Type "blind" from the reconciliation data. We receive only the two states either "live" (active) or dead (disable). Blind is the User status which we set as OIM user type manually and we do not want this blind type user get updated by the reconciliation engine. More over this reconciliation is a GTC reconciliation from CSV feed.
Please correct me if the recon is of type target reconciliation can I write a Pre-Process Event Handler which will
a) Get the list of users in OIM whose type if blind
b) compare the data with the recon data available through event handler, then skip the change.
Is this possible.
Regards
Srinivas

Similar Messages

How can an user update "Decision Table" in BRM?

Dear Friends,
I have some query related to BRM and I am using it for the first time. So my query could be very simple but kindly reply friends.
Lets say, I would create a set of decision tables in BRM....but the values in the decision table are to be maintained by the user...so how would the user maintain these values in the decision table? I know about only these 3 methods....
     i) changing the values directly in rules composer
     ii) upload an excel file and get the values updated in runtime
     iii) use http link '\rulesmanager' to update the values
But none of these methods would be suitable for the user to update those values right. I mean, How can we give the admin privilege to the user so that he can modify using rulesmanager!
So these are my two basic queries:
     1) Can we update the values in the decision table from a WebDynpro GUI? OR
     2) Can we automatically generate a WebDynpro GUI by giving Decision table as input and the GUI as output? We can give this GUI to the user for value maintenance.
If (1) is possible, we need to do lot of work in creating different Webdynpro GUIs for maintaining the values. So what I would prefer is (2).
Could anyone please let me know how can I do (2)? If (2) is not possible, then please tell me how to proceed with (1)?
Expecting your earliest reply...Thanks a million in advance...
Warm Regards
Anand Uthaman

Dear Oliver,
Thanks for your quick reply. As you said, rules manager is the best way to let the user interact with the rules (we just need to maintain the privileges).
But consider this scenario in BRM. If the data that we need to maintain in the BRM decision tables are system generated then how is it possible to maintain the data? Is there any way to access and update the decision tables from the WD GUI?
Let me give you another scenario. If we need to create a rule to get a property of a particular product and if there are so many products (say 25,000 - 50,000) then should we maintain these many records in the decision table? It would be difficult to maintain this rule right. Is there a better way to do this? Or is it that the oracle DB is a better way to handle these kind of scenarios?
Expecting your earliest reply. Thanks a lot in advance for your time.
Thanks 'n Best Regards
Anand P V

Prevent a control from updating during user interaction

I have a slow (couple of kBauds) serial link to a device that I want to control from within LabView.
There's an event loop that takes care of processing the control changes. When a control changes, the thread acquires a semaphore to access the serial link, sends out the new value and releases the semaphore again. In another thread, the device is periodically polled for actual values. All that works fine.
The problem is that, due to the lag of the link (and polling and sending happening in two different threads), the newly set parameters are returned with a delay. So let's say, I have a slider from 0-1000 and I slide it down from 1000 towards 0. While I hold the mouse down on the slider, dragging it, the communication thread returns a value that is different from where the slider is at and therefore sets the slider to an outdated value. That makes the slider jitter and that's what I need to get rid of.
I think this is a common problem, yet I couldn't find a straightforward solution. Basically, what I was looking for was a property "isEditing" or "isDragging" which I could check and then not update the control when this is true, to prevent that race between events. Does something like that exist? How do you guys tackle such a problem?
Thanks,
z

zeeed wrote:
I have a slow (couple of kBauds) serial link to a device that I want to control from within LabView.
...and therefore sets the slider to an outdated value. That makes the slider jitter and that's what I need to get rid of.
I think this is a common problem, yet I couldn't find a straightforward solution. Basically, what I was looking for was a property "isEditing" or "isDragging" which I could check and then not update the control when this is true, to prevent that race between events. Does something like that exist? How do you guys tackle such a problem?
Thanks,
z
THe first part of this post got wiped out by the goffy forum editor. I do not have time to retype it....
applied when you get a new value from a queue or by polling the current value.
While changing...
THe control must act as control and must over-ride the widget value. The natural thought would be to put that code in the value change event... but how to do it such that the value does not get over-riden?
Put SOMETHING inbetween that can mange the value. You could go as far as to develop an QMH (Queued Messae handler) or similar inplace to handle the logic but I don't think we have to go that far. I would first concider developing an Action Engine to act as the traffic control you need.
Applying an Action Engine
i would use the AE to intercat with the widget and store it curent value. YOu will need an Init Action and a Close action as is normal but I would include two mtehods that would help you with the Over-ride.
Get Value - This action will read (using serial query) the current value of the widget and return the value to the caller. You could also have a "Read' or similar that would retireve the value from a Shift Register inside the AE. This action would be called regularly in your T.O. event and will keep the contro lupdated as to the widget value.
Set Value - Would be the key action that can help you out. THe details depend on the widget but in general the Action would acept the new over-ride value and use it to send the comand to the widget to set the new value AND will query the widget to ensure the widget took the seeting or reached that value. After the widget is done, the new value is cached in a SR in the AE so that the latter checks by the TO event give you the value you set.
If you read the Nugget i linked you will see how an Action Engine blocks calls while it is running. By putting the code to set the widget value in the AE, you can ensure the widget went to the new value before any update code can read an old value.
The above is just one idea and there are others. I would think other solutions would all involve putting some type of traffic control inplace so the AE is a natural solution.
Note:
I have used similar approaches in the past to enforce safety logic to ensure the automatic PID updates do not over-ride a safety-shutdwon scenario.
I hope this helped more than it hurt,
Ben
Ben Rayner
I am currently active on.. MainStream Preppers
Rayner's Ridge is under construction

App-V 5 SP2 and Office 2013 - How to control user access?

What is the best way to control access to the Office 2013 application shortcuts?
Because it must be published globally, how can we only allow certain users to access Office 2013 on RDS servers when the default action would mean all users can access it?
Can removing the shortcuts using the DeploymentConfig file (see
here) followed by setting up something using the UserConfig file linked to an AD group work?
If so how would this be done?

See these threads:
http://social.technet.microsoft.com/Forums/en-US/a455d7e2-e0e6-4843-b07b-42afc18623e2/office-365-proplus-appv-50-package-installs-lync-outlook-infopath-and-onenote-even-though-they?forum=mdopappv#6fbcf59b-351c-48d1-8e63-539550a88b56
http://social.technet.microsoft.com/Forums/en-US/f4b47f1e-e494-4477-97e9-6942c4f8ec2d/office-2013-vl-appv-5-packages?forum=mdopappv#7f63bea4-57c3-40a7-bdf4-6f25320e5b68
Please remember to click "Mark as Answer" or "Vote as Helpful" on the post that answers your question (or click "Unmark as Answer" if a marked post does not actually
answer your question). This can be beneficial to other community members reading the thread.
This forum post is my own opinion and does not necessarily reflect the opinion or view of my employer, Microsoft, its employees, or other MVPs.
Twitter:
@stealthpuppy | Blog:
stealthpuppy.com |
The Definitive Guide to Delivering Microsoft Office with App-V

How to control user input with a button?

How do I control a user input from a dialog box by activating it with a button. I am saying "press zero", then when the user does press zero, it should zero the scale.

The user has only one button they can press. You should enable the cancel so that the dialog can output an F.
What you have works, but the zero will not occur until the case is activated. If the insides of the case do not work, that is another story. Put a pop up in the active case to convince yourself that the case is being entered.
This, what you have, always returns T.
Mark Ramsdale

How to control users to revoke PO after partial GR

Dear All,
Users creating a PO and after PO has completely released and partial qty of goods receipt.
Few users revoking/canceling the release strategy how can I control.
Regards
Subhash

Hi Subhash,
This can be taken care by 'Authorisation management"
Contact your SAP BASIS team and ask them to make strict authorisation scenario,
In your case, revoke the access of user from making changes to a release strategy once the document is released.
Regards,
Pravin

How to control flow of messages to target

I am using a Multi mapping in the Message mapping. The structure of Target message is as follows.
Messages1
+Node1
+Node2 ( duplicate sub tree of Node1)
+Node3 ( duplicate sub tree of Node1)
+Node4 ( duplicate sub tree of Node1)
Messages2
+structureNode
Messages3
+NodeStructures
I am using a Enhanced Interface determination so that Node1, Node2....., structureNode ( of messages2), NodeStructures ( of messages 3) will go as a seperate message to target.
Suppose,
None of the Nodes under Messages1 get generated in mapping but still messages1 will be sent to the target as a single message.
THe target system is facing problems with this and generating error messages each time this happens.
I would like to stop processing empty messages on PI.
Whr should I stop such empty messages?can I add a module that provides me this facility?
Why did SAP provide empty messages stop option in File not in SOAP?
I know this provision is there in File CC but not in SOAP.
Things I cannot do:
1. Cannot have a mapping that will restrict messages, because I am using a multi mapping with each messae as 1...1 so I canot use @ MM.
2. I canot use ext receiver determination because I need to choose my target message based on the target mapping result not from the source payload...
Now how do I solve this problem?
Thanks,
Nikhil

its the second case.
good you are saved from some tedious settings
I used multi mapping in which case, multiple messages exists and each messages has 1...1 so it will always appear with no value in any of its fields.
Where do you want me to place the condition for mandatory fields?
see the mandatory fields always apear in source but I wanna filter on the target mapping.
The condition has to be put in the mapping program that you are using...check out my answer in the following thread...
Re: Generate the Element on target if the value exists in Source element
functionality remains the same...just implementation depends on what mapping program you use(graphical, xslt.....)
Regards,
Abhishek

How to skip the update during start up of my new playbook

Hi... I just purchased my a new playbook and it is very frustrating... and disappointing... cause I need it wifi to get it started... After i managed to go to a cafe and get Wifi it was even more frustrating... since I had to update the software which is nearly 300MB... which I could not download since it was slow and getting disconnected... I wish blackberry gave smaller updates... or an option to skip the update... cause it 7 days since I have got my new playbook and yet not been able to use it... I would not recommend my friends to go for it since its been disappointing is there any other way to get it started or easier way to update the software... since its frustrating having it and not being able to use it.. Please help me with the problem Regards Rahul

The update process is to ensure you have the latest OS on it.
I dont know of a way to get around it at this time.
Click here to Backup the data on your BlackBerry Device! It's important, and FREE!
Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals
BESAdmin's, please make a signature with your BES environment info.
SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope
Want to thank me? Buy my KnottyRope App here
BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V

Error during trusted source reconciliation

Hi,
I'm facing some issue using Database Applications Table connector (DBAT_91050).
I've correctly installed the connector and created a simple table in a database schema (first name, last name, emp_id, role (everything as varchar2)).
Then I've created a generic connector for a trusted source and made the mapping.
When I try to run the job to reconcile my source I receive the following error:
Caused By: org.xml.sax.SAXParseException: cvc-minLength-valid: Value '' with length = '0' is not facet-valid with respect to minLength '1' for type 'matchingRuleType'.
at org.apache.xerces.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)
at org.apache.xerces.util.ErrorHandlerWrapper.error(Unknown Source)
at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source)
at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source)
at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator$XSIErrorReporter.reportError(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator.reportSchemaError(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator.elementLocallyValidType(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator.processElementContent(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator.handleEndElement(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator.endElement(Unknown Source)
at org.apache.xerces.jaxp.validation.ValidatorHandlerImpl.endElement(Unknown Source)
at com.sun.xml.bind.v2.runtime.unmarshaller.ValidatingUnmarshaller.endElement(ValidatingUnmarshaller.java:106)
at com.sun.xml.bind.v2.runtime.unmarshaller.InterningXmlVisitor.endElement(InterningXmlVisitor.java:81)
at com.sun.xml.bind.v2.runtime.unmarshaller.SAXConnector.endElement(SAXConnector.java:158)
at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:255)
at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:281)
at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:250)
at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:281)
at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:250)
at com.sun.xml.bind.unmarshaller.DOMScanner.scan(DOMScanner.java:127)
I've already read Re: Trusted source Object Reconciliation Mapping for act_key - 11g Realease2 but I'm not able to apply the solution to my case.
No rules and no transformations are applied during the map.
Thank you.

Hi,
I did as you suggested, but I didn't get some point:
- Then see whether User ID is marked as "Key for reconciliation"...
Is the USERID an attribute of my table? I've mapped a field called idemp with "Employee Number" and I've set this as Key for reconciliation.
Is this correct?
- Open up the Recon Rule for TEST_GTC...
In my reconciliation rules tab there are only 4 rules:
DBUM Oracle Target recon
MySQL Oracle Target recon
Oracle DB Trusted
MySQL DB Trusted
and for each of them both checkboxes are checked.
Do the table show more rules or the one I'm interested in is "Oracle DB Trusted"?
I've created the reconciliation profile but I can't see any new table in my DEV_OIM schema.
Performing "select table_name from user_tables where table_name like 'RA%HR%'" (my Resource is called HR_CONN)) only one row is returned: RA_HR_CONN_GTC
The table is empty and appears like:
RECON_TABLE_KEY NOT NULL NUMBER(19)
RE_KEY NUMBER(19)
RECON_CHGLOGATTR_IDXLST VARCHAR2(256 CHAR)
RA_LAST_NAME VARCHAR2(150 CHAR)
RA_ROLE VARCHAR2(255 CHAR)
RA_NAME VARCHAR2(150 CHAR)
RA_AGE VARCHAR2(256 CHAR)
RA_IDEMP VARCHAR2(80 CHAR)
RA_MIDDLE_NAME VARCHAR2(80 CHAR)
Thank you.

Control User Specific button in ALV report

Hi,
Can anybody please suggest me how to control "USER SPECIFIC" button in ALV report layout using authorization object. I mean if you can tell me which authorization object is responsible to control the "USER SPECIFIC" button.

additional info to what Lakshmi already said:-
normally the restrictions for saving layouts/display variants are done at 2 levels:
1) The developer of an ALV list first predetermines the authorization in the 'i_save' parameter within the code.
I_SAVE = ' '     -
layouts cannot be saved
I_SAVE = 'A'   -
user-specific and cross-user layouts can be saved
I_SAVE = 'X'   --- cross-user layouts can be saved
I_SAVE = 'U' --- user-specific layouts can be saved
2) The second level comes to us restriciting the S_ALV_LAYO which gives access to users to save global layouts if I_SAVE for that particular transaction is A or X.
for example, a report has I_SAVE= 'A', which means
it will allow to save User-specific layouts without any restrictions.
and if user has S_ALV_LAYO then he can save both User-Specific and Global Layouts(variants).
it would be better to keep this object separate.

How to prevent user keyin wrong in master-detail

How to prevent user keyin wrong in master-detail.
Example : User click button to created mster with out crete detail then they going to another master record for created detail for that master,
How to control user keyin master-detail currect record finish first then can go to another master?
Is it posible if I will disable another record of master and enable only current record after they finish to keyin master and detail of this record then I enable all.
If posible can you give me step-by-step and coding.
Thank you very much

I'm not able to understand the scenario. You probably will have to provide more detail of the issue.
--Shiv

How to Control authorization for users with certain status for level 2 WBS Element

Dear All,
Is there any standard way or enhancement available to control authorization for users with certain status for WBS Element i.e. for example
Pre-requisite:
There is only 2 level of project i.e.
Lev_ WBSE_______Description
1___ 7-14.E_______summay outage controller
2___ 7-14.E.2310__ Plant/unit # 2310
2___ 7-14.E.2310__ Plant/unit # 2220
Project Controller (authorization role assigned "Z_PS_OP7_OTGCON_C") have all project level authorization
Plant/Unit Controller (authorization role assigned "Z_PS_OP7_PLNTOTG_C_2310") have only level 2 authorization with enhancement that we did in system by Z table.
User ID_ Plant #
123345_ 2310
122455_ 2220
Issue:
After System Status released and User Status approved the WBS basic date for Plant/Units should be restricted from updating/changing by Plant/Unit Controller level and only project controller should have this authority.
Solution required:
Can any one tell how to control this scenario either by standard or enhancement available to control authorization
BR
Saqib Usman

Hi,
Did you explore SAP Enhancement CNEX0002 Using Transaction CMOD?
Thank you and regards,
Varshal Kachole
The SCN Rules of Engagement

How to create user defined metrics for SQL Server target?

The customer is not able to create a user defined metrics for SQL Server target.
This is very important for him to use this product.
He is asking how to create user defined metrics?
I sent him Note 304952.1 How to Create a User-Defined SQL Metric in EM 10g Grid Control
But it would work for an Oracle DB, but his target is SQL Server DB
Not able to find the "User-Defined Metrics" link from Database home page.
How to create user defined metrics for SQL Server target?

http://download-uk.oracle.com/docs/cd/B14099_19/manage.1012/b16241/Monitoring.htm

How to change the update servers target location?

Hi i just bought a used MacBook from a friend i have been having a problem when trying to use the software update. when i click on software update it says it can not connect to the update server and that i should use network diagnostics. when i click on it it says network seems to be fine but on the left side it shows a red light where server is and says failed i click on run diagnostics and it says "network diagnostics was able to connect to the internet but not to the server "(not showing the server for privacy reasons)" This could be caused by problems with the server, or an internet problem between this computer and the server."
The server name which i did not list was my friends old job server. i just want to know how to change the update servers target location so it will stop trying to connect to his jobs server so it will allow me to update my software from my home wifi thanks

Your friend has configured this computer in some way to prevent a user from accessing Apple's update servers. This was probably done for security purposes. You might check if the firewall has been activated - Open the Security preferences, click on the Firewall tab. If the firewall is turned on, then turn it off. This should fix the problem.
However, if your friend has made other modifications, then you will need to ask him/her what you will need to do to remove them.

CRM Web UI :- How to Control number of session of Web UI for a user

Hello Experts,
We do have very specific requirement which SAP doesn`t recommend in terms of multi-sessioning for a user.So we are little worried upon the challeges.Could you please share your ideas/Experience on following?
1.How to Control number of Internet explorer session for the web UI (may be 2 or 3).?
Though SAP doesn`t recommned more than one but our client requires 2 or more than that but we need to fix it either
2 or 3.
So we are looking for specific setting for this.
2.What are the challenges we need to face if we implement option 1?
3.Specially in interaction record management
    a. Is there chance of loosing the data if agent has opened more than two session.
    b. In which session interaction record data will get stored,the one on which agent picked up the call or in the latest
        one?
Please let me know if I am not clear enough on any point.
Thanks in advance,
Shailendra Tolambiya

Hi Shailendra,
The following wiki page might be useful in this respect:
http://wiki.sdn.sap.com/wiki/x/gxdKDQ
Best Regards,
Shiromani

How to control user updates during trusted/target reconciliation

Similar Messages

Maybe you are looking for