How to decentralize the administration authorisation?

Dear Experts,
I am looking for a solution to decentralize the administration authorisation in a project.
I will create all the roles in the central administration. The local administrator can not create new roles. But I will let the local administrators to create their local users and assign the roles to the local users. And what's more, he can only assign those roles belong to their region. For example, Accounting for Region A.
What kind of authorisation can I give to the local administrators?
Thanks!

You need to name your roles to include the local designator.  That way, you can control the ability to assign roles based on role name via auth object S_USER_AGR
example:
role titles - Z:<region>:<APCLERK>
you give your admin in the UK access to S_USER_AGR ACTVT=22 (needed to assign the role) ACT_GROUP = Z:UK:*
They can only assign roles that belong to naming convention Z:UK:* etc.
By restricting S_USER_GRP you can also ensure that the local administrators only maintain users who belong to the local user groups defined for them.

Similar Messages

  • (emergency) How to inform the administrator ....?

    When Sun Cluster found a fault(may cause failover or not) and repair it, how to inform the administrator or administrative software?
    Here is a example.
    The NAFO backup group has two adapter. Sometime the active adapter doesn't work and automatically failover to the inactive adapter. We should be informed that there is a adapter is bad , and should replace it with a new one. The information can be transfered by email or by other means.
    Should We do?
    Thanks.

    By default this type of information is written to the standard messages file. You should also be able to pick this information up using snmp via the admin workstation.

  • How to restore the administrating users

    someone deleted the administrative user on the computer. ive tried to figure out how to restore it but I cant. how do i restore my administrative user to upload the windows 10

    zhu19774279 wrote:
    I have a user "GIS", it's tablespace is USERS, there are only two tables in this user(RASTER_DATA and RASTER_DATA_RDT).
    I put some raster data in "GIS", now I delete all data(delete from RASTER_DATA), but the tablespace USERS is still 7/10GB, how to "clean" the USERS?When you delete a row, or all the rows, the extent that was allocated for them stays allocated. De-allocating/re-allocating extents is a fairly expensive operation, and it is assumed that if a table once needed an extent it will probably need it again, so it is not routinely de-allocated just because it is empty at the moment.

  • How to change the administrator name

    I have tried to change the administrator name on a Macbook pro that I recently sold. I used the following:
    Rebooted and held the command and s button, pressed enter and ended up with the following at the prompt: bash-3.2#.
    I was trying to get to the root directory in order to continue with:
    mount uw /
    rm /var/db/.AppleSetupDone
    shutdown -h now
    I saw a video that said this would allow the new user to start fresh and type in his information however the
    bash-3.2# does not allow me to

    When you reinstall the OSX, you can change not only the password but the administrator as well.
    Ciao.

  • How to recover the administrator user and pass

    hello,
    I instaled ORACLEXE few days ago, and accord to the instructions I've been using HR user.
    but now I'd like to login as administrator because i'd like to create a new user. problem is I don't remember the administrato's user and pass.
    what should I do ?
    thanks in advance. Andrea.

    hello everyone.
    thanks for you replies.
    I'm on windowns.
    Problem is that I even don´t remember the name of my "user" administrator. I don´t know if it's "system" or "sysdba" or "administrator" or "root" ... :(
    I´m a student, I don´t know nothing about admin databases.
    in generally when I install something I use to write and keep the user I used to install but this time I forgot.
    - I tried Aman... clue, problem is that I have to connect to the database as SYSDBA to perform it.
    - I didn´t understand Mastalerz clue.
    any more clue, or I'll have to unistall my db ? :(

  • How to find the Administrator Name of OS X Server, and login to it from the Server app from another Mac?

    OS X Mountain Lion 10.8.5 and Server 2.2.2 on both Mac Mini Server and Macbook Pro.  They are on the same WiFi network.
    I want to use the MBP to manage the Server on Mac Mini Server and use the MacMiniServer to provide Caching Service for my MBP, iPad and iPhone.
    The problem:
    From the MBP Server app, it asks me the Host Name, Administrator Name and Administrator Password.  I cannot get it right.  Where can I find it from the Mac Mini Server?
    What elese shoudl I do / learn?

    Run Server.app on the host itself.
    Click on the line on the left for the server itself (probably top or second down)
    Click on the 'settings' tab.
    Make sure you have 'Enable screen sharing and remote management' ticked.
    If it's already ticked ...
    Find the address you're using for the 'Host' field and try
    ping [thataddress]
    as a command in the Terminal on the client computer.  Do you get numbers up, or errors ?
    Use control-c to quit from the 'ping' command.

  • How to disable the Super User menu - (Right click windows icon menu) - Server 2012 R2 - RDS

    Greetings all,
    Can anyone please advise how to remove the Administrator / Super User menu that appears when you right click the Windows Icon (old start button) in Server 2012 R2 - for RDS users. I have searched and been able to disable access to each of these menu items (Control
    Panel, Event Viewer, Run, etc). But I am searching for a way to completely remove the menu. This menu also appears when you use Win-X shortcut.
    Hope someone can help.
    Terry

    Hi Terry,
    You can try following points, might helpful in your case. Go to 
    C:\Users\Default\AppData\Local\Microsoft\Windows 
    there you will see file called WinX 
    Right click this file and copy then go to
    C:\Users\YOUR_USERNAME\AppData\Local\Microsoft\Windows 
    then paste the file into the folder.
    NOTE: replace YOUR_USERNAME with your actual username. 
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Not able to access the Administrator Console 7001

    Dear all,
    We have installed weblogic server 11.1.2 in Aix 6.1.
    Installation faced lot of FIXER problems finally we fixed all the required fixers and installation and configuration compleated without any error.
    In the last page of Configuration summary we got the Admin consloe and Em console address.
    When i try to connect those from my system using IE it says "internet explorer cannot Display the webpage" error comes.
    While on Installation we used Humming bird for graphical installation[this is the first time am using this utlity]. And more over i do not have idea how to check about the admin server start and stop from the back end[AIX].
    Kindly help me how to access the Administrator Console after Installation
    "Administrator Console: http://emar:7001/console"
    Exepecting all expects advice and guidance.
    Regards,
    Paja

    Hi Paja,
    Please check any weblogic process are running by using.
    ps -ef | grep java
    use " *kill -9 < pid >* "
    Now under %Domain_Home%/ bin folder.
    you will find startWebLogic.sh file.
    start this one using following way.
    ./startWebLogic.sh
    Once you provide your username and password
    Check your last logging like this.
    *<Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 10.17.62.212:7001 for protocols iiop, t3, ldap, s*
    in this case 10.17.62.212 is my IP address or listen address and 7001 is my http port.
    if you enable SSL list port it will also show you that one.
    now try to access console using http://<IP address>:port/console
    provide username and password
    Here we go to start your weblogic server.
    Now in %Domain_Home%/ bin folder you will find one more .sh file says stopWebLogic.sh.
    this will help you to stop the server.
    Hope this is easy way to start and stop your server.
    Regards,
    kal

  • I forgot the administrator password for my mac and cant set a new one without it how can i set a new one

    i forgot the administrator password for my mac and cant set a new one without it how can i set a new one

    Reset Password 10.7, 10.8...
    http://reviews.cnet.com/8301-13727_7-20087723-263/how-to-run-the-password-reset- utility-in-os-x-10.7-lion/

  • How to get the Report Names which use a Folder in Discoverer Administrator?

    Hello All,
    How could I get which Reports in discoverer Desktop are using a particular folder in Discoverer Administrator?
    Or
    How to know which Discoverer Desktop Reports are being derived from a folder in Discoverer Administrator?
    We have Oracle 9i DS installed and have a Custom Folder Created in the Administrator, and want to know exactly which Reports/Workbooks are using that folder?
    Thanks in advance :)

    Well Abhijit,
    The eul workbooks have been created by oracle specifically to analyze your eul and make your work easier!. So, I prefer this way to view the information about my eul in a report format in the desktop. Try it! you may like it.
    If you want you can follow these steps:
    Run the script called eul5.sql located in <discoverer_installation_path>\discoverer\util in the user who own the eul in the database.
    Then import the eul5.eex file located at <discoverer_installation_path>\discoverer\ in the discoverer administrator.
    Then login into desktop and open the reports in the database, you can see a report called[b] EUL Workbook Management. Open that and goto the sheet named Workbook Dependency - Folders & Items Lookup. I think it the last but one worksheet in that workbook.
    Hope it helps you!

  • Trying to open Terminal I get;You are not authorised to run this application. The administrator has set your shell to an illegal value.

    Hi There Y'all,
    I have recently downloaded MacKeeper. It ran OK for a bit, but has recently stopped allowing Internet security updates and switching on of the internet protection options.
    Asked for help at MacKeeper. Their initial advice did not work, so a very nice technician was going to remotely attempt to fix the issue.
    He however needed/still needs access to Terminal, a to me unbeknown Utility feature of my MacBook pro with Mac OS X 10.6.8.
    While attempting to open Terminal the following came up
    You are not authorised to run this application.
    The administrator has set your shell to an illegal value.
    Did do a diskverify permission and repair and restart.
    Did check my admin settings in advanced options and have the /bin/bash.
    Any advice anyone.
    Thanks.
    in site out

    After finally localing private/etc/shells through Go>Go to folder and replacing the empty shells with the shells~orig I have permission again to open Terminal. Thanks. Another step.
    (Why though can't I access  /private/etc/...  through Finder's search?)
    Should work but the file or folder needs to exists to access it.  If you typed in /private/etc/shells and the file wasn't there there's no place to access.  Certainly /private/etc was there so that would have worked.
    So what will happen by inputting the lines
    ls -Fvl /bin/bash
    ls -Fvl /etc/shells
    more /etc/shells
    into Terminal?
    Basically to find out what you already seemed to find out.  The first command was to display owner, group, and permissions of  /bin/bash and to tell me whether it still existed.
    Similarly for /etc/shells.
    And the last command would have just displayed what was in /etc/shells.
    By the way /private/etc and /etc are the same folder.

  • How to Use the same iview for both KM End User and the KM Administrator

    Hi friends,
    *This is my scenario :* How to Use the same iview for both KM End User and the KM Administrator but with different Context
    Menu Options.
    i followed these steps but im getting same context menu for both KM End User and the KM Administrator .
    Assign the role Content Administrator to the user km_admin. This is needed so that km_admin can change
    the presentation settings for the KM Folder u201EReports_kmFolder‟.
    Now, login with user km_admin. Navigate to the Km Folder reports_kmFolder through Content Administration
    -> Km Content. Click on Details link of the folder reports_kmFolder.
    Go To Settings -> Presentation. Click on the tab u201ESettings for You‟-> Click on button u201ESelect Profile‟.
    Select the radio button corresponding to u201Elayout Set‟, and choose u201EConsumerExplorer‟ from the dropdown.
    Click u201EOK‟.
    Select both the check boxes corresponding to Items Affected as shown above, and click u201ESave‟
    Now, remove the u201ESuper Administrator‟ role from the user km_admin and login with this user.
    How rto resolve this????
    Regards,
    Prasad.

    Hello Prasad,
    Most likely the user km_admin still has system principal roles assigned, even though you removed the Super Admin role, you should check that this user doesn't have any other admin roles, otherwise it will be considered a System Principal user and will therefore still have access to all content. For more information see http://help.sap.com/saphelp_nw70/helpdata/en/19/56f28fbd4e11d5993b00508b6b8b11/frameset.htm
    Try creating a new user with just read access to the content and you should see that it will not be able to make any changes etc.
    Regards,
    Lorcan.

  • How do I get folders and their content to show up in the "Administrative Console"?

    We have added a few sub folders under the “webroot” folder. I did this so I could make a custom web page that generates the code need to display the video in a web page if it is one of the folders.
    My question is how do I get these folders and their content to show up in the “Administrative Console”?
    Also how do I get the videos to be logged?
    I have looked through the Server.xml and Application.xml files and the fms.ini but do not see any place, Am I not looking for the correct setting?
    Attached is a pic of the folders.
    Thanks
    Chip

    If Apache and MS do not talk to each other then where or should I be making these folders, some other location?
    Maybe under the vod folder under applications?
    Where in the “Flash Media Server” pdf would this be talked about?
    Would I edit the Application xml file?
    I am so new it hurts!
    Thank you,
    Chip

  • I am the administrator on our family computer with 3 other member logins. I have downloaded the pages app but how can my other family members also use it on the same computer?

    I am the administrator on our family computer with 3 other family member logins. I have downloaded the app for pages but how can I allow the other users access to it? I am a computer novice so i need some advice.

    If Pages and the other applicatioins installed in the Applications in the root directory they can be used by everyone. By default all programs installed by the App store are installed in the Applications folder in the root. In other words, your family members should be able to use the programs. Can they not?

  • My macbook keeps asking me to use an administrator and their password to continue but nobody seems to know who is the administrator for this computer...does anyone know how to avoid this this or figure out who the administrator is?

    My macbook keeps asking me to use an administrator and their password to continue but nobody seems to know who is the administrator for this computer...does anyone know how to avoid this this or figure out who the administrator is?

    Lynne130,
    to figure out which users have administrative privileges, open the Users & Groups pane of System Preferences; each user other than the Guest User will be shown with a description of either “Admin” or “Standard”. It’s typical for the first user created on a Mac to be an administrative user.

Maybe you are looking for

  • Ring on/notifications off

    Hi.  With the Xperia Z1, do you know if there is a way to (quickly) have my notifications turned off eg. SMS and email notifications,  but still have my phone able to ring? At night I need to have it on in case of calls due to a work situation, but d

  • Ipad 2 no longer working due to ios7

    My first post got removed by Apple Police. It appears apple do not allow anyone to revert to ios 6 at the moment, are there any plans to change this or updates coming to fix the slow running, slow charging and other issues. While you will appreciate

  • Setting the default display (monitor)

    I use my TV as my second monitor to stream Netflix. If I'm watching something in a separate window and close out/shut down for the night FF will default to the TV instead of the active monitor (I don't keep the TV on all the time). This happens even

  • How do you set up eprint to work on Laserjet P3005dn

    I cannot find the list of supported printers for eprint.  Is Laserjet P3005dn supported? if so how do you set it up? This question was solved. View Solution.

  • Submit Pdf form to http w/ credentials (username/password)

    Hi! I developed a form in Adobe LiveCycle, it has a button which submits form with attachments to http site. No coding involved, just configuration of the button. Http site requires credentials (username/password). How do I pass those credentials wit