How to mitigate control at User levels

Hello Friends,
Can anyone send me step by step process documentation on how to mitigating control at user levels? I have already run the risk analysis ( Global Conflict roles analysis/risk analysis). So I do have all detail information like control ID , management approver and description,etc.
It will be highly appreciated on any guidence on this.
Regards,
Suvi

Hi,
Please follow the below steps to mitigate user.
1. once you get the all details ( Mitigation control id, approver id and Monitor id), then select/click on the RAR Mitigation tab-> click on the Mitigated User option->search.
There is one page is open and then click on ADD button at the bottom of the screen. once you click on add option it will ask the Mitigation control id, user id, Risk id etc... once filled the all required filelds and save. Now successfully applied the moitihation control to the particler user.
Regrads,
Arjuna.

Similar Messages

Output Control at User level

Hi ,
I have a requirement. Is that in the Output Determination can we control the specific ouput type for user specific.
I,e In billing output for output type "RD00" for the print medium 1, i need to control at user level. One user should be able to generate this output & the other user should not.
Please give me suggestion on the above. This should be only controlled through configurations but not through any Z Programs.
Points Rewarded.
Regards,
Chakri M

Dear Chakri,
As you mentioned that one user should have access for Output but the other should not have the same.
Please contact your basis or security team to give the access to the person whom you want authorisation for Output and check the other user whether he is having access to Output generation, If he have authorisation ask Basis team to deactive his authorisation.
If you have any concern revert back the same to me
Amjad

How do you Control SPDIF input levels in Logic Pro using Apogee Ensemble

Hello,
Question. I have an Apogee Ensemble audio interface hooked up to my Macbook Pro. I have a Motif XS8 that I record audio from through SPDIF.
I am able to get sound through to my audio track once setting the inputs in Logic, however the levels are not even close to halfway. I can not figure out how to fix adjust the SPDIF level to make it hotter b/c I know once I add virtual tracks and vocals through my preamp, the audio from my motif will likely not be hearable.
Please let me know.
Also, when I record an audio track is says about 15 minutes remaining to record. Does that mean I have 15 mins of audio for each track or for all my recording period???

Not owning an Apogee Ensemble, maybe someone else who does has more definitive info can jump in, but do not confuse the lower level of the SPDIF input with "lesser quality". It's a digital connection, with no analog conversion.
-18 dBFS on a digital scale is the same as 0dB on an analog scale.
I think what you're experiencing, is the fact that so many people think they need to get the meters in Logic closer to 0dB, which is actually NOT what you want (when staying ITB). This thinking is left over from the days of analogue recording, or the early days of 16 bit digital recording.
Turn your other sources in Logic down, and you'll reap the benefits of not overloading the 2 buss, allowing the plug-ins to do their computations without distorting, etc... Then you can bring the over all level of your mix back up, in mastering.
If the Motif is considerably lower in volume than that, you could always insert a gainer plug-in on the audio track.
As to the 15 minutes, that is what Logic has pre-allocated for recording to your hard drive. It "re-sets" each time you go into record, so it's not saying "you only have 15 minutes of record time available". It's saying, "you have 15 minutes of hard disk space allocated each time you go into record, based on your sample rate and bit depth settings". This can be changed in the Audio pathway, but it's recommended to leave this number as low as possible/necessary, to avoid disk fragmentation.

How to assign profiles at user level ?

hello every body.....i have created 2 users say x , y
and i have assigned them general ledger responsibilty.....
.at site level profile Gl set of books name is vision operation..
.now i have assigned Gl set of books profile to user x at user level
as vision china...and to user y as vision germany.....when i login with
different user name with gl responsibilty ......after navigating
to----journal-->enter--->new journal----for both users iam getting the
same currency which is at sit level...i thought for x user the currency
will be china currency
and for y user it will be germany curreny which i hav assigned at user level....
please help me regarding this.......
thanks and regars
imran

Hi,
i have assigned it at user level then why iam i
getting the currency code of site level ?Did you user to logout and login again after setting the profile option at the user level?
What if you set this profile option at the site/application/responsibility level, can you reproduce the issue then?
Thanks,
Hussein

WIP Job Status Control at User Level

Hi All,
I need to give the user just the control of releasing the Job(Work Orders). Right now he has got OnHold/Cancelled also. What i have observed is after certain operations he has cancelled the job and it has incurred the cost. I looked at the lookup code but it has defined at the System level.
Could any one please help me on this, Need to do this ASAP.
Regard

Not out of box, try personalization or look into AME maybe.

How to forbid command field at user level?

Does anyone know how can i forbid at user level the command field?
Thanks
M.

Hi marco,
1. In normal SAPGUI,
   there is some REGISTRY Value, (when gui installation is done)
2. If that setting/value in registry is changed,
   then the command field won't come.
3. For PORTALS,
    the setting is done in the ICF/Service parameter
   ~NOHEADEROKCODE=1
(By doing this, it will come in SAP GUI,
but won't come if we access r/3 from portal/internet explorer)
regards,
amit m.

Can we control the top level navigation in portal from a java application

Hello,
I am having a scenario where User logged in to portal and assigned with 2 roles (HOME , ISA(Java application)). When user opened a form in ISA (Java application) and tried to enter the data in form and moved to another tab (e.g. HOME) in top level navigation.
When user come back to ISA (Java application) TAB , we show the page where he left earlier. I would like to know if user click any other TAB in top level navigation (Role assigned to him) while working on a page in ISA(Java application) is there any way we can catch that event before he leaves from ISA (Java application JSP page) to other TAB?
How can we control the top level navigation events in the portal from a java application .Since Top level navigation is seperate par file.
Thanks,
RN

Dear Rajesh,
Top Level and detailed navigation values comes with iteration in the respective par file.
Please check the par file and based on the value (i.e tab name) selected, you can write your code.
Best Regards
Arun Jaiswal

BPC 10.0 - How can I control security at Environment level?

Dear All,
How can I control environment level security in BPC?
i.e.
User1 can work on only ENV01
User2 can work on only ENV02 & ENV03
etc...
I believe this has to be done at BW level, right? If so, how can I do that in BW? Else, how can I achieve this?
Thanks,
Peri

Hi Peri,
yes, the admin panel is within the environment. So when you add users you add them to that specific environment. You can then log onto another environment and add a different set of users.
Those users you wand to add need specific SAP role in the BW so you can see them in the first place.
BR,
Arnold

How to create a profile value at user level programatically

Dear all,
I want to create a profile value at user level programatically, I refer to the developer guide and try to use fnd_profile.put() to create a new value.
But I find out the value is just created in session level, not be inserted into base table.
So is there anyone know how to realize this function in PL/SQL?
Any idea is appreciated.
Best Regards,
Kenny

Check Note: 364503.1 - How to Set a System Profile Value Without Logging in to the Applications
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=364503.1

How to hide the columns at the end user level thru personalization

Hi all
how I can hide the columns that are displayed on the portal. Any personalize option for the end user? Any righ click or some thing?
I am looking at hiding columns not while developing the iViews / Pages, But in the browsers as the end user.
i can hide the columns what ever i want while creating the iViews for MDM data. but we cant provide the content administrator role to the end user for hiding the columns what ever they want. they want to hide the columns thru pesonalization option at the end user level.
Can you please let me know whether we can able to hide the columns at the end user level thru personalization ?? is it posible with standard iViews??
Regards
Sunil

Hi Sunil,
I understood your requirement properly and seems valid and I tried this at my end but i didnt get the solution. Field list is not visible in Personalize option. I dont think it is possible with MDM standard iViews.
I was thinking an alternative is if some how we manage to give the permissions to end user only on Result Set iView but if it would be possible it will not be a good design.
Lets wait for some inputs from others.
Regards,
Jitesh Talreja

How to setup User-level LaunchDaemons and scp/rsync

We are trying to rsync/scp scripts from a Xserve 10.6 (just installed) to an Xserve 10.4, both of which which run scientific models, and transfer output files between systems automatically. These scripts must start automatically on reboot. This is easily done via cron jobs on our older Xserves.
Taking the plunge into converting cron jobs to launchd jobs has, for the most part, gone relatively smoothly. However, I am unable to locate instructions/examples on how to do the following:
While it is possible to set up a LaunchDaemon *.plist on a System(root) level by placing it in /Library/LaunchDaemons, it is unable to do an scp or rsync (without needing the password), because it does not have a root id_dsa.pub installed on the remote Xserve (I really do not want to do that!). An scp/rsync job should be done at the user level.
According to the man pages, there is no such thing as a ~user/Library/LaunchDaemons, only ~user/Library/LaunchAgents, which if I understand correctly, are only executed when the user logs in.
So how do I permit user-level scp/rsync operations (easily done in cron) using launchd?

Thank you for your comment and suggestion. I will give your suggestion a try. However, it seems the question is still open:
If a user wants to write a program/script that does an scp/rsync that transfers a file from one host to another (assuming the .ssh keys are properly set up), and put it into a launchd process that executes like it would under a cron (i.e., they do not need to be logged in, and it persists after a reboot), how is this accomplished without using the root-level /Library/LaunchDaemon?
Am I miss-informed that a users LaunchAgents are executed only when the user logs in?
At least in the scientific arena, using a cron to transfer files is a very regular practice. It would be a major headache if the system administrator had to manually add each users launchd files to /Library/LaunchDaemon

How can we do personalization at User Level

Hi ,
I have extended a controller .
and I have to replace the seeded controller to extended controller using personalization at User Level.
Can any one suggest how can we do personalization at user level.
Regards,
Krishna.

Hi,
If you have extended controller then why don't you use profile option for restricting at user level.
In controller use as following :
processRequest(...)
super.processRequest(...);
String userProfile = pageContect.getProfile("Profile option name");
if(null!= userProfile && !"".equalsIgnoreCase(userProfile.trim()) && "userRestriction".equals(userProfile.trim()))
//do your changes
follow same in processFormRequest as well.
Once it is done...replace you controller at site level. It will only work for the users for whom the profile option is set.
Regards,
Mukesh Uchaniya

Controlling Task expiry at User Level programatically

Hi to all BPEL Guru's. Need some expert advice.
I am using Oracle SOA Suite 10.1.3.4 on weblogic server 9.2
The requirement given to me says that,
- Number of approvers for a task may vary on case to case bases, and needs to be pushed in the workflow as a set of parameters.
- Every user may have a different SLA to act on a given task.
To satisfy the first requirement my first approach was to use Sequential Approver Participant Type and push a comma seperated approver list to the workflow. But the issue with this approach is, associating a different expiry date to every user would be a big deal. And even if I find a way to get the associated expiry date, I would not be able to set it on user level, as the 'By Expression' is supported only at Global Expiration and Escalation Policy level and not at the Participant type level. Does anything click in your mind as a workaround to this? Appreciate your help. One workaround I can think about is to get handle of 'OnUpdated' callback and change the Global Expiration and Escalation policy everyime the task is updated.
The second approach was to have a defined set of 'Single Approver' participant types (i.e. Multiple Single Approvers)under 'Assignment and Routing Policy'. Here the dynamicity of number of approvers is lost. So I will have to design multiple workflows with a selected set of approvers. The workflow submitter can select the appropriate workflow and submit it. In this approach I can atleast associate an expiry date with a user in the incoming payload and assign to the single approver.
Not sure how to get out of it.
Any help is highly appreciated.
Many Thanks,
Vikas

Check Note: 364503.1 - How to Set a System Profile Value Without Logging in to the Applications
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=364503.1

How to refresh user level schema in apps

Guys.
how to refresh user level schema in oracle apps, My DB is 10g and apps version is 11.5.10.2 and OS: HP UX, Can any one give me some detail explanation.
Thanks

I would recommend Datapump over Export/Import because it is faster and allows you to restart the job in case it failed.
In addition to Export/Import/Datapump, you can use Transportable Tablespaces with RMAN.
Creating Transportable Tablespace Sets from Backup with RMAN
http://download.oracle.com/docs/cd/B19306_01/backup.102/b14191/ontbltrn.htm#CACDBIHC
Note: 371556.1 - How move tablespaces across platforms using Transportable Tablespaces with RMAN
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=371556.1

How can we enable the trace at schema / user level

Hi ,
I knew how to enable the trace at session level and system level.
How can we enable trace at schema / user level.
Thanks
Naveen

I still don't understand.
As far as I know, 'trace' means 'to emit information about a subset of the steps being taken through code, generally to profile timing or identify code paths'.
As far as I know, a user and a schema are passive. There is absolutely no code 'running' against a user or a schema. I have no idea what could be 'traced' for a user or schema that is not already available in the data dictionary.
Further, a schema is nothing other than a named set of database objects. The name happens to be tied to a specific userid. So a schema could be considered a special kind of userid - although that is technically incorrect.
A session, on the other hand, is active. There is code running, there is memory assigned. It happens to link to the connection established by a user, using a specific userid.
I think you have told us you know how to turn on tracing for a session.
Why can you not turn on the traciong for all the sessions for a userid?

How to mitigate control at User levels

Similar Messages

Maybe you are looking for