How to move users, groups and access rights to new envronment

Hi,
I have existing 9.3.1 shared services, I created new environment with 9.3.3 .
Can some one suggesting me how move the existing 9.3.1 users to another server where it has 9.3.3 shared services.
is there any way move all at a time with some migration or we need to create manually?
thanks,
sudhakar

You can use the cssimportexport utility.
Even though this link is for 11.1.1.3 and states that its only for native users, you can in fact use the utility to migrate the provisioning of users both native and external: http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_security/ch09s08.html
FWIW, I prefer the .csv format because its ease of reading and editing.
Regards,
Cameron Lackpour
P.S. The format is really confusing -- use the export functionality to show you what the format needs to be if you change anything (and I think that at least some of the names of the apps/projects you will have in 9.3.3 will be a little different).
P.P.S. I would imagine there's an upgrade path but that's beyond my expertise.
Edited by: CL on Mar 30, 2011 7:55 AM
I wish OTN had an alert system that indicated when JG was posting on the same subject. I would save my energy as I never get the answer out as fast. :)

Similar Messages

How to manageimported users, groups, and computers in the "Magic Triangle"

How do I manage imported users, groups, and computers? Server Preferences versus Workgroup Manager? I can import users and groups with the former but it offers limited configurable options. I can view all users. groups. and computers (from active directory) in the latter, but it does not designate which accounts have been imported.
I've got a magic triangle setup, with my users, groups and computers in Windows Active Directory, and my MacOS X snow leopard server setup as a directory master, abd bound to AD as well. I wish to apply group policy like settings to my Mac OS X leopard and snow leopard clients.
Here's a summary of my goals:
1. Time Machine Storage for mac users when they logon to Mac OS X computers.
2. Automount group shares located on the Mac OS X Server.
3. Redirect user desktop and document folders to user shares either on the Mac OS X server or my Windows file server.
4. Automount a custom folder (for each user) located either on the Mac OS X server or my Windows file server.
5. Setup Mac OS X server as a printer server with quotas for all mac and windows computer users.
Goal #1 appears to be working. "need help with the rest. Thanks

I'm not sure you want to import users to use the magic triangle properly. I think importing creates 'Augmented Records' - the user icons have blue dots.
The principle is this…
Bind the server to Active Directory (AD) & create an Open Directory master (OD). This can be done from Server Admin, in the OD section, via the change button.
Then you use Workgroup Manager, set the viewing directory (tiny little globe in top left) to use LDAP records on the server - LDAPv3/127.0.0.1. Authenticate (lock on right of toolbar) add a group, then switch to to its Members tab, click + Then change the user list to show the AD records & add the AD users to the OD group. It sounds weird & wrong, but it is how it works.
You are never modifying the AD records, just assigning a group to the users in OD. It's why the clients need to bind to AD & OD.
From there you can set the Managed prefs (MCX) for the members of the OD group. It also helps to add a guest computer account to OD to assign computer prefs based on the macs that bind to the server - it's in the File menu when you select the computes list in OD.
I hope that's clear, not sure I can help with the other tasks, but they tend to fall into place once you have the complex start in place.

How to create users ,groups and workflow in batch?

I have to create 100 groups for each course,and each course has a admin user.Each group has some workflows .These workflow can only be viewed by some users.
Can i import user name and password from a .txt file and do the work automatically?
It is a hard work if i do it manually.

I'm not sure you want to import users to use the magic triangle properly. I think importing creates 'Augmented Records' - the user icons have blue dots.
The principle is this…
Bind the server to Active Directory (AD) & create an Open Directory master (OD). This can be done from Server Admin, in the OD section, via the change button.
Then you use Workgroup Manager, set the viewing directory (tiny little globe in top left) to use LDAP records on the server - LDAPv3/127.0.0.1. Authenticate (lock on right of toolbar) add a group, then switch to to its Members tab, click + Then change the user list to show the AD records & add the AD users to the OD group. It sounds weird & wrong, but it is how it works.
You are never modifying the AD records, just assigning a group to the users in OD. It's why the clients need to bind to AD & OD.
From there you can set the Managed prefs (MCX) for the members of the OD group. It also helps to add a guest computer account to OD to assign computer prefs based on the macs that bind to the server - it's in the File menu when you select the computes list in OD.
I hope that's clear, not sure I can help with the other tasks, but they tend to fall into place once you have the complex start in place.

How can multiple users edit and access same ACCESS file

Hello,
We have 2 access files and multiple users needs to edit and access those files.
How can I enable mulitple access but only one user can edit rest of users are in read-only mode for one file and multiple access and edit on the another file.

Hi,
You should split your database in a front and backend. Then create two seperate front ends which you can distribute. If you need readonly you can opt for two options, setting the attributes of the file to read only or create a front end with read only forms.
The last one takes a little more work but is safer than setting the attributes to read only because people can change that back themselfs.
Maurice

Query user roles and access

hi,
How can query user roles and access in whole database? I want to list username, status, rights, and role
thanks
P

Hi,
The data dictionary view dba_users has one row per user.
The data dictionary view dab_role_privs has one row for every distinct combination of user and role that actually occurs ion your database,
Are you interested in system privileges? See dba_sys_privs.
Are you interested in individual grants, like the privilege to UPDATE a given table, or the privilege to execute a given stored procedure? See dba_tab_privs. (Don't be fooled by the name; it's not just for tables.)
I hope this answers your question.
If not, post some CREATE statements, that create tables, roles, and whatever else you want, and some GRANT statmeents that grant privileges on those objects. Pos the results that you would want to get from those objects and grants.

Win 8.1 domain workstation. Block all access, except for a fews users/groups and domain controller information/date.

Hi!
Win 8.1 pro, domain workstation. How Block all access, except for a fews users/groups and domain controller information/date.
Nuance:
From domain AD is locked Workstation Firewall "Domain profile" edit.
Possible?
cenubit

Hi GirtsR,
I am not sure the command to use the SID to accomplish what you want to achieve, if you only know the SID, you could take use Powershell to find the related information, more information, please check:
Working with SIDs
And a similar thread for reference:
How to find user/group known only SID
More reference: Default local groups.
Best regards
Michael Shao
TechNet Community Support

Is there a way to move a group of tabs to a new window? I know how to move one tab to a new window, but is there a way to mark a group of tabs and move them to a new window?

Is there a way to move a group of tabs to a new window? I know how to move one tab to a new window, but is there a way to mark a group of tabs and move them to a new window?

* Tab Mix Plus: https://addons.mozilla.org/firefox/addon/tab-mix-plus/

Not able to restrict user groups from accessing certain entities

We have created user groups and are trying to give them restricted access to certain entities so that they can perform consolidations only for those entities. But even after creating Security Classes (and assigning them to the entities in the metadata) and assigning [Default] security class access as Read Only, the users are still able to access and consolidate all the entities using process control.
Can anyone please let me know how to restrict consolidation to only certain entities?

To solve this you need the following information:
-- What roles do the users have? Anyone with the Administrator role has full access to all classes.
-- Examine the groups. If any users are members of a group which has more access than the users have as individuals, they get the greater access level. You can generate a report which shows all roles for all users including the derived roles.
-- Examine your metadata. Do the entities in question have the classes you intend? If you omit a class (the field has been left blank), HFM treats it like the [Default] class.
With this information we could help you troubleshoot the issue.
--Chris

How to create user groups in SAP

Hello Gurus,
Can anyone let me know how to create user groups in SAP-HR Module and who will be creating the user groups.
plz provide me the steps.

Hi Stephanie,
IMG --> Personnel Mgmt --> Personnel Administration --> Basic Setting s --> Maintain User Parameters
Please refer the below links:
http://scn.sap.com/thread/1653026
http://scn.sap.com/thread/1682721
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/10eab7af-0e54-2c10-28a5-87b47adbe1a5?QuickLink=index&overridelayout=true&44478681629499
Thanks,
Madhav.

SAP Query, user groups, revoking 'change' rights

Hi,
I have a problem regarding SAP Queries and revoking the change rights. This is what I have done:
1. Created the new user group in SQ03
2. Created the new InfoSet (SQ02), assigned it to the above UG (SQ03)
3. Created the new user, assigned it to the UG in SQ03 and removed the Change checkbox (revoke change rights)
4. Logged on as the new user
5. Started SQ01, switched user group to the new one
6. Created the new SAP query based on the new InfoSet, run the query
As I understand the principles of user groups and queries, I wasn't supposed to be allowed to do the step 6 as the new user, as it was revoked the change rights. Why wasn't I stopped?
I searched for reply in previous posts - everybody agrees on principles, but I didn't find explanation on why it doesn't work.
Thanks in advance!
KR,
Igor

The table AQGDBBN seems to display a mapping of User Group with use rindeed but the results are less than the actual assignment. And the mapping does not have the Z query usergroups that have users assigned in SQ03.
Anything that I may be missing?
Thanks,
Kashif

How to create user groups in portal

Hi
I am new to portal..can any one explain how to create a group and add the users to that group.
Thanks
Rahul

Hi
Go to "user administration"-> Identitiy management place "Groups" in the Search Criteria then you will see the options for creating NEw Group
at the time of Group creation there is a tab for Assigned users from there you can add users.
Or you select the user name and click on modify and select Assigned groups and assign your group.
Regards,
Mahesh

User management and Access Control in HCM Cloud

Hello,
Information is scarce about User management and Access Control in Oracle Cloud generally. Today, I have two questions :
- How can I bridge HCM Cloud user store with my on-premise IDM or security repository in order to allow identty governance to flow to HCM Cloud service ?
The only information I got was that you can declare manually and by bulk import through files my users. This is not really interresting as I have an automatic IDM with workflows and identity control on provisioning and de-provisioning.
Is there a SPML or proprietary endpoint to do it automatically ? What are the prerequisites ? Do I have to implement OIM on my side ?
- Once my users are created, how can I do webSSO from my internal security repositories to the HCM Cloud service ?
I do not want to distribute new set of login / passwords to my users. Is it possible to do Identity Federation (SAML 2.0 or WS-Fed) with HCM Cloud service ? What are the prerequisites ? Do I have to implement OAM on my side ?
I accept all pieces of information you can give me on this topic to help me understand the funcitonalites, limits and options offered by Oracle Cloud and more precisely by HCM Cloud service.
Best regards,

OIDDAS has limited capability of access control and information hiding. Presently, the permissions and privileges can be set at a realm level, and fine grained access control / information hiding cannot be done.
At present, the only way to restrict view and access control is by appplying ACLs (which is not the safest bet).

How to migrate the userwise organization access rights info from 11i to R12

Dear All,
Is there a way to migrate the user-wise organization access rights information from 11i to R12 ? Does this falls under DBA purview ?

I assume you are talking about Organization Access (in Inventory). As far as I know, there is no api for this. You can consider using a key-mapping software such as Data loader / winparrot.
OR
you can write your own script to insert records into the org_access table. It should be a straight forward insert. You just need to ensure that the combination of organization_id, responsibility_id and resp_application_id is valid.
Hope this helps
Sandeep Gandhi
Independent Consultant

What is difference between user group and reference user group?

hi
guys,
what is difference between user group and reference user group?
your regards
p.suresh

Hi ,
Chk the link below for your clarifiacation.
http://help.sap.com/erp2005_ehp_03/helpdata/EN/5c/c1c81c445f11d189f00000e81ddfac/frameset.htm
Hope it helps.
Regards,
Amit
Edited by: Amit Kotwani on Sep 2, 2008 2:15 PM

HT4527 I am trying to move my library and playlists to a new computer by burning to CD's. However, I followed the directions by going to File and then Library - then they said to go to burn CD(s) - I DO NOT have that option for some reason. How do I do th

I am trying to move my library and playlists to a new computer by burning to CD's. However, I followed the directions by going to File and then Library - then they said to go to burn CD(s) - I DO NOT have that option for some reason. How do I do this? I have done the library sharing thing but I am getting rid of my primary computer and am afraid I will lose the library.

To move an iPhoto Library to a new machine:
Link the two Macs together: there are several ways to do this: Wireless Network,Firewire Target Disk Mode, Ethernet, or even just copy the Library to an external HD and then on to the new machine...
But however you do choose to link the two machines...
Simply copy the iPhoto Library from the Pictures Folder on the old Machine to the Pictures Folder on the new Machine.
Then hold down the option (or alt) key key and launch iPhoto. From the resulting menu select 'Choose Library'
and select the Library that you moved. That's it.
This moves photos, events, albums, books, keywords, slideshows and everything else.
Your first option didn't work because you imported one Library to another. Every version and thumbnail is imported like a distinct photo, you lose all your Albums, Keywords etc., the link between Original and Previews is destroyed, the non-destructive editing feature is ruined and so on. In summary: it's mess.
Your second option didn't work because you simply referenced her library on the old machine.
Regards
TD

How to move users, groups and access rights to new envronment

Similar Messages

Maybe you are looking for