How to prevent certain users to see only certain resource objects

Hello OIM Experts,
How to prevent certain users to see only resource objects request-able based on their user profile
Employees :
Employee A: Finance staff
Employee B: IT staff
Resource Objects :
Resource Object 1 : Oracle E business suite
Resource Object 2 : Payment Gateway
Resource Object 3 : Server X
Resource Object 4 - 10 : Customer Service Applications.
Expected :
Employee A only see and able to request Resource Object 1 & Resource Object 2, while employee B only see and able to request Resource Object 3.
And they are not able to see and request Resource Object 4 - 10.
Can that be done, if so please suggest some ways, appreciate the help.
Regards,

Hey, you can do this through Organizations. Follow the following steps:
1) Create an Organization say 'Finance Staff' and put all the users for this category in this organization.
2) In the similar fashion create another Organization say 'IT staff' and put all the users for this category in this organization.
3) Now open Organization details for above two and select the 'Permitted Resources' drop down frm additional details.
4) Assign the resources as per your requirements for these two oragnizations.
Finance Staff -> 'Permitted Resources' -> 'Oracle E business suite' and 'Payment Gateway'
IT Staff -> 'Permitted Resources' -> 'Server X' and '10 : Customer Service Applications'
5) Also remember to de-select the 'Allow All' check box in the respective resources above to discourage everyone from requesting and making a decision for allowing the user to create requests through organizations.
You are done.
regards
Sunny
Edited by: rajsunny on Oct 13, 2009 11:27 PM

Similar Messages

How to restrict the user to enter only numeric values in a input field

How to restrict the user to enter only numeric values in a input field.
For example,
i have an input field in that i would like to enter
only numeric values. no special characters,alphabets .
reply ASAP

Hi Venuthurupalli,
As valery has said once you select the value to be of type integer,once you perform an action it will be validated and error message that non numeric characters are there will be shown. If you want to set additional constraints like max value, min value etc you can use simple types for it.
On the project structure on left hand side under local dictionary ->datatypes->simple types create a simple type of type integer
The attribute which you are binding to value property ;make its type as simple type which you made
Hope this helps you
Regards
Rohit

Get every user to see ONLY its own created variants

Our system is being accessed by different users.
When executing reports, users save their own variants into the system. However, we would like to restrict the access from all users to all saved variants. The goal is to get every user to see ONLY its own created variants.
I believe there is an user-exit that combined with some access controls can provide us with this functionality. Do you know if it is possible? and if the user-exit really exists?. Do you know the user-exit name?.
Thank you in advance.

Oscar
If there is a user exit, you would have to apply this to all of the reports and programs.
This is probably a bigger task than getting the users to change their variants to a single entry.

How to prevent the user to submit leave request?

Hi all,
If the employee has wrong setup in the AME approval,the error "ERROR: An Invalid Setup has been detected for the current Transaction Type in Approvals" will be raised, although the employee will be able to submit the request, the request will have pending for approval status.
How to prevent the user to submit the request when the error raised?
Any idea.
Regards

Hi,
Is this possible? Pl check the error and your Transaction type. Refer ID 420381.1(How to Create the Approval Transaction Type for AME.A?) and also refer Oracle White paper on
"Approvals Management Responsibilities and Setups in AME.B".
Hope this helps.
Regards,
Siva

Anyway to restrict users to see only the Materials belonging to that partic

Hi All,
Is there anyway to restrict the users to see only the Materials belonging to that particular plant.
Generally, User can see all the Materials(Materilas extended to all the Plants).
We had a requirement that the User should not see Materials extended to all the Plants.
He should be able to see only the Materials extended to that particular plant user belongs to.
Our system is EBP 3.O
Thanks
Sunil.

Hi Sunil,
You may have to modify the search help to restrict the O/P list for services product category.
At one of our early implementations,for the product search in the link "Internal Goods/Services,we modified the search help "BBPH_PRODUCT".We attached a custom function module exit to this search help in which the logic was written for retrieving the products based on plant .May be you can think of something similar.
HTH.
BR,
Deepti.

How to prevent certain Users from deleting a resource while in the project?

We are currently using P6.2 client; We are setting up a new resource dictionary and have been searching to find a way to prevent certain users from deleting resources while in the project. Is there a way to do that? I have created Global profiles and Project profiles under the Admin security profile and have tried clicking off of rights to delete a resource but when I log into as that user I can still delete the resource. Please Help!

Are you talking about preventing users from deleting resource assignments within a project? Or preventing them from deleting resources from the global resource dictionary?
For global resource dictionary in Global Profile you would turn off:
-Delete Resources
And likely:
-Add resources
-Edit Resources
-Edit Roles
-Edit Resource Calendars
For resource assignments on activities in Project Profiles you would turn off:
-Add/Edit Project Activities Except Relationship
Note: this will disable more then just the ability to alter resource assignments.

How to prevent multiple users from updating the same data in coherence

Hi,
I have a Java Web Application and for data cache am using coherence 3.5. The same data maybe shared by multiple users which maybe in hundreds. Now how do I prevent multiple users from updating the same data in coherence i.e. is there something in coherence that will only allow one user a time to update. If one user is in a process of updating a data in coherence and some other user also tries to update then the second user should get an error.
Thanks

I have a question on the same line. How can I restrict someone from updating a cache value when I a process is already working on it. I tried locking the cache key but it does not stop other process to update it , it only does not allow other process to get lock on it.

How to stop grouped users from seeing all users?

I have several users organized into groups, and would like to make is so that users can't see people outside of their group (or groups). No matter how I tweak permissions, all users get to see every other user no matter what group they're in.
That is unacceptable and makes Server pretty useless when we need to protect the ID of our users. How can I make it so that users see only the other users in their group?
Thanks in advance!

Replying to my own query as it may help other noobsters.
I've been able to control which users and groups can see a project by using the following schema:
Create Project Wikis by creating a group with the project name, giving the group a shared folder and creating a group Wiki. Edit Access to Services and check only those services needed by the project. For example, check File Sharing and FTP for Wiki and FTP service.
Create People categories by creating a group with the name of that group of people. For example, you could organize people by firm or department or staff category. Do not create a shared folder or group Wiki. Edit Access to Services and uncheck all services. The people groups will acquire the services and permissions they need from the Projects they join as members.
Create users and require them to log in. Make sure "administer this computer" is unchecked and the Home Folder: drop down reads "None - Services Only." Edit Access to Services and uncheck all services. Users will acquire the services and permissions they need from the Groups they join as members.
Now, add users to the people groups as appropriate. For example, add all engineers to the Engineers Group. Next add people groups to project groups as appropriate. For example, the Engineers Group may be added to the Bridge Project Group as well as the Building Project Group.
Once you have users in your groups of people and groups of people in your project groups you can start the Wiki then point to it with your favorite browser. Sign in with the same username you used to create the Wikis. Select a Project Wiki then click on the gear in the upper right corner. Choose "Wiki Settings..." from the drop down menu.
In the Wiki Settings dialog that appears, click on "Permissions" in the left pane. Enter the name of the Project (Group) then set its permissions to "Read &Write." Change the permissions for "All logged in users" and "All unauthorized users" to "None." Save changes.
Now sign in as a user with limited permissions and verify that they can see only those wikis they're supposed to see.
On the FTP side, they'll be able to see all group folders but they can only open those they have access to. Not great, but better than a kick in the head.

How to prevent end user to create a Query View and save back to BW Server?

Dear All :
Do Someone know that how to setup authorization for Bex Query View Creation? We want to prevent end user to create a Query View to save back to BW Server his favorite folder. when our user run Bex Query, he can base on this query and use Bex Analyzer's save function to save a Query View and save into his favorite folder.
My question is :
1. Can we set up a Authorization to prevent end user to save Bex Query View?
2. Or can I remove Save function from Bex Analyzer to prevent end user use save function, But Developer should not to be prevent .
Thanks for all of your kindly response.
Best Regard
Lawrence Kuo

Hi.
Yes, you can do it like you outline in your point 1):
You need to use the authorization object S_RS_COMP for this. This object let's you control what parts/components of a query the user can do stuff to. So, in your case, you need to have a role for the users, where you do not grant create-access to the component QVW, and then you need another role for developers, where you grant full access or whatever you need for your developers.
See [this post|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a6c54319-0e01-0010-20a4-fb81ad32f330?QuickLink=events&overridelayout=true&5003637661135] and the [SAP Help entry|http://help.sap.com/saphelp_nw70/helpdata/en/80/1a6859e07211d2acb80000e829fbfe/content.htm].
You will also need to use the authorization object S_RS_COMP1. If you already have a productive system with users doing reporting, both objects will be maintained in one of the roles already.
You also want to consider using the object S_RS_PARAM to allow users to create variants for the variabel screen.
Good luck.
Jacob

How to prevent the User from loading more than one seq file?

Hi,
I would like to prevent the tester operator from loading more than one test sequence. Any ideas how to do it?
Thanks
Rafi

Hi Marty,
Marty_H wrote:
Hello mhousel,
Testexec.exe by default loads the sequence files that were last open when it runs. It is often desired behavior to have multiple sequence files load automatically.
[Mark Housel] Maybe for some but certainly not for me.
This should be easily handled by TestStand without any problems. What do you mean by "chaos ensues"?
Certainly Teststand doesn't care a bit how many sequences are open. But, when my sequences open they initialize HW of the ATE associated with
that sequence file during the sequenceFileLoad callback. e.g. I allocate TELNET handles to a terminal
server that connects to multiple console within the system and als for
the UUT.
If a second sequence opens it knows nothing about the other sequence and again tries to open a TELENT session to the same port of the
terminal server and obviously fails, so my sequence reports that it
can't properly initialize the ATE HW. Bad juju!
Are your sequence files set to run automatically when they are loaded?
I guess so. Other than the trick of logging in as the special noExecution user and having special code in my sequence and modified Process Model I have no idea how to prevent a sequence fronm "runnin" when opened.
If you want to prevent Testexec.exe from loading multiple files, you should be able to close out one of the open files when it loads and that sequence file should not load in the future. I hope that helps.
The trick I read somewhere else of modifying the Testexec.uir file to never re-load a sequence file automatically seemes to have covered up solved the problem.
Thanks,
Mark

How to prevent other users to send mails from SAP?

Hi,
Our test system is a copy of the prod. We could not deactivate the mail job because it is also used by solution manager. So how can we prevent other users to send mails from SAP?
thanks,
krbas

Hi K Bas,
Then I will suggest trying this option out. In SCOT select the node for SMTP (depending on if you are using standard SAP node). Double click and a push button will come Now in the pop you will have option for Internet with a push button SET besides. Please go there. In the next screen you will find a filed for Address area. Now in this field give the value as *.sap.com
Using address area you can decide to which e-mail addresses is the mail sent to. Since the OSS message will go to <abc>@sap.com that is why I have suggested to use *.sap.com
I mean if you want that mails should be sent via SAP only yahoo mail accounts then you will give value as *.yahoo.com only. Same thing needs to be applied for SAP.
Try this out and let me know.
Please award points if solved.
Regards.
Ruchit.

How to prevent a user from entering characters into a number field

How do you prevent a user from entering characters like A or B into a field that is defined as a numeric field?
Please note that
- we use block validation (for other reasons)
- we are not able to convert these numeric fields to character fields
We want to avoid a user being hasseled with the FRM-40209 ... message.
This message is
- not very helpfull because it does not inform us what the problem field is
- not suppressable
Any hints ?

I went back to the drawing board on this one.
You are absolutely right : the message can be catched !
By writing an on-error trigger you can check for the error number. Sadly enough my first attempt on this used the on-message trigger which never fired hence my desperation.
Anyway, the on-error trigger in combination with :SYSTEM.CURRENT_ITEM or :SYSTEM.TRIGGER_ITEM enables me to display a more meaningfull message to my users.
Thanks for the hint.

How to prevent public users from creating and saving Word Documents

I have two public computers available for the public to view legal case documents. The program used uses the Word shell to save, view and print documents within the program. The clerk has stated that she does not want attorneys or others to
be able to create and save word documents on these computers. Is there a way to prevent a user on the public computers from opening word, creating a document and saving it?

Instead of installing Word on the public computer (or at least instead of making it available on the public account), you could install the free Word Viewer:
https://www.microsoft.com/en-us/download/details.aspx?id=4 and make that available for the public account. Alternatively, if you want to ensure the document retains its originally
formatting regardless of what printer may or may not be attached to the public computer, you could keep only PDF copies of the file where the public can access them and install the free Adobe Acrobat Reader for viewing:
https://get.adobe.com/reader/.
Cheers
Paul Edstein
[MS MVP - Word]

How to prevent the user to click on the All+ book selector

We are trying to implement a simple book structure. I have created the hierarchy, assigned users to each level and assigned the opt records to each book level.
When 'listing' all items for a user, I can see whatever opts are assigned to that (his) book.
Now, if the user clicks on the +All in the book selector, he would be able to see all the records...
Pls. is there a way to prevent the user from clicking in this selector ?
Txs. for any help.
Antonio

Hi Bob,
Txs. for the hint... Well I think it is OK to use the 'profile' access once the user clicks in the All+.
Now, I have Accounts and Opportunities with the same access in the profile. User has a default book MMM for Application. I understand this book would be the default for all objects... correct ?
When in Opportunities, it is working fine.. Default to MMM and if lookup selector is used with Alll+ he can see records with the profile access.
Trouble is that with Accounts, Default to MMM and see nothing (which would be OK)... clicking in the All+ still see nothing... and this I cannot understand.
Pls. anywhere I should look ?
Txs.
Antonio

How to craete a user who can only browse the dashboard??

Hi friends,
How to create a test user who can only browse the dashboards and not able to modify any of the reports using answers??
Please tell me the steps.
Thanks

@Alastair: I thought it'd be nice to start a new trend in the forum.
@bob123: Depends on how you manage your user and groups in general. Everything created in the RPD? Read from some Oracle tables? LDAP/ADSI? You can do it in the RPD, in the web catalog (Edit Group -> Group Membership ==> The table below contains a list of the current members of this group. Users can join the group by entering the group's password from the Join Catalog Group screen, or you can manually add them by clicking Add New Member below.) or outside.

How to prevent certain users to see only certain resource objects

Similar Messages

Maybe you are looking for