How to resolve intra role conflicts

Deal All,
Need your help on approach that needs to be taken to remediate the intra role SOD conflicts arising for users in the system,
I have explained them the details on how they can resolvewhich requires redesign of roles but client is not at all willing to do a redesign of roles because they have invested a lot in their current auth design.
Can you help on how do we go on removing these risks,
Thanks,
Uttam

Hello.
Last time I heard about this problem, the problem went away after the number of GRC rules used for the check was lowered from all their millions of rules to the most important ones that pose a real risk. There are companies where it is not possible to do anything about it, because they're too small. And these companies are still in business. Even if you clear the conflicts on the role level, you can land with the same problem on the user assignment level.
Can you maybe elaborate on these conflicts? How serious are they? How many roles and users are / can be affected? What is the module / area that it is touching?
Cheers Otto

Similar Messages

  • How to resolve database PSU conflict errors

    Hello:
    I am in process of applying the database PSU Patch 18522512 for 11.2.0.3 and running into conflict issues with other patches, please take a look at the following conflict issues and let me know how to resolve these conflict issues and installed the PSU patch 18522512.
    /cherdb_1/oracle/VIS12/11.2.0/PATCHES/PSU/18522512
    cheron.aarcorp.com:(oracle):> opatch apply
    Oracle Interim Patch Installer version 11.2.0.3.6
    Copyright (c) 2013, Oracle Corporation.  All rights reserved.
    Oracle Home       : /cherdb_1/oracle/VIS12/11.2.0
    Central Inventory : /vol01/app/oraInventory
    from           : /cherdb_1/oracle/VIS12/11.2.0/oraInst.loc
    OPatch version    : 11.2.0.3.6
    OUI version       : 11.2.0.3.0
    Log file location : /cherdb_1/oracle/VIS12/11.2.0/cfgtoollogs/opatch/opatch2014-08-06_10-59-59AM_1.log
    Verifying environment and performing prerequisite checks...
    Composite Patch 18522512 is a bug superset of 16929165,16992075,17468141,13001379,14123213,13931044,9858539,8547978,14237793,14207902,13923995,13544396,13528551,13499128,13477790,13466801,13366202,13259364,13070939,13036331,12971775,12845115,12780983 in OH.
    Composite Patch 18522512 conflicts with installed patch(es) 17875948, 16040940, 19078951, 17693770, 17912217, 13004894, 14649883, 12942119, 16438289, 13040331, 17600719, 13146719, 18116376
    Conflict Description:
    Here are the specific sub-patches of composite patch 18522512 that conflict with 17875948, 16040940, 19078951, 17693770, 17912217, 13004894, 14649883, 12942119, 16438289, 13040331, 17600719, 13146719, 18116376
    Sub-Patch 13696216 conflicts with 19078951 conflicts with 18116376
    Sub-Patch 13923374 conflicts with 19078951
    Sub-Patch 16056266 conflicts with 19078951
    Sub-Patch 16619892 conflicts with 19078951 conflicts with 17912217 conflicts with 17875948 conflicts with 17600719 conflicts with 16438289 conflicts with 13004894
    Sub-Patch 16902043 conflicts with 19078951 conflicts with 17875948 conflicts with 12942119 conflicts with 13146719 conflicts with 13040331
    Sub-Patch 17540582 conflicts with 19078951 conflicts with 17693770 conflicts with 14649883
    Sub-Patch 18031683 conflicts with 19078951 conflicts with 17875948
    Sub-Patch 18522512 conflicts with 19078951 conflicts with 16040940
    Conflict Remedy:
    Refer to My Oracle Support Note 1299688.1 for instructions on resolving patch conflicts.
    UtilSession failed: Composite conflicts with existing oneoffs.
    Log file location: /cherdb_1/oracle/VIS12/11.2.0/cfgtoollogs/opatch/opatch2014-08-06_10-59-59AM_1.log
    OPatch failed with error code 73
    Thanks & appreciated for your help.
    Syed.

    Hi Syed,
    You can raise SR for merging the conflict patches and refer to the MOS document provided to resolve.
    Thanks,
    Uday

  • How to resolve m3u player conflict with installed recording applications?

    Greetings,
    On some of my web pages, I include code for the Quicktime streaming audio player. The player source file is an m3u file that retrieves the mp3 file to play. This "player" works fine on any of my machines that don't have specialized recording software installed. One machine, a Toshiba notebook, with XP on it, has an old digital audio recording/editing program on it that I still use a lot: Protracks. After I had installed Protracks, I noticed that my web pages' streaming audio player would play a very distorted version of the mp3 file, slowed and stuttered. When I first acquired my HP with Windows 7, I installed the latest Quicktime plug-in so I could use the streaming player on my web pages. It worked fine, as it did on an old desktop running XP, until I also installed Dragon Premium by Nuance. Now, the Quicktime streaming audio player on my web pages plays in the same distorted way that the ones on the Toshiba does. I tried associating Quicktime with m3u in the mimetpye control panel, but after I did that I still had no success.
    Here's the code for the player:
    <object classid='clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B' width="197"
    height="17" codebase='http://www.apple.com/qtactivex/qtplugin.cab'>
    <param name='src' value="audio/Welcome.m3u" />
    <param name='autoplay' value="FALSE" />
    <param name='controller' value="TRUE" />
    <param name='loop' value="FALSE" />
    <EMBED src="audio/Welcome.m3u" width="197" height="18" autoplay="FALSE" controller="TRUE" loop="FALSE" pluginspage='http://www.apple.com/quicktime/download/'>
    </EMBED>
    </object>
    I use m3u for streaming and so my original audio files can't be scraped easily.

    Hi Syed,
    You can raise SR for merging the conflict patches and refer to the MOS document provided to resolve.
    Thanks,
    Uday

  • How to Resolve Bitnami/MAMP Conflict with Profile Manager

    I've been working on a new Lion Server for several weeks, and most of my services work great. However, I want to set up several development environments for WP, Drupal, and Magento, among other things. I prefer to use something like MAMP Pro or, in this case, Bitnami stacks for my various environments. However, this machine currently is used for managing Wiki, Profile Manager, and Device Manager, among other things. Of course, if you activate the Bitnami MAMPstack, that poses an issue for Profile Manager, as both use the 80 and 443 ports, I presume. So, the question is how can I configure Lion Server to run Bitnami (or MAMP Pro, as an alternate possibility) and not break Profile Manager, Wiki, Device Manager, etc.?

    Let me edit the statement a bit. Device Manager is the term that I intuitively have attached to the link https://server/mydevices, which is nothing more than a web interface for adding profiles to your Mac and iOS devices. Apple doesn't call it that, but I have taken to doing so, so when I'm referring to it, that's what it is.
    Anyway, I haven't tried Wiki on its own, but I know that if I activate MAMP, or BitNami, and I run Profile Manager, it is inaccessible. Obviously, there is a conf setup, or something I am missing here, but I'm not finding it in the server documentation, if it exists at all.

  • How to resolve multiple font conflicts on startup?

    Monaco, helvetica, keyboard, lucidagrande, Geneva, and last resort

    Please read this whole message before doing anything.
    This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.
    Step 1
    The purpose of this step is to determine whether the problem is localized to your user account.
    Enable guest logins and log in as Guest. For instructions, launch the System Preferences application, select Help from the menu bar, and enter “Set up a guest account” (without the quotes) in the search box.
    While logged in as Guest, you won’t have access to any of your personal files or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
    As Guest, launch the application(s) and test. Same problem(s)?
    After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
    Step 2
    The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login.
    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. The instructions provided by Apple are as follows:
    Be sure your Mac is shut down.
    Press the power button.
    Immediately after you hear the startup tone, hold the Shift key. The Shift key should be held as soon as possible after the startup tone, but not before the tone.
    Release the Shift key when you see the gray Apple icon and the progress indicator (looks like a spinning gear).
    Safe mode is much slower to boot and run than normal, and some things won’t work at all, including wireless networking on some Macs.
    The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
    Test while in safe mode. Same problem(s)?
    After testing, reboot as usual (i.e., not in safe mode.) Post the results of steps 1 and 2.

  • How to resolve software installation conflict

    I used to install free packages from sunfreeware.com on my Solaris 8 box. Now I've downloaded Solaris Software Companion CD 07/01 from SUN. I found that the emacs (v20.7) that comes with the CD is newer than that from sunfreeware.com (emacs-20.4-sol8-sparc-local.gz) So I tried to "pkgrm" the old one and "pkgadd" the new version.
    However, during "pkgadd", there is a message:
    WARNING:
    The <SFWncur> package "ncurses (new curses) library" is
    a prerequisite package and should be installed.
    However, in my box, I've already installed "ncurses-5.2-sol8-sparc-local.gz" from sunfreeware.com and that software resides in /usr/local
    Is there any way that I can install SFWemacs using SMCncurs without installing SFWncurs?
    Thanks for your kind help in advance.
    Rgds
    Steve

    Windows Firewall won't block installations. You can use group policy, check out Using Software Restriction Policies to Protect Against Unauthorized Software
    As well, as a security best practice users who should not be allowed to install applications should not be members of the Power Users or Administrators local machine groups. As members only of the Users local machine group they do not have permission to
    install applications.
    Jason Warren
    @jaspnwarren
    jasonwarren.ca
    habaneroconsulting.com/Insights

  • TS4123 how to resolve itunes store X youku conflict

    how to resolve itunes store X youku conflict
    i can see there is both windows and apple and also youku in LSP but ive tried to delete youku and just run itunes yet it wont access itune store i just keep on getting loading bar that wont load .
    any suggestions
    THANKS

    i can see there is both windows and apple and also youku in LSP but ive tried to delete youku and just run itunes yet it wont access itune store i just keep on getting loading bar that wont load .
    Let's try wiclee's instructions from the following post (basically, it returns the values in the Winsock-related registry key to their default settings, removing any leftover material from the youku LSP): 
    Re: i cannot connect to itunes on my laptop

  • Does anyone know how iCloud resolves conflicts? (iOS save games)

    Hello all,
    We're having some users report an issue with our App that their save game is being nuked when they close the App, sing in to iCloud and then re-open. We have a number of leads we can follow, but first thing is first; Does anyone know how conflicts are resolved by the iCloud system? What it does internally?
    Scenario:
    Achieve some amount of progress through an App.
    Achieve some other amount of progress through an App from a different device.
    Sign into iCloud on both.
    iCloud obviously decides which data to use, but how? Is it literally just a "last write to file wins" case?
    Another question is, does anybody know if iCloud would act strangely/not at all on a device which was jailbroken? We have a very small number of users reporting this issue so that may be another likely situation.
    Many thanks

    Yes, we are fully supporting iCloud. It's a very rare case that we get this report from users and no solid repro steps have yet been given. Many users have successfully played on multiple devices with iCloud enabled and their save game is perfectly intact. There just seems to be an edge case where it's possible that a call to iClouds synchronize and what it actually does in that function is resolving an older save file. So knowing what the internals of how it resolves conflicts will allow us to add another layer with our own conflict resolution specific to our App.

  • I am no longer able to double click on a file and have it open.  Any suggestions on how to resolve this problem?

    I am no longer able to double click on a file and have it open.  Any suggestions on how to resolve this problem?

    Please read this whole message before doing anything.
    This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
    The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you turn on the computer, and again when you log in.
    Note: If FileVault is enabled, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.
    Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.
    The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
    Test while in safe mode. Same problem?
    After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

  • HT4236 Syncing photos using iTunes in windows revealed this error message "iPad Jayvee cannot be synced because it cannot be read from or written to ." Please advise asap how to resolve the issue.  Thanks!

    Please advise how to resolve error message - cannot be synced because it cannot be read from or written to.

    Hello Janet,
    I would recommend this article named 'Disk cannot be read from or written to' when syncing iPod or 'Firmware update failure' error when updating or restoring iPod found here http://support.apple.com/kb/ht1207
    Outdated operating system software
    Make sure you have the latest updates for your operating system, which may include improvements for device connections. For example, many USB and FireWire improvements have been included in Windows Service Packs.Check for Mac OS X downloads. Check for Windows updates.
    Computer needs updates
    Make sure you have the latest updates available for your specific computer model (or components for home-built PCs). These are usually available for download on the support website for the maker of the PC (or component). Many USB updates are listed as "Intel chipset" or just "chipset" updates on PC manufacturer's support and download websites.
    Software interference
    Some software can interfere with iTunes, making it unable to write files to your iPod. Think about what software you have installed, and try disabling any add-ons that might be interfering with iTunes. Check your suspected software's documentation or contact the software maker if you need assistance with disabling the application. Out-of-date or incorrectly configured security software frequently causes this issue. See these steps for identifying and troubleshooting third-party security software.
    Damaged files
    If one of your music files or photos is damaged, iTunes may display one of these errors when transferring that file to the iPod. If you identify a file that is causing the error, try deleting that file and reimporting it from a backup file or from the original source. You may be able to repair files by repairing the disk (see the solutions in the next section).
    Unregistered .dll files (Windows)
    Malware or other software may cause an issue with the digital signing of Windows XP drivers. First try restoringthe iPod using the latest version of iTunes.. If you are unable to restore it or the symptom reappears, follow the steps in this document.
    Damaged disk structure
    These errors can also appear if the format of your computer's hard drive or your iPod disk is damaged.
    To repair your computer's hard disk—Mac OS X users, read this article for instructions. Windows users, search the Help system in Windows for chkdsk to get more information on checking and repairing the disk structure.
    To repair an iPod disk—Restore the iPod or iPod shuffle using the latest version of iTunes.
    Warning: Be sure to back up your data before restoring an iPod. The restore process cannot be undone. All of your songs and files will be deleted.
    Corrupt iPod photo Cache
    If you're getting the error when transferring photos to an iPod photo, try deleting the iPod photo Cache and then starting the photo sync again.
    Lost connection
    Make sure that the connections from your computer to the iPod are snug and do not wiggle or come loose during transfers. For example, if you use the wrong size dock for your iPod, it can put strain on the connectors and cause a bad connection. See these articles for more information:
    Learn about iPod Universal Dock
    iPod Dock: Specifications
    Conflict with third-party hardware
    Third-party USB or FireWire devices may also interfere with iTunes' ability to communicate with your iPod. Remove all USB and FireWire devices except the keyboard and mouse before reconnecting your iPod to the computer.
    Bad hardware
    Hardware failure or non-compliant hardware can cause these errors. This could be an issue with iPod hardware or with the cable or dock you're using, but more often it's an issue with the USB or FireWire card or interface in your computer. Some USB and FireWire interfaces just don't work very well. If you isolate the issue to the USB or FireWire interface in your computer, you may want to try a different port, get the computer serviced, or replace the card or interface with a better one.
    If you isolate the issue to an Apple-supplied cable or dock, or the iPod itself, you can get it serviced here.
    Take care,
    Sterling

  • How to create authorization role for just displaying query prefix Q and X.

    Hi Expert,
    I hope someone can help me on how to create authorization role for just displaying and executing  BEX  Queries prefix Q and X. I'm currently using SAP BI 7.1.
    Actually, I already created one role called : Z_FORINDO_ONLYDISPLAY_QX
    where I only put in the Authorization Component (in the Role Maintenance - Tcode 'pfcg'):
    -->Manually Business Information Warehouse
        --> Manually Business Explorer - Components
    Activity : Display, Execute, Enter, Include, Assign
    InfoArea : *
    InfoCube : *
    Name(ID) of a reporting component : *
    Type of a reporting component : Calculated key figure, Restricted key figure, Template structure
        --> Manually Business Explorer - Components
    Activity : Display, Execute
    InfoArea : *
    InfoCube : *
    Name(ID) of a reporting component : Q* , X*
    Type of a reporting component : Query
    But, the problem is I still can make changes on that queries (Q* and X*). Even, I still can run query with prefix Z. I use S_RS_RREPU Tamplete for Query Display and execution.
    Please assist. Very much appreciate your help. Thanks.
    Edited by: nadiyah salleh on Mar 18, 2008 11:22 AM

    Question close. This issue has been resolved.

  • Error: - ORA-12542: TNS:address already in use. How to resolve?

    Hello all,
    Can anyone guide me how to resolve this error. I have encountered this error for the first time!
    Usually I run my batch job at every night. It generally takes 2 hours to 3 hours to complete. Till date I have not faced any problem of this kind.
    I understand that there is conflict of Ports. The port that is being used by my listener, is also being shared by some other. I am not aware of that other program which may be using the port assigned to the listener.
    Thanks in advance.
    Himanshu

    Hi,
    I had the same problem today morning in my production. Listener was hanged and receved OEM alert as "Listerner Down" when i go and start the listerner its was failed then i found multiple PID created the same listerner then i went i killed both of the process and started the listener successfully.
    Could you please tell me what was the exact cause.
    Regards
    Salai

  • How to resolve the runtime portal error which occurs during entering a room

    Hi All
    I have created a room of type "Sap_Team_Room" and then assigned it to one role when i am trying to enter room it is giving me the following error
    "Portal Runtime Error
    An exception occurred while processing a request for :
    iView : pcd:portal_content/com.sap.ip.collaboration/Rooms/80dd2995-e186-2a10-c58f-d9411ca9c30e/workset/com.sap.netweaver.coll.DocumentsAndLinks_0_0/RoomQuickLaunch
    Component Name : null
    Page could not create the iView."
    Please Can anybody tell me how to resolve it.
    Thanks in Advance
    Thanks and Regards
    Nishita Salver

    Hi,
    Have you made any changes in  com.sap.portal.runtime.logon.par ?? because the error specifies error in authschemes computation, this means authschemes.xml file is not modified if you have modified logon par file. Is this correct??
    Regards,
    Ameya

  • Problem : Cannot resolve the collation conflict between ...

    Hi
    I want select a column from another database base on my current field on current database.
    here is my query :
    select ms.ServiceID, ms.ServiceName, ms.CoefficientFixedService,
    (select Services_Name from MpAdmisson..IAServices_Table where Services_DepartmentID=24 and Services_Name=ms.ServiceName) as N'MpServiceName'
    from MedicalServices ms
    join MedicalCategories mc on ms.MedicalCategorizationID=mc.MedicalCategorizationID
    join Zones z on mc.ZoneID=z.ZoneID
    where z.ZoneID=24
    but I'm facing this error :
    Cannot resolve the collation conflict between "Persian_100_CI_AI" and "Arabic_CI_AS" in the equal to operation.
    Also i changed collation of "MpAdmisson" db to "Persian_100_CI_AI" and even restart msSqlServer service, but i'm facing the same error!
    where is my problem and how to solve it ?
    thanks in advance
    http://www.codeproject.com/KB/codegen/DatabaseHelper.aspx

    although you changed the collation of the database it does not mean that all the objects changed their collation too automatically.
    So far you are correct.
    The change is only done when you change the data within the objects, thus recreating the table and moving data in / out or touching each and every value with doing something on the values themselves (the following will not work UPDATE (..) SET ServiceName
    = ServiceName, the optimizer is smart enough too see that as a noop).
    However, this is flat wrong. This is the story: each character column in a database has a collation tied to it. When you change the collation of a database, you change 1) the collation of the columns in the system tables. 2) The default collation. To change
    the collation on the individual columns, you need to alter the column:
    ALTER TABLE IAServices_Table
    ALTER COLUMN Services_Name <current data type> COLLATE Persian_100_CI_AI [NOT] NULL
    Unfortunately, this only works if the column is not indexed and has no constraints tied to it. Any indexes have to be dropped and recreated after the ALTER statement. If the column is a key column and there are referencing foreign keys, they also have to
    be dropped and recreated. Thus, this is quite a far-reaching operation. And it may not stop there - with some amount of bad luck, constraints may fail with the new collation.
    For this reason, this workaround suggested by Jens, may be your only option in the short term:
    If you cannot do this currently, you can still do the following and collate on a per query basis:
    select ms.ServiceID, ms.ServiceName, ms.CoefficientFixedService,
    (select Services_Name from MpAdmisson..IAServices_Table where Services_DepartmentID=24 and Services_Name=ms.ServiceName COLLATE Persian_100_AS_CI) as N'MpServiceName'
    from MedicalServices ms
    And this part of Jens's post is correct. To note though is that use of the COLLATE clause voids any index on ServiceName. (Since this index is sorted according the rules of Arabic, and not the rules of Farsi.)
    Erland Sommarskog, SQL Server MVP, [email protected]

  • How to resolve Oracle lock issue

    Hi All,
    What is Oracle lock issue in BW and how to resolve it.
    Regards,
    Ravi

    Hi Ravi,
    The object lock issues that we sometimes encounter in SAP BW production support role.
    Lets take the below example where the InfoObject(0material) load has failed and the load monitor (T-Code: RSMO) looks like this.
    Go through the link below
    http://proradian.com/blog/2008/07/sap-bw-production-support-object-lock-issues/
    Regards,
    Marasa.

Maybe you are looking for