How to restrict admins to modify their own attribute in OAM

Is it possible to restrict admins to modify their own attribute in OAM. For example, a admin who has modify right for attribute X but should not be able to modify X for himself.
Thanks.

If your self-service application binds to the directory using some special account, like 'superuser_directory' (just an example), then you could allow superuser_directory to modify entries but deny aministrators the ability to modify entries. This means that they connect with their own login to the directory when they modify entries. If you want them to stop modifying their own entries in the application, that's a matter of making the application be aware of that..

Similar Messages

How to restrict delegated administrators to modify their own OIM accounts

Hello - I have a requirement where we need to create delegated administrators for each department. The Delegated Admins are allowed to create and manage user accounts in OIM and OID resource. They can modify user accounts that are part of the organization that they have admin permission on however they should not be able to modify their own accounts. For example, if Org1-Admin is a part of Org1 and have admin priviledges on the Org1 he can create and modify user accounts in Org1 and provision user accounts to OID resource. He can update user profile data and process form data etc. But he should not be able to change his own user profile data and should not be able to get provisioned to OID resource. I am able to set up OIM for the delegated administration part but I am not sure how to restrict the delegated admin for modifying his own profile and restrict OID resource from him. The reason to have this requirement is these delegated admin accounts will act as non-user accounts i.e. they are not tied to any person they are more or less service accounts where if Person1 is assigned as a delegated admin of organization 1 in week 1 he should be able to do the tasks as discussed before using org1-admin account. The next week we may have person 2 doing this job and he should use the same account to login and to do these tasks, these delegated admins will have their own end user accounts that will be tied to their personal ID's and they can modify that account if they are delegated admin :) but not the delegated admin account.
Thanks,

If your self-service application binds to the directory using some special account, like 'superuser_directory' (just an example), then you could allow superuser_directory to modify entries but deny aministrators the ability to modify entries. This means that they connect with their own login to the directory when they modify entries. If you want them to stop modifying their own entries in the application, that's a matter of making the application be aware of that..

HT4436 we have 5 devices on one itunes account how do I give them each their own icloud account and still share the itunes account?

we have 5 devices on one itunes account how do I give them each their own icloud account and still share the itunes account?

You need a unique AppleID for each iCloud account. So grab some free gmail, hotmail, aol, yahoo or whatever email addresses to make five new AppleIDs. Now, everybody make an iCloud account for themselves, and keep the existing shared AppleID and password just for use in the iTunes and App Stores. You can also each use your own unique AppleIDs to make iMessage accounts and keep those separate as well.

I am running 4 ipod classica through one computer and one itunes account/profile. The ipods belong to me, husband and 2 kids. How can the kids now get their own accounts but keep the stuff I have already downloaded for them? They have their own laptops

I am currently running 4 ipod classics through my own account/profile on itunes. They belong to me, my husband and 2 kids.
The kids are getting older now and have their own laptops. I would like them to have their own itunes accounts as they will be away from home much of the time and will want to make their own puchases.
How can I set them up so that they are independent from my account, but not lose the content that I have downloaded for them over the years? (A lot of content).

You and your husband can share a store account and still have seperate iCloud accounts for your contacts, bookmarks and stuff like that. Click here for instructions to make an apple account without entering a credit card. Make sure you use a different email address for each apple account.
Set up your iPhone/iPad whatever using the new account for iCloud. Then go into settings/store and sign in with your purchasing account, you may need to sign out of the other account. To the best of my knowledge, your household is allowed to share purchased legally, someone please correct me if I'm wrong.
Once you each have your own devices set to your own accounts you can set them to backup to that account and it will keep all your contacts seperate.

How to allow user to modify his own data with a Portal Form

Hi,
I have a form (Master-Detail) to update a user-profile (Master) and the user's skills (Detail).
How can I make sure, that a user can only modify his own profile - assuming the master table has an attribute containing the users loginname for Portal?
thanks!
bye Stephan...

Yes, along with the default value of wwctx_api.get_user, you also need to specify the default value type. In this case it should be Expression returning Varchar2.

AP Invoice Workflow through AME: how to setup requesters can approve their own Invoices -Self approval

Hi All,
I have a requirement Where Requesters should approve their own invoices without supervisors intervention in approvals through Approval Management Engine (AME), how can i achieved this.
I am using:
RDBMS : 11.1.0.7.0
Oracle Applications : 12.1.3
Please guide me through this.
Thanks

Please refer to the following docs.
What are the Setups To Accomplish Self Approval When Integrated with Approvals Management Engine (AME) and Oracle Procurement? [ID 554223.1]
Master Reference For AME Based Requisition Approval In R12 [ID 1207863.1]
Thanks,
Hussein

My 2 sons have ipods, when they load $$, they both have access to it. How can I give them both their own accounts?

My 2 sons have ipods. When money is loaded, they both have access to it. How can I get them to have their own accounts so they can't share money?

They need their own iTunes accounts. You have to be at leasty 13 to create an account and you need a unique email address from them. They will need the password for the account that purchased app already in order to update those apps.

How to get websites to use their own colors

My firefox uses System Colors, for instance google has a black background.

Make sure that you haven't enabled a, possible inverted, High Contrast theme in the Windows/Mac Accessibility settings.
Make sure that you allow pages to choose their own colors.
*Tools > Options > Content : Fonts & Colors > Colors : [X] "Allow pages to choose their own colors, instead of my selections above"
Note that these settings affect background images.
See also:
*http://kb.mozillazine.org/Website_colors_are_wrong

How to prevent users to create their own private list ?

Hello,
Is there a way to prevent users to create their own private list ?
Or to perform their own queries ?
Thanks for your help.

Any list or search will always query the database regardless of volume. For example, a user has access to just 1 account record. This record could be one of 10 million other account records. To allow the user to see this record, the entire account pool will be queried. That's where indexes help and queries are really fast.
Turning off search is not the solution. Ensuring queries are optimized is the solution. For example, manager visibility always slows down the search because the nature of a manager visibility search requires compex search patterns. So you could turn off manager visibility for your company and use alternate means like books. Manager visibility search is a feature that's primarily used by small-to-medium-business (SMBs). Large enterprises should never use it.

How to restrict users cannot change their password

Hi all,
If i logon to E-Business Suite home page, click on the preferences icon on the right hand top corner of the home page, i have an option to change my password.
How will i diable or restrict this such that no users can change their passwords after first time creation.
Regards,
Prasad

hi prashant,
i could do this by logging in as sysadmin, personalizing that particular page (preferences) and setting it for only site and org. it is effected for all the users
Thanks for reply
Prasad

How to Restrict Subscriber from displaying his own Stream?

How to pass opponent UserID to Subscriber ???
private function displayExistingStreams():void
{     var publishers:Object = _streamManager.getStreamsOfType(StreamManager.CAMERA_STREAM);
    //status_txt.text += "displayExistingStreams";
    for (var publisherID:String in publishers) {
        if (publisherID !=_userManager.myUserID) {
            setUpSubscriber(publisherID);
protected function setUpSubscriber(p_publisherID:String):void {
    currentSubscriber = new WebcamSubscriber();
    currentSubscriber.displayUserBars=true;
    currentSubscriber.connectSession = cSession ;
    currentSubscriber.subscribe();
     // publisherIDs used for restricting the list of publishers     that this subscriber should display videos for.
    currentSubscriber.publisherIDs = [p_publisherID];

Hi ,
You need to loop over userIDs from userManager.userCollection and get all userIDs and set webcamSubscriber.publisherIDs to all IDs except your own. And you need to update this everytime an user enters or leaves the room ( by listening to UserEvent.USER_CREATE and UserEvent.USER_REMOVE from UserManager, if you want to dynamically maintain this publisherIDs list)
I have replied this in other forum messages earlier.
Hope this helps
Thanks
Hironmay Basu

How to separate "random" code into their own place. (with source code)

Hi, i can't seem to figure out how use random to separate the letters and how you would select the individual code from the menu and display it. I know a major part of the code is missing, so any help will be greatly appreciated.
Here are my instructions.
thanks
1.     Allow the user to select the number of characters in the password (at least up to 14).
2.     Create a randomly generated password from the character sets selected by the user.
3.     Check the strength of three passwords of different length from each menu option with the password checker. Tabulate the strength of your 12 passwords (see instructions below).
4.     Re-read the Strong Passwords: How to Create and Use Them article and write a short paragraph giving your opinion about the effectiveness of randomly generated passwords vs. memorable passwords (see instructions below).
5.     Follow the 3 steps in the article to create two strong, memorable passwords and test them with the password checker. Report your memorable passwords, what they stand for, and their strength (see instructions below).
I also have to select from the menu that I types in the code.
* Write a description of class Password here.
* @author (your name)
* @version (a version number or a date)
import java.util.Scanner;
import java.util.Random;
public class Password
    public static void main(String[] args)
        Scanner in = new Scanner(System.in);
        Random randomGenerator = new Random();
        int randomInt = randomGenerator.nextInt(26);
        int randomInt1 = randomGenerator.nextInt(13);
        String[] letters= {"A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"};
        String[] lettersLower= {"a","b","c","d","e","f","g","h","i","j","k","l","m","n","o","p","q","r","s","t","u","v","w","x","y","z",};
        String[] lettersP= {"!","#","%","@","$","&","*","-","+","=","?","<",">",};
        System.out.println("                 Password Generation Menu");
        System.out.println("*************************************************************");
        System.out.println("*   [1] Lowercase Letters                                   *");
        System.out.println("*   [2] Lowercase & Uppercase Letters                       *");
        System.out.println("*   [3] Lowercase, Uppercase, and Numbers                   *");
        System.out.println("*   [4] Lowercase, Uppercase, Numbers, and Punctuation      *");
        System.out.println("*   [5] Quit                                                *");
        System.out.println("*************************************************************");
        System.out.print("Enter Selection (1-5): ");
        String first = in.next();
        System.out.print("");
        System.out.print("Password Length (1-14): ");
        int second = in.nextInt();
        System.out.print("");
        System.out.print("Password: ");
        for (int j = 0; j < second; j++)
            System.out.print(lettersLower[randomInt]);
         int randNum = 0;
         Random randNumList = new Random();
    }

I suggest you start by creating a function which takes all the parameters for generating a password and returns a randomly generated password. Then create a method for each of the other key functions such as checking the password strength.

How to stop adverts opening on their own when googling

whenever i google, like when I'm researching for college work, random advertisements open whenever i click a link, in a new tab. it is sometimes adverts, sometimes saying I've 'won' and sometimes that mac keeper. how do i stop this from happening? it is driving me crazy! also on some pages certain words on the site and capitalised (individual words) and underlined and are blue so they are hyper linked and if i hover my mouse over the word there is an advert linked to it! anybody any ideas? Many Thanks

First try
Remove unwanted adware that displays pop-up ads and graphics on your Mac
Next:
Adwaremedic: Removes all known adware from your Mac
If you can't download it since the malware is preventing it then see:
https://discussions.apple.com/docs/DOC-7792
However, if you have prevent popups checked in Safari's preferences it is likely just javascript on the sit doing that. You can get extensions that prevent javascript but a lot of javascript is necessary for the sites to perform their function.

I have 2 iPhones and 2 iPads all link to 1 Apple ID and I don't have iCloud storage. How do I get them on their own Apple ID without loosing stuff on my phones and pads

How do I keep from loosing stuff to separate my iPhones and iPads that are linked

As I stated in my question that I do not want 2 Apple accounts, I already have one with all my private information and it should be good enough regardless how many devices. I didn't tried the iCloud but I don't think I actually had it setup.

ICal and Address Book fonts--how do you display them in their own font?

I tried printing address labels from Mac's Address Book. It was pretty intuitive and straight forward. However, when I was prepping to print, I had the chance to change the fonts. The list of fonts was not presented with each font name in the font itself (does this make sense?).
When I use Excel or Word and want to change fonts from Arial to Times New Roman, I go to the font chooser, and Times New Roman is displayed in Times New Roman font. If I want to be creative and pick something new, it's easy to see how it will appear, because the name of the font is displayed in the font its describing.
Is there a setting I need to adjust in order to make this work in Address Book and/or iCal?
Thanks!
Terel

On one hand they make Mail look stark, like the interior of a Porsche 911, gray, gray, gray, (boring) and on the other hand they make iCal look like some 3rd party creation where they paid a graphic designer 250.00 to come up with a cool look. Cheesy!
Probably designed by some unemployed Windows XP graphic 'artist.'
As to Address Book. Why complicate something that is already working just fine.

How to restrict admins to modify their own attribute in OAM

Similar Messages

Maybe you are looking for