IDM Mass Operations

Hello everyone,
we're investigating the possibility to deploy SAP CUA or SAP IDM at our Company. We're a little uncertain about the IDM solution because we heard that there might be limitations around mass operations, particularly:
1) Mass changes/Deletes/Lock and Unlock:  functionality like that provided by SU10
2) Tool to create users from a template and in mass assignment of roles to users
Could any of you clear this up for me?
Thank you.
Regards

It requires a minimal amount of "coding" and some understanding of how the management console works. This is not an option for regular end users, only for people who are setting up and administrating IdM in the management console.
See screenshots here: http://min.us/mvjtmLg
We have also coded a tool in Java/JSP to interface with the IdM database and allow for mass uploads by a few select end users, but this is very dangerous and I'm not sure I'd recommend it unless you can ensure a certain level of competence on the part of these users...

Similar Messages

  • Are following mass operations available in NW04(s) Portal?

    Hi,
    Are the following mass operations available as standard feature/tool in NW04(s) Portal or do we have to build a tool to automate them?
    1- Given a file with a list of Users and their associated Language(e.g. either english or french), perform the mass assignments of the specified portal language to each of the users in the list. We need this since the portal language can be different from the preferred language attribute stored already for the user in Corporate LDAP.
    2- Given a file with a list of Portal Roles with their desired associated portal user groups, perform the specified role to group mass assignments. 
    3- Given a list of Portal KM folders and subfolders and associated permissions and roles, perform the specified KM folders/subfolders mass assignments of permissions and roles.
    This is in order to avoid having the security group do the assignments manually.
    Thanks for any help you can provide.
    Regards,
    Tobi

    Hi Christian,
    Thanks for your reply.
    We knew about the mapping of portal attributes with LDAP attributes as mentioned in your reply, but now we have a massive rollout and we are interested in massively assigning the portal language to a list of users. In this case, the assigned portal language will take precedence over the mapped language from LDAP.
    We need to do this because the <b>portal</b> language for our users might be different from their corresponding language stored in LDAP. For e.g. some users might have the French language in LDAP (for HR reasons), however some might prefer to work in english when using SAP portal.
    Regards,
    Tobi

  • SAP IdM 7.2 - enhancement UI

    Hi all,
    I have this specific request from our customer:
    1. They want to reset the passwords for a list of users in their IC.
    For that, we thought that it should be possible to create a new UI screen, that displays the list and an extra  button to reset the password for the selected users.
    How can we handle this request? Do we need to create a new Java Web Dynpro based on the REST Webservice, or are other options more relevant?
    2. Is it possible to enhance the default Java Web Dynpro's from IdM? for example an extra button on the screen?
    Thanks.

    How do they get mail if they don't have a password?  In any case.  I can't think of a really good way to do this.  I can, however think of a lot of bad ways.
    Most of these would involve looking at each entry individually and setting some custom attribnute to mark that the password needs to be generated.  then have a scheduled task to look for these entries every so often and do the password change / email.
    Like I said, it's not a good way.  The problem is that IDM is not designed to do mass operations anymore.
    I think holding out for the REST interface might be your best shot.

  • Tool for mass modification of KM / collaboration permissions

    Hi,
    do you know if there is a tool in portal for mass modification of permissions for documents, folders and collaboration rooms? It would be quite handy.
    For example I have a folder which contains 100 documents and I want to change permissions for only some of the documents, but I don't want to change them one by one (go through the details dialog box for each document and change permissions).
    The same question is for collaboration rooms.
    Regards,
    Ladislav

    Hi Ladislav,
    There is a KM report named Propagation of Properties, under Content Administration -> KM Content -> Toolbox -> Reports -> Mass Operations -> Propagation of Properties, which allows you to propagate the existing properties of a resource, to other folders and their contents or to individual documents.
    Refer to [http://help.sap.com/saphelp_nw04/helpdata/EN/44/8d6f90d85c6572e10000000a11466f/content.htm] for more information on how to use this KM report.
    Hope this Helps.
    Regards,
    Adren

  • Geeting error while doing Mass UD using t code QA41

    Hi
    While doing mass UD using t code QA41 I am getting below error messages:
    1. You can not make the UD because of 0001 non-valuated physical samples,
    2. You can not make the UD because of 0002 non-valuated physical samples,
    My objection is to do mass UD for all INPROCESS inspection lots where results are recorded but no UD given.
    Request a solution where I am doing wrong and a solution to it.
    Thanks in advance.
    Pradipta Sahoo

    Hi Craig
    Thanks a lot for all your answers.
    Last query:  I will not able to do MASS UD if all samples are not valuated means I have to record results in all 3 physical samples.
    1. In QA11 I am able to UD for each inspection lot (where result is recorded in 2 physical sample & 3rd one is not valuated). Why it is so? Why I am not getting the same error that 3rd sample is not valuated.
    2. In QA41 mass UD is not possible if 3rd sample is not valuated. Why I am not getting all inspection lots and getting few in the output screen? Is there any other way where I can valuate all open inspection lots in mass operation?
    3. In QA16, also I am not getting all inspection lots in the output screen. Why?
    Requesting yo clarify my queries to make me undrstand the process better. So that I can convince my higher management to reduce physical sample generation in auto.
    Thanks in advance for your help.
    Pradipta Sahoo
    +91 9909994216

  • Error while exporting data from HCM to VDS

    Hi,
    When i am trying to export data from the SAP HCM system using the RPLDAP_EXTRACT, the export fails and the log shows that the LDAP_CREATE failed. In the VDS log,
    com.sap.idm.vds.oper.main_listener Message:
    Exception on add: class java.lang.Integer:null incompatible with class
    java.lang.String:null
    I verified the database connectivity from VDS to IDS when seems fine since the LDAP_SEARCH is working fine.
    Cheers !
    Zaheer

    It was a bug in SP2, it is fixed in SP2 Patch 4.
    Cheers !!
    Zaheer

  • Best practice for breaking a book

    Hi Everybody,
    I'm making a long technical manual in InDesign, and am facing the issue of how and when breaking it into separate ID Documents collected into an ID Book. In the past, I've never used ID for manuals longer than 40 pages, where I had no problems with the document size. My latest manual was broken this way:
    - Front cover
    - Front matter/Safety
    - ToC
    - Main Text
    - Back cover
    With this longer manual, I will have to split the Main Text into separate parts. My preference would be to avoid excessive fragmentation, to make exporting for translators or other use less time consuming. Also, having less Documents in the Book would make mass replacement (Find/Replace > All Documents) much easier.
    So, at the moment I would avoid breaking by chapter, but going for major sections, like in this schema:
    - Front cover
    - Front matter/Safety
    - ToC
    - Main Text / Introduction
    - Main Text / Basic tasks
    - Main Text / Less basic tasks
    - Main Text / More or less advanced tasks
    - Main Text / Absolutely advanced tasks
    - Main Text / Stay away from these tasks
    - Main Text / Appendix
    - Index
    - Back cover
    Do you see any issue in breaking into sections instead of separate chapters?
    Thank you!
    Paolo

    While going on with this work, I would say that it is important to find a balance between a document too big, and too many chapters in a book. A big document will be more difficult to navigate, and will be slower to use. Too many chapters will make changing condition status change and other mass operation slower.
    Also, be careful not to create cross-references before breaking the book in separate chapters. There is no apparent way of automatically relinking broken references, that have to be entered again by hand.
    Paolo

  • Error:while doing gr through the t code migo

    Error:-Invalid batch according to selection criteria in batch determination.
    Please help on urgent basis.

    Hi Craig
    Thanks a lot for all your answers.
    Last query:  I will not able to do MASS UD if all samples are not valuated means I have to record results in all 3 physical samples.
    1. In QA11 I am able to UD for each inspection lot (where result is recorded in 2 physical sample & 3rd one is not valuated). Why it is so? Why I am not getting the same error that 3rd sample is not valuated.
    2. In QA41 mass UD is not possible if 3rd sample is not valuated. Why I am not getting all inspection lots and getting few in the output screen? Is there any other way where I can valuate all open inspection lots in mass operation?
    3. In QA16, also I am not getting all inspection lots in the output screen. Why?
    Requesting yo clarify my queries to make me undrstand the process better. So that I can convince my higher management to reduce physical sample generation in auto.
    Thanks in advance for your help.
    Pradipta Sahoo
    +91 9909994216

  • How to copy and overwrite existing folder that is created under KM

    I have about 500 store folders created in KM and under each of those folders I have a subfolder called Reports.  I had created a new Reports folder that I want to copy to all of the 500 store folders but, when I tried doing it I see it creates another copy of the Reports folders and doesn't overwrite the existing one which I really want it to do.   Is there way to overwrite, rather then manuelly going into each 500 folders, removing the existing Reports folder and then copying over the update Reports folder.

    Hi,
    there is no way to overwrite with a "copy". If you need this functionality more often, you could develop your own report.
    The existing "copy" report has no overwrite function.
    Instead of manually deleting the existing folder, you could use the delete report.
    Go to Content Administration > KM Content > Toolbox > Reports > Mass Operations
    Regards,
    Sascha

  • Storing document on Content Server - SAP DB or Filesystem?

    Hello everybody.
    I have questions regarding the Content Server and need your expierence and recommendation. Where do you store documents on the Content Server? Are you using the standard SAP-DB, which can be installed together with the Content Server, or are you using the File-System? What are the advantages and disadvantages?
    What do I have to do to store the documents in the File System? Is there an documentation?
    Thanks and Regards.
    Tobias Karl

    Hello Tobias,
    Storage on the filesystem has the advantage to use existing clustering raiding and hierachial storeage systems for storage and you dont have to implement those features in the database. The advantage would be documents can be found indepentendlly from the ERP-Sysem.
    DB Advantages
    All data (documents, folders, and metadata) is stored in the database.
    Database is much better suited than file system to the administration of large amounts of data
    Databese is limited to size 64 TB, then additional database needs to be installed 
    If there is a large number of write requests in your CM usage scenario, set up the CM repository in database mode. Since all documents are stored in the database, this avoids unintentional external manipulation of the data.
    Another advantage of storing all data in the database is that the procedure for data backup and restore is easy since only the database needs to be backed up
    File System Advantages
    This is faster than the database option if you have large documents since there is no database data streaming. This also enables the size of the database to be controlled more easily since documents are stored in the file system.
    File systems are not transactional, so this has restrictions and affects performance. If read and write operations take place for one document in the file system at the same time, these operations have to be coordinated by the repository manager. This happens by recording both write accesses and read accesses in the database. This affects performance.
    Metadata (for example, locks or custom properties) can be lost if you edit or manipulate documents or folders directly in the file system. Only administrators should work in the file system, and they should only carry out mass operations such as copy and delete
    For a scenario with write accesses, cannot ensure consistent data backup and restore. This is because changes to the folder structure in the file system could be made in the time between the two actions. This would lead to inconsistent data following the restore process. Consistent data backup and restore can therefore be ensured only if read accesses alone are taking place
    There are CM repository managers can be set up in various modes i.e Persistence Mode to save the documents  as follows:
    1) DB Mode All data is stored in the database
    2) DBFS Mode Metadata and folders are stored in the database, but documents are stored in the file system
    3) FSDB Mode Folders and documents are stored in the file system, but metadata is stored in the database.
    If you wish to change the settings you can do it but with some restrictions which follows as:change of the persistence mode is possible only from the DB mode to the DBFS mode. Changing from DB to FSDB, from FSDB to DB/DBFS, or from DBFS to DB/FSDB is not possible.
    To change the mode if you wish with above restrictions
    1.      Make sure that enough free disk space is available to migrate the content from the database to the file system.
    2.      Change the configuration of the CM repository manager. In the Root Directory parameter, specify the path to the file system that the documents from the database are to be stored under. Change the entry in the Persistence Mode parameter from DB to DBFS.
    3.      Restart the application server.
    4.      Run the CM Store: Content Crawler report
    Please check the follwoing notes on backup and restore:
    Note 1000150 - Backup of KMC configuration
    Note  1000351 - Restore of KMC Configuration Backup Archive.
    Knowledge Management entire documentation can be found @
    http://help.sap.com/SAPHELP_NW04S/helpdata/EN/62/468698a8e611d5993600508b6b8b11/frameset.htm
    Thank you,
    Shyam

  • Run report Propagation of Properties

    Hello,
    I want to run the report "Propagation of Properties" in a CM FSDB repository for a predefined property : "business_unit_optional"
    When I run the report on my "/SEPData/Restricted/Internal/" folder (that is a FSDB CM Repository) I've the following error :
    error executing: /reporting/reports/Content Administration/Mass Operations/property/1183648832033.xml(com.sapportals.wcm.service.reporting.ReportInput@30df90bc) - java.lang.NullPointerException at com.sapportals.wcm.repository.manager.reporting.reports.PropertyPropagationReport.getPropagationInfo(PropertyPropagationReport.java:586) at com.sapportals.wcm.repository.manager.reporting.reports.PropertyPropagationReport.getReportInfo(PropertyPropagationReport.java:539) at com.sapportals.wcm.repository.manager.reporting.reports.PropertyPropagationReport.execute(PropertyPropagationReport.java:523) at com.sapportals.wcm.repository.manager.reporting.reports.PropertyPropagationReport.execute(PropertyPropagationReport.java:482) at com.sapportals.wcm.repository.manager.reporting.monitor.ReportComponent$ReportWrapper.execute(ReportComponent.java:160) at com.sapportals.wcm.service.reporting.scheduler.ReportScheduler$Runner.run(ReportScheduler.java:197)
    and the properties are not updated.
    Then I ran the report on the "/documents" folder, this is working fine.
    The only difference between the two folders is that my CM repository is "Version Enable" and not the "/documents".
    So I disabled the versioning in my CM repository, and the properties are properly updated.
    This is not a solution, as I do have a hierarchy of about 5000 folders, and I can't envisage to manually disable the versioning for all folders and then reanable them.
    Did someone have an idee ?
    Thank you for your support.
    Vincent

    To keep you updated :
    I post an OSS message, and SAP reconized this was due to an error.
    The error will be corrected and shipped in SPS 14
    Vincent

  • Ask the Expert: Enterprise Design and Deployment of Multicast

    Welcome to this Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about Cisco enterprise design and deployment of multicast solutions.
    The enterprise world is evolving to be overcome with large throughput capacity and record numbers of users connecting to the network. Mechanisms such as multicast, which allows for a minimization of throughput for multiple users subscribing to the same stream, are a welcome addition. Applications such as enterprise all-hands video streaming, trading applications, mass operating system deployment, and custom implementations can put a strain on the network if done via unicast. Multicast can minimize this strain by replicating a single stream for subscription by multiple parties who would like to receive the same information. For this Ask the Expert event, Patrick Lloyd, CCIE R&S no. 39750 and a network consulting engineer with Cisco’s Enterprise Advanced Services Delivery Team, will answer questions about multicast design and implementation based on best practices and prior experience with large enterprise deployments.
    Patrick Lloyd is a network consulting engineer for Cisco’s Enterprise East Advanced Services team, working to support and lend his expertise to a number of financial, insurance, healthcare, and consulting customers. In his four years of experience, he has lent design expertise to multicast networks ranging from 500 Cisco devices and 20K users to upward of 4500 Cisco devices and 50K users. Patrick is certified with his Cisco Certified Internetworking Expert no. 39750 in the Routing and Switching track and also has achieved certification in CCNA Security and Securing Cisco Routers and Switches as part of the CCNP Security track. Patrick received his MS degree in networking and systems administration from Rochester Institute of Technology in Rochester, NY, and his BS degree in computer science from Eastern Connecticut State University. He frequently gives customer-based knowledge transfers.
    Remember to use the rating system to let Patrick know if you have received an adequate response.
    Because of the volume expected during this event, Patrick might not be able to answer every question. Remember that you can continue the conversation in Network Infrastructure under the subcommunity WAN, Routing & Switching shortly after the event. This event lasts through September 12, 2014. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

    Thanks for the question!  This is actually a good one that I've encountered with a couple customers in the past, the tradeoff between a flood and prune type design, as opposed to the shared tree -> shortest path tree sequence.  As per Cisco best practice, we are actively trying to get customers to implement sparse mode, going so far as to not support PIM dense mode in our data center products.  And for good reason!  The last thing you want is a chatty protocol within the data center which is flooding traffic out to receivers who may or may not be interested in it every 3 minutes.  Instead, you're much better off having interested receivers join a stream, have your RP connect the interested senders and receivers, and then transition to the shortest path between source and destination.
    That being said, if you're studying for CCIE or looking to get experience in how multicast works, dense mode should at least be a lab exercise!
    Links for reference as to the difference in PIM modes:
    Dense Mode Operation:
    http://www.cisco.com/en/US/docs/ios/ipmulti/configuration/guide/imc_pim_dense_rfrsh.pdf
    Pim Modes and explanation of each:
    http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_53_se/configuration/guide/3750xscg/swmcast.html#wp1077051
    A great slide deck to learn the operation of multicast:
    https://www.ciscolive.com/online/connect/sessionDetail.ww?SESSION_ID=6633&backBtn=true
    Troubleshooting Multicast:
    https://www.ciscolive.com/online/connect/sessionDetail.ww?SESSION_ID=78578&backBtn=true
    Let me know if this is the answer you're looking for!

  • Document Permissions Question

    Is there a way to remove access to a KM document or folder from an user, group, or role?
    I don't want to remove the Everyone group and then re-add who should have access if it is a smaller set who shoud not have access.
    Any thoughts?
    Message was edited by: Mike Shroyer

    Hi Ladislav,
    There is a KM report named Propagation of Properties, under Content Administration -> KM Content -> Toolbox -> Reports -> Mass Operations -> Propagation of Properties, which allows you to propagate the existing properties of a resource, to other folders and their contents or to individual documents.
    Refer to [http://help.sap.com/saphelp_nw04/helpdata/EN/44/8d6f90d85c6572e10000000a11466f/content.htm] for more information on how to use this KM report.
    Hope this Helps.
    Regards,
    Adren

  • KM Content Reports

    Hi,
    i´m working with NetWeaver and the Knowledge Management-Content. I´m looking for any idea to implement new reports (additionaly to reports in Mass Operations like copy, delete). Which kind of programming language i have to use it? IDE or something? how have to be it implemented? is it possible?
    Thanks for any idea
    best regards
    Christoph

    Hi Denis,
    yes I followed this blog completely. The report appeared in the Reporting Repository yesterday. But now the hole Content from KM disapeared. Also in path Content Administration -> KM-Content -> Reports my report don´t appear. This is very confusing and frustrating. I use SAP NetWeaver Developer Studio Version: 7.0.11. Additionaly I discovered a help reference http://help.sap.com/saphelp_nw04s/helpdata/en/42/631A15C81F0BCCE10000000A114CBD/frameset.htm but also without result.
    First of all I have to restore the KM-Content.
    Ok, the report is deployed. Following Exception is printed:
    java.lang.Exception:     The delivered configuration object "fy" in folder "/cm/repository_managers/reports" does not have the corresponding configclass "com.sybit.km.reporting.KMReporting"; it cannot be loaded!
    fy -> Configuration XML
    KMReporting -> Implementation of the Interface
    Do you know what means "correspondig configclass"?
    Best regards
    Christoph
    Edited by: Christoph Maute on Aug 14, 2008 5:29 PM

  • Re : Enhancement Spot WF_BWP_DYN_COLUMN

    Hi,
    I have implemented the enhancement "WF_BWP_DYN_COLUMN" to add a dynamic column in SAP Inbox ( Workflow ).
    However during the execution the enhancement point is not called.
    Can you some one help me on this.
    Regards,
    Vijay

    For anyone wanting to implement this BADI themselves: DO NOT USE IT, unless you are doing so to increase performance.
    See SAP Note  1903991: Condition for the implementation of SBWP BAdIs. This BADI as well as WF_BWP_OBJ_ATTRIBUTE are ONLY called for mass operations, such as a refresh of the inbox. What this means is that when you open an item and then return to the inbox, that item's values are refreshed by evaluating the expressions in SWL1. This results in mismatched values appearing in the inbox and possibly elsewhere.
    I discovered this the hard way after several hours of programming were wasted to override formatting for dynamic columns. Apparently the only solution is to create additional dyncols for display fields.

Maybe you are looking for