Initiater for Role removal.

Hi,
I need some update/input w.r.t Role removal Initiator. While configuring the role removal is it possible to use the role status in the initiator? If not how to identify this role is only for the role removal.
Normally we use to put only one stage for Role removal. In the config, no where we are having automatic check for the request is only for the Role removal. So we have to trust that particular stage owners. As per the CUP automation check is it possible to validate this?
Thanks in advance.
Regards,
Vasantha Kumar.

Hi Justin
I'm assuming you are involved in or victim of a security access review. I'm usually one of those security guys asking for role or transaction removal and you are the main contact in the business coordinating the changes.
The process of remediation will possibly consist of checking which transactions are causing segregation of duties conflict, if they are used or not and removing one side of the conflict by removing an unused transaction.
It shouldn't require the entire contents of a role to be removed - rather swapping role A for role B without a transaction or two.
Removing transactions that aren't used can have more subtle implications which hopefully are found during UAT but is usually missed until used in anger. This what support is for after go live.
Saying all that and depending on your time and skills, you could ask for access to the security person's test user in dev or qas where they are working to run transaction SUIM on transaction for user following the proposed changes and compare that to the actual access of the real affected user in prod. If you can get access to the informer tab in virsa you can use the standard simulation reports to also check the resulting conflicts which will help you talk to the business and advise on actions available. There should be role owners involved in all this as they have to owner the result: expect a request for these for CUP later on
If you can retain control and approval of the (controlled) changes being made to users you will have a better understanding of what is happening, catch potential errors and mediate between security and the business - you have an important task!
Ask for some basic training in standard SAP reports - the security team should be more than grateful for your input
Crikey that was hard typing on an iPhone!
Cheers
Edited by: David Berry on Jan 11, 2011 8:17 PM

Similar Messages

GRC 10.0 Mass Role removal

Hello all,
we are using GRC AC 10.0 (SP14). Today I found out that the access removal for multiple user is not working. The role removal for one User is working fine. But for multiple user who all have the same role it is not possible to select this existing role. Is it a standard in GRC AC or did I miss some config parameters?
The button "ADD" (yellow) is not working, and there is no button "Existing assignements". Please let me know, whether this settings are standard or not.
Many thanks,
regards
Sabrina

Sabrina,
Multi user requests have been quite problematic. I encourage you to search for corrections; we had to implement numerous corrections for multi-user requests. Right now, though, multi user requests for role removal using the "Existing Assignment" function are working for us (SP12 with a lot of corrections from SP13 and SP14).
I should mention that our Provisioning Log in the closure notification only lists the first user, but all three accounts in my test request just now had the role removed as requested. We have treated that as a training issue with our request submitters for the time being. We implemented Note 1727135 to correct that issue and it made matters worse, so we had to revert.
Good luck!
Gretchen

OIM: Trigger for add/remove Role?

Is there any out of the box way to attach a trigger/event handler to a target resource Process Definition such that code can be executed when an OIM Role is added/removed from the parent OIM User record?
I've gotten as far as the following:
I can hook into the "Add/Remove Role" event via event handlers
From the event handlers in #1 above, I can add process tasks such as "OIM Role Added", "OIM Role Removed" to the user's resources using the OIM API addProcessTaskInstance method.
The issue is I need to know which Role was added/removed in the process tasks and there does not seem to be a way to pass any data dynamically into the task when it's created. I thought about storing the added/removed Role in a UDF; however, this doesn't scale well when multiple Roles are being added/removed.
Is there a better way to do this?
Thanks.

You can refer to Doc ID 1461252.1 for sample code.
~J

Error while updating a custom Windows Azure Diagnostics configuration xml from powershell. "Invalid update to extension reference for role"

I am attempting to upload a manually edited WADConfig xml to my VM. The WAD service is functioning correctly, I needed to add some custom WinEventLogs. The prescribed steps result in an error.
What am I overlooking?
I am following these instructions:
Step 5: Remotely install Diagnostics on your Azure Virtual Machine
azure.microsoft.com/en-in/documentation/articles/cloud-services-dotnet-diagnostics/#virtual-machine
$storage_name = "wadexamplevm"
$key = "<StorageAccountKey>"
$config_path="c:\users\<user>\documents\visual studio 2013\Projects\WadExampleVM\WadExampleVM\WadExample.xml"
$service_name="wadexamplevm"
$vm_name="WadExample"
$storageContext = New-AzureStorageContext
-StorageAccountName $storage_name -StorageAccountKey $key
$VM1 = Get-AzureVM
-ServiceName $service_name -Name $vm_name
$VM2 = Set-AzureVMDiagnosticsExtension
-DiagnosticsConfigurationPath $config_path
-Version "1.*"
-VM $VM1 -StorageContext $storageContext
$VM3 = Update-AzureVM
-ServiceName $service_name -Name $vm_name
-VM $VM2.VM
Unfortunately, I am receiving this error:
Update-AzureVM : BadRequest: Invalid update to extension reference for role: XXXXXX and reference: IaaSDiagnostics.
What's missing from the above script?

Hi,
Since Azure SDK 2.5 uses the extension model the diagnostics extension, the configuration and the connection string to the diagnostic storage are no longer part of the deployment package and cscfg. All the diagnostics configuration is contained within the
wadcfgx. The advantage with this approach is that diagnostics agent and settings are decoupled from the project and can be dynamically enabled and updated even after your application is deployed.
Due to this change some existing workflows need to be rethought – instead of configuring the diagnostics as part of the application that gets deployed to each environment you can first deploy the application to the environment and then apply the diagnostics
configuration for it. When you publish the application from Visual Studio this process is done automatically for you. However if you were deploying your application outside of VS using PowerShell then you have to install the extension separately through
PowerShell.
There PowerShell cmdlets for managing the diagnostics extensions on a Cloud Service are -
Set-AzureServiceDiagnosticsExtension
Get-AzureServiceDiagnosticsExtension
Remove-AzureServiceDiagnosticsExtension
You can use the Set-AzureServiceDiagnosticsExtension method to enable diagnostics extension on a cloud service. One of the parameters on this cmdlet is the XML configuration file. This file is slightly different from the diagnostics.wadcfgx file. You can
create this file from scratch by either following the article that you are referring to or you can modify the wadcfgx file and pass in the modified file as a parameter to the powershell cmdlet.
To modify the wadcfgx file –
Make a copy the .wadcfgx.
Remove the following elements from the Copy:
<DiagnosticsConfiguration xmlns="http://schemas.microsoft.com/ServiceHosting/2010/10/DiagnosticsConfiguration">
<PrivateConfig xmlns="http://schemas.microsoft.com/ServiceHosting/2010/10/DiagnosticsConfiguration">
<StorageAccount name=" " endpoint="https://core.windows.net/" />
</PrivateConfig>
<IsEnabled>false</IsEnabled>
</DiagnosticsConfiguration>
Make sure the top of the file still has xml version and encoding –
<?xml version="1.0" encoding="utf-8"?>
Effectively you are stripping down the Wadcfgx to only contain the <PublicConfig> section and the <?xml> header. You can then call the PowerShell cmdlet along with the appropriate parameters for the staging slots and roles:
$storage_name = ‘
<storagename>’
$key= ‘<key>’
$service_name = '<servicename>'
$public_config = '<thepublicconfigfrom_diagnostics.wadcfgx>'
$storageContext = New-AzureStorageContext –StorageAccountName $storage_name –StorageAccountKey $key
Set-AzureServiceDiagnosticsExtension -StorageContext $storageContext -DiagnosticsConfigurationPath $public_config –ServiceName $service_name -Slot ‘Staging’ -Role ‘WebRole1’
Hope this helps !
Regards,
Sowmya

SCCM 2012 SP1 - SUP role removal or reinstall issue resolution

Hello all,
I just want to share a fix regarding SUP removal (re-install) issue.
I think I found a bug regarding SUP role removal/re-install.
When I try to re-install secondary SUP on a site system, when I remove SUP via AdminUI – Administration – Site - Site Systems, it gets removed from the list but I get the following errors, which makes (re-)installation fail.
Severity
Type        Site code
Date / Time
System     Component
Message ID
Description
Information
Milestone PS1
4/12/2013 10:28:09 PM
SMS02SS401.ICBCAGENT.NET
SMS_WSUS_CONTROL_MANAGER
1021        Site Component Manager detected that this component should be deinstalled from this site system. Site Component Manager will attempt to deinstall the component every 60 minutes. Site Component
Manager will abort the deinstallation if it fails to succeed after 1440 minutes.
Information
Audit        PS1
4/12/2013 10:27:58 PM
sms02ss401.icbcagent.net
Microsoft.ConfigurationManagement.exe 30038
User "ICBC\ll1v3" deleted the role of the Windows NT Server "\\SMS02SS401.ICBCAGENT.NET" as a Software update point in the site control file at site PS1.
Error
Milestone PS1
4/12/2013 10:15:45 PM
SMS02SS401.ICBCAGENT.NET
SMS_WSUS_CONTROL_MANAGER
1020
Site Component Manager failed to reinstall this component on this site system.
Solution: Review the previous status messages to determine the exact reason for the failure. Site Component Manager will automatically retry the reinstallation in 60 minutes. To force Site Component Manager to immediately retry the reinstallation, stop
and restart Site Component Manager using the Configuration Manager Service Manager.
Error
Detail       PS1
4/12/2013 10:15:45 PM
SMS02SS401.ICBCAGENT.NET
SMS_WSUS_CONTROL_MANAGER
580
Could not delete the registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\SMS_EXECUTIVE\Threads\SMS_WSUS_CONTROL_MANAGER"
on computer SMS02SS401.ICBCAGENT.NET. The operating system reported error 997: Overlapped I/O operation is in progress.
Information
Milestone PS1
4/12/2013 10:15:40 PM
SMS02SS401.ICBCAGENT.NET
SMS_WSUS_CONTROL_MANAGER
1018        Site Component Manager is reinstalling this component on this site system.
Error
Detail       PS1
4/12/2013 9:14:39 PM
SMS02SS401.ICBCAGENT.NET
SMS_WSUS_CONTROL_MANAGER
580
Could not delete the registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\SMS_EXECUTIVE\Threads\SMS_WSUS_CONTROL_MANAGER" on computer SMS02SS401.ICBCAGENT.NET. The operating system reported error 997: Overlapped
I/O operation is in progress.
In fact, the registry is under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_EXECUTIVE\Threads\SMS_WSUS_CONTROL_MANAGER
When I trigger uninstall via AdminUI, it failed to remove, thus it think that it is already there when I try to re-install it.
The fix was to manually remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_EXECUTIVE\Threads\
SMS_WSUS_CONTROL_MANAGER registry key then re-try.
Thanks,
Young-
YPae

Yes!!! this worked for me. I have SCCM set up with a number of untrusted forests with a firewall in between my SCCM servers and the untrusted forests. The firewall went down and half of my site servers in the untrusted forests were giving
the "operating system reported error 997: Overlapped I/O operation is in progress" on a number of their components. Finally found this, deleted the reg keys under "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_EXECUTIVE\Threads"
and that allows SCCM to reinstall.

Refund for a removed app?

Hello everyone, this is my first discussion thread here.
Itroductions later, can you get a refund for a removed app that you bought?
I recently purchased a app by the name of xRec that was removed from the app Store today, one minute it was there next second, it was gone.
The app allowed you to record your home screen on your iPod/iPhone and was removed today.
It originally cost 1.99 and I was wondering if Apple will refund me my money and furthermore, does Apple refund people of apps that were removed?
Thank you.

The apps/iTunes store staff are usually very good and considerate of users.
You can always elevate your concern to Apple headquarters or another arm of the company found on: http://www.apple.com/contact
There may be a very good reason why the app was removed, but it would definitely have been helpful to inform or respond quickly to users who purchased the app as to why it was removed.
Good luck and hopefully you will get a satisfactory response soon.

OIM 11g R1 - Container for Roles

Hi,
is it possible to create container for roles?
For Example:
Container1: RoleA, RoleB, RoleC
Container2: RoleV, RoleY, RoleZ
The reason is, i want to create authorization policies, which allows the user to assign specials roles. The problem is, that a lot of roles will be added during the operation. This means, if a new role will be created, i have to edit the authorization policy
The best way is, i assign a Role-Container to the authorization policy. If i create a new role, i add the role to the special container.
Is this possible in OIM 11g R1?
Edited by: 960944 on Apr 3, 2013 5:18 AM

Yes, you can do that using authorization policy.
Try this:
Create a Role called 'X'
Create a Authorization Policy of Role Management Entity Type called 'X Role Authz Policy' and under the Permission tab:
Grant Modify Role Membership, Search for ROle, View Role Detail and View Role Membership
Under Data Constraints: Add all the roles that a user can self assign except SYS ADMIN role.
Under Assignemnt: Add Role 'X'
Save and apply to test it.
You can have a look at the default Role Management All Users Policy for reference.
Regards,
Sunny

RFC- Bapi - For Role Maintenance (Single and Composite)

We are in the process of developing an ASP.NET web application which will be used to raise requests for user and role creations in SAP.
We will be making use of Sonic ESB to update SAP through IWAY SAP adapter.
IWAY SAP adapter supports RFCs, Bapis & IDocs.
We are aware of RFCs that could be used for user creation, updating and deletion.
We have NOT come across any RFCs or Bapis for role maintenance
1) We would need RFCs for the following requirements:
1) To create a new role (single or composite role ).Creating a new role would include adding transactions to a role, deriving from an existing role or assigning more than one role to another role.
2) To update a role
3) To delete a role.
4) To get the details of an existing role
If there are no RFCs for the above requirement, will we need to create a custom RFC?
If we need to create a custom RFC, are there any transactions already available for the above requirements so that we could write a RFC wrapper?
2) Are there any RFCs that would give us the complete list of roles (single or composite) in an SAP system?
3) Are there any RFCs that would give us the complete list of transactions in an SAP system?
Presently for 2) & 3) , we are making use of RFC_READ_TABLE to read SAP tables to get the list of roles and transactions.
Thanks for your answers

Hi,
check these FM , i dont know it will work for u or not.
BAPI_USER_ACTGROUPS_ASSIGN     User: Change entire activity group assignment
BAPI_USER_ACTGROUPS_DELETE     User: Delete entire activity group assignment
BAPI_USER_CHANGE               Change User
BAPI_USER_CLONE                Create User with Template in Another System
BAPI_USER_CREATE
BAPI_USER_CREATE1              Create a User
BAPI_USER_DELETE               BAPI to Delete a User
BAPI_USER_DISPLAY              Display Users
BAPI_USER_EXISTENCE_CHECK      Check a user exists
BAPI_USER_GETLIST              Search for Users
BAPI_USER_GET_DETAIL           Read User Details
BAPI_USER_INTERNET_CREATE      Create a user in the Internet
BAPI_USER_LOCACTGROUPS_ASSIGN Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_LOCACTGROUPS_DELETE Delete Activity Group Assignments in the Dependent Systems
BAPI_USER_LOCACTGROUPS_READ    Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_LOCK                 Lock User
BAPI_USER_LOCPROFILES_ASSIGN   Change Profile Assignment for Dependent Systems from Central System
BAPI_USER_LOCPROFILES_DELETE   Delete Profile Assignments for Dependent Systems
BAPI_USER_LOCPROFILES_READ     Change Activity Group Assignment for Dependent Systems from Central Sy
BAPI_USER_PROFILES_ASSIGN      User: Assign profiles
BAPI_USER_PROFILES_DELETE      User: Delete All Profile Assignments
BAPI_USER_UNLOCK               Unlock user
Reward points if useful..
Regards
Nilesh

RFC for role maintenance

We are in the process of developing an ASP.NET web application which will be used to raise requests for user and role creations in SAP.
We will be making use of Sonic ESB to update SAP through IWAY SAP adapter.
IWAY SAP adapter supports RFCs, Bapis & IDocs.
We are aware of RFCs that could be used for user creation, updating and deletion.
We have NOT come across any RFCs or Bapis for role maintenance
1) We would need RFCs for the following requirements:
1)       To create a new role (single or composite role ).Creating a new role would include adding transactions to a role, deriving from an existing role or assigning more than one role to another role.
2)       To update a role
3)       To delete a role.
4)       To get the details of an existing role
If there are no RFCs for the above requirement, will we need to create a custom RFC?
If we need to create a custom RFC, are there any transactions already available for the above requirements so that we could write a RFC wrapper?
2) Are there any RFCs that would give us the complete list of roles (single or composite) in an SAP system?
3) Are there any RFCs that would give us the complete list of transactions in an SAP system?
Presently for 2) & 3) , we are making use of RFC_READ_TABLE to read SAP tables to get the list of roles and transactions.
Thanks for your answers

Hi Nicole,
I think you are in the wrong forum.... For Guided Procedures, this is only about process roles and not roles used in the ABAP Stack.
Best regards,
David

EtreCheck version: 2.1.5 (108) Report generated 4 January 2015 14:29:26 GMT Click the [Support] links for help with non-Apple products. Click the [Details] links for more information about that line. Click the [Adware] links for help removing adware

My Mac is very slow and applications take a long time to load, especially Safari and iTunes. Please help.    I have run the Etrecheck report and these are results.
Thanks Pat
EtreCheck version: 2.1.5 (108)
Report generated 4 January 2015 14:29:26 GMT
Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Adware] links for help removing adware.
Hardware Information: ℹ️
iMac (21.5-inch, Mid 2011) (Verified)
iMac - model: iMac12,1
1 2.7 GHz Intel Core i5 CPU: 4-core
4 GB RAM Upgradeable
BANK 0/DIMM0
2 GB DDR3 1333 MHz ok
BANK 1/DIMM0
2 GB DDR3 1333 MHz ok
BANK 0/DIMM1
empty empty empty empty
BANK 1/DIMM1
empty empty empty empty
Bluetooth: Old - Handoff/Airdrop2 not supported
Wireless: en1: 802.11 a/b/g/n
Video Information: ℹ️
AMD Radeon HD 6770M - VRAM: 512 MB
iMac 1920 x 1080
System Software: ℹ️
OS X 10.10.1 (14B25) - Uptime: 0:32:50
Disk Information: ℹ️
ST31000528AS disk0 : (1 TB)
EFI (disk0s1) <not mounted> : 210 MB
Macintosh HD (disk0s2) / : 999.35 GB (717.51 GB free)
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
OPTIARC DVD RW AD-5690H
USB Information: ℹ️
Apple Inc. FaceTime HD Camera (Built-in)
Seagate Expansion Desk 2 TB
EFI (disk1s1) <not mounted> : 210 MB
Seagate Expansion Drive (disk1s2) /Volumes/Seagate Expansion Drive : 2.00 TB (1.66 TB free)
Apple Inc. BRCM2046 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Inc. iPhone
Apple Internal Memory Card Reader
Apple Computer, Inc. IR Receiver
Thunderbolt Information: ℹ️
Apple Inc. thunderbolt_bus
Gatekeeper: ℹ️
Mac App Store and identified developers
Kernel Extensions: ℹ️
/Library/Application Support/Avast/components/fileshield/unsigned
[loaded] com.avast.AvastFileShield (2.1.0 - SDK 10.9) [Support]
/Library/Application Support/Avast/components/proxy/unsigned
[loaded] com.avast.PacketForwarder (2.0 - SDK 10.9) [Support]
Problem System Launch Agents: ℹ️
[failed] com.apple.syncservices.SyncServer.plist
Launch Agents: ℹ️
[loaded] com.avast.userinit.plist [Support]
[running] com.epson.Epson_Low_Ink_Reminder.launcher.plist [Support]
[loaded] com.epson.esua.launcher.plist [Support]
[running] com.epson.eventmanager.agent.plist [Support]
[loaded] com.oracle.java.Java-Updater.plist [Support]
[running] com.trusteer.rapport.rapportd.plist [Support]
Launch Daemons: ℹ️
[loaded] com.adobe.fpsaud.plist [Support]
[loaded] com.avast.init.plist [Support]
[loaded] com.avast.uninstall.plist [Support]
[failed] com.avast.update.plist [Support]
[loaded] com.microsoft.office.licensing.helper.plist [Support]
[loaded] com.oracle.java.Helper-Tool.plist [Support]
[running] com.trusteer.rooks.rooksd.plist [Support]
User Launch Agents: ℹ️
[loaded] com.adobe.ARM.[...].plist [Support]
[invalid?] com.avast.home.userinit.plist [Support]
[running] com.microsoft.LaunchAgent.SyncServicesAgent.plist [Support]
User Login Items: ℹ️
iTunesHelper ApplicationHidden (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Internet Plug-ins: ℹ️
FlashPlayer-10.6: Version: 16.0.0.235 - SDK 10.6 [Support]
Default Browser: Version: 600 - SDK 10.10
AdobePDFViewerNPAPI: Version: 11.0.07 - SDK 10.6 [Support]
AdobePDFViewer: Version: 11.0.07 - SDK 10.6 [Support]
DivXBrowserPlugin: Version: 2.2 [Support]
Flash Player: Version: 16.0.0.235 - SDK 10.6 [Support]
OVSHelper: Version: 1.1 [Support]
QuickTime Plugin: Version: 7.7.3
JavaAppletPlugin: Version: Java 8 Update 25 Check version
Safari Extensions: ℹ️
wrc [Installed]
3rd Party Preference Panes: ℹ️
DivX [Support]
Flash Player [Support]
Flip4Mac WMV [Support]
GoToMyPC Preferences [Support]
Java [Support]
Trusteer Endpoint Protection [Support]
Time Machine: ℹ️
Skip System Files: NO
Auto backup: YES
Volumes being backed up:
Macintosh HD: Disk size: 999.35 GB Disk used: 281.84 GB
Destinations:
Seagate Expansion Drive [Local]
Total size: 2.00 TB
Total number of backups: 78
Oldest backup: 2013-07-28 18:09:06 +0000
Last backup: 2015-01-04 14:29:38 +0000
Size of backup disk: Adequate
Backup size 2.00 TB > (Disk used 281.84 GB X 3)
Top Processes by CPU: ℹ️
      2% WindowServer
      1% mds
      0% fontd
      0% mds_stores
      0% com.avast.daemon
Top Processes by Memory: ℹ️
120 MB Safari
112 MB com.avast.daemon
94 MB com.apple.WebKit.WebContent
56 MB spindump
52 MB mds_stores
Virtual Memory Information: ℹ️
479 MB Free RAM
1.56 GB Active RAM
1.11 GB Inactive RAM
904 MB Wired RAM
5.37 GB Page-ins
75 MB Page-outs
Diagnostics Information: ℹ️
Jan 4, 2015, 01:57:18 PM Self test - passed
Standard users cannot read /Library/Logs/DiagnosticReports.
Run as an administrator account to see more information.

patbythesea wrote:
Can I assume that with my Mac I do not need any additional virus protection software? If I do, what should I use?
See my Mac Malware Guide for help on protecting yourself from malware. You generally don't need anti-virus software.
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

IPhoto for iOS removes the GPS exif data from the photo after an edit

iPhoto for iOS removes the GPS exif data from the photo after an edit
Using the iPhone camera, I take a photo and then I want to make the photo a little brighter.
So, I edit a photo using iPhoto for iOS and then save the photo back to the camera roll.
Now, I might want to see where that photo was taken via another app (like Photo Mapo) or on the map using the Photos app, or even the Mac iPhoto app.
However, the GPS data has been removed. Looks like all of the other exif data is still in the photo.
Why not just have a feature to remove the GPS data if the user wants? no reason to remove it for them.
The user explictily chose to have location services turned on so the GPS data would be in the photo.
Is this a bug?
Thanks,
Brian.

First thing to try is a reboot of your iPad. Press and hold the Home and Sleep buttons simultaneously ignoring the red slider until the Apple logo appears. Let go of the buttons and let the iPad restart. See if that fixes your problem.
None of my cameras has a GPS function so I never see that data in the info of a photo in iPhoto for iOS. But I do see the map choice to set a location for the photo. Perhaps a reboot will fix this for you.

How to Initiate For Creating Business Package.

Hi all,
We donu2019t have NWDI setup in our landscape; therefore I would like to know that how i can initiate for creating business package of custom specific application development using Web Dynpro JAVA and DB Oracle. If anyone has idea about this type of in-house development, please suggest.

Hi Gautam
Please setup NWDI for creating custom business pachage.
Download DTR, CBS and CMS same patch level as your Server and delpoy.
then Create Software component in System Landscape Directory(SLD) and create custom business package track in the CMS for development using Web Dynpro JAVA
Hope this will help.
Thanks
Arun

Report in DM module (ISU)for Meter removed that have debts &security charge

I am beginner in SAP ISU, looking forward for solution , I have a techno-functional task- "I need to develope a report in DM module(ISU) for Meter removed that have debts and security charge with generalised Requirement.
Moderator message: please work yourself first on your requirement.
Edited by: Thomas Zloch on Feb 20, 2012

I have just experiences the "beep, beep, beep" after a hard crash.
The computer is overheating. The RAM gets hot and everything crashes.
The system will not restart, all I get is "beep, beep, beep.....beep, beep, beep.....beep, beep, beep.....beep, beep, beep.....beep, beep, beep.....beep, beep, beep.....beep, beep, beep.....beep, beep, beep"
I pulled the ram, and switched the chips around. The system is back up without a problem so far.

OIM 11gR1 : Parallel approval for role assignment.

Hi,
I'd like to add custom attributes to a role : "District security officer" and "Department security officer" (Can those be used for searching users? -- i.e. users lookup)
When the role is to be assigned to a user, I'd like the workflow engine to open tasks for the members entered on those custom attributes.
Also, Is it possible to assign a Role instead of the users in the custom attributes ?
Meaning, Approving user assignment of a role named "Role A" will be done by users that belong to "Role_A_Approvers".
Will appreciate pointers to the online docs, I've search and didn't find information related to the usecase I've described.
Thanks,
Meni,

Bikash Bagaria wrote:
Meni wrote:
Hi,
I'd like to add custom attributes to a role : "District security officer" and "Department security officer" (Can those be used for searching users? -- i.e. users lookup)
When the role is to be assigned to a user, I'd like the workflow engine to open tasks for the members entered on those custom attributes.Try modifying the dataset. But I think there was an issue which someone reported here which said that you cannot add additional attributes to the role dataset. Logically it makes sense because there is no custom attribute for role in OIM so dataset should not allow it either.
I've noticed that the design console allows adding custom attributes to roles.
This can be done via Administration --> User Defined Field Definitions --> UGP (Table name).
Once a field is added, you'll need to choose "Properties" and add a "Visible Field = true" prop to the attribute chosen.
This will add a custom attributes section where your attributes will be shown.
Question is how you can add a "search users" lookup instead of plain string for this custom attribute,
and how those attributes will find their ways into the BPEL composite where business decisions based on those attributes may be taken (assign task per this attribute for an example).
Also, Is it possible to assign a Role instead of the users in the custom attributes ?
Meaning, Approving user assignment of a role named "Role A" will be done by users that belong to "Role_A_Approvers".You can create request for multiple roles in a single request and in your approval process you need to dynamically set the human task assignee based on the role selected. You also need to attach the approval process to orchestration level so that it generates a separate child request for each role selected.
I'm not sure I understand how the proposed approach helps avoid the decoupling of users to role admins attribute.
The intention was to have two roles, "Role_A" and "Role_A_Approver" where people that belong to "Role_A_Approver" will be assigned workflow tasks whenever Role_A is to be granted to end-users.
Currently, each role has a "Role Admin" attribute, this attribute however holds a user and not a container of users (role)..
Will appreciate pointers to the online docs, I've search and didn't find information related to the usecase I've described.
All about requests
Thanks,
Meni,-Bikash

SAP Scripts for Stock Removal and Stock Placement ?

Hi All,
Can you please let me know what are the SAP script names and Transaction codes for Stock Removal and Stock Placements ?
Thanks,
Raj

Hi
Tcode is MIGO only (select Goods receipt) and mvt type as
Putaway (305, 315, and so on)
Stock removal (303, 313, and so on)
Transfer posting (301, 311, and so on)
regards
Yogesh

Initiater for Role removal.

Similar Messages

Maybe you are looking for