Let end user request a role

I want my end users to be able to request roles for themselves.
Is there a out-of-the-box way to do this, or do I have to implement it myself?
If I have to do it myself, please point me in the right direction.
Thanks in advance
Stefan

Hi,
Thnk u for u r quick reply.....
i am using... IDM8.1
I will Expain u the problem clearly...
I created an ITRole(IT1) and assigned AD as optional resource.After tht i created Business role(B1) and assigened the ITRole(IT1) to tht roleB1.I assigned the B1 to the user . But i observed tht the resource(AD) is not Assigned to the user.So my question is how to assign the AD to tht user..one more surprising thing is the AD resource is not there in the user's available resources list also(End user and Admin interfaces).Am i doing anything wrong??
Tnx in advance......
Regards,
Kavitha

Similar Messages

Let end user to set up the query

Hi all!
Is there a way to let end user to set up a query/report with forms?
= users can use a form (whit predefined values) to determine which column(s) shows in the result and can add filters before submit.
Because a cube is stored in relational tables i think it's not an olap question.
But here is why i asked this:
I make an application that query an olap cube. I can make reports with apex from the cube view and from dimension views. But i want to let users to select from the available dimensons and measures and set filters on selected dimensions (on first page) using a form. When user submit the form the second page shows the result.
Thanks
Edited by: qenchi on 2009.08.09. 7:27

Hi,
This is what I've done in that application example.
1 - I have two pages. Page 1 is the select columns and filters page and Page 2 is the report
2 - On page 1, I have created a PL/SQL page process, called P1_CREATE_COLLECTION, that runs "Before Header". This is unconditional and has a Source Process of:
BEGIN
IF NOT APEX_COLLECTION.COLLECTION_EXISTS('FILTERING') THEN
APEX_COLLECTION.CREATE_COLLECTION_FROM_QUERY('FILTERING', 'SELECT COLUMN_NAME, DATA_TYPE, ''Y'' SHOW_YN, '''' FILTER FROM ALL_TAB_COLUMNS WHERE OWNER = ''#OWNER#'' AND TABLE_NAME = ''EMP3'' ORDER BY COLUMN_ID');
END IF;
END;ALL_TAB_COLUMNS contains records for all columns in all tables. In this example, I'm retrieving a list of all of the columns in the EMP3 table (which is just a copy of EMP plus a few extra fields). I'm also getting the data type for the column, setting the "Show" value to Y and starting with an empty filter string for each column. The actual data is retrieved into a collection called FILTERING. In this way, I can store all of the user's selections for use on Page 2. The IF test just ensures that I don't overwrite the collection if it already exists - that is so that I can keep any settings that the user made when they were last on Page 1.
This collection gives allows me to store the following:
SEQ_ID - the collection's sequence ID
C001 - The COLUMN_NAME
C002 - The DATA_TYPE
C003 - The Y/N flag for SHOW_IN_REPORT
C004 - The filter to be applied to the column
3 - I created a "SQL Query (updateable report)" report. To do this you need to create a report using the SQL Wizard - any SQL statement will do - then you can change the report type from "SQL Query" to "SQL Query (updateable report)". I haven't found another way to do this.
The report's SQL was changed to:
SELECT APEX_ITEM.HIDDEN(1, SEQ_ID) || C001 COLUMN_NAME,
C002 DATA_TYPE,
APEX_ITEM.SELECT_LIST(3, C003, 'Yes;Y,No;N') SHOW_IN_REPORT,
APEX_ITEM.TEXT(4, C004) FILTER
FROM APEX_COLLECTIONS
WHERE COLLECTION_NAME = 'FILTERING'
ORDER BY SEQ_IDThis is a "manual tabular form" and is based on the collection created by my process.
4 - I then created a button on the page called P1_CREATE_REPORT. This is just a normal submit button - the branch for this is to Page 2. On the branch, I ticked the option to "reset pagination for this page"
5 - Finally, on Page 1, I created a PL/SQL process, triggered by my button, and in the "On Submit - After Computations and Validations" process point. The Process code for this is:
BEGIN
FOR x IN 1..APEX_APPLICATION.G_F01.COUNT
LOOP
APEX_COLLECTION.UPDATE_MEMBER_ATTRIBUTE(p_collection_name=>'FILTERING', p_seq=>APEX_APPLICATION.G_F01(x), p_attr_number=>3, p_attr_value=>APEX_APPLICATION.G_F03(x));
APEX_COLLECTION.UPDATE_MEMBER_ATTRIBUTE(p_collection_name=>'FILTERING', p_seq=>APEX_APPLICATION.G_F01(x), p_attr_number=>4, p_attr_value=>APEX_APPLICATION.G_F04(x));
END LOOP;
END;This loops through the tabular form after it is submitted and updates the collection with the Y/N Show values and the filters
Now onto Page 2
1 - I created a SQL Query report using *SELECT 1 FROM DUAL". When created, I changed the report type to "SQL Query (PL/SQL function body returning SQL query)" and change the Region Source to the following code:
DECLARE
vSQL VARCHAR2(8000);
vQ CHAR(1);
vSEP1 VARCHAR2(2);
vSEP2 VARCHAR2(6);
BEGIN
vQ := CHR(39);
vSEP1 := '';
vSEP2 := 'WHERE ';
vSQL := 'SELECT ';
FOR x IN (SELECT SEQ_ID, C001, C002, C003, C004 FROM APEX_COLLECTIONS WHERE COLLECTION_NAME = 'FILTERING' ORDER BY SEQ_ID)
LOOP
IF x.C003 = 'Y' THEN
   vSQL := vSQL || vSEP1 || x.C001;
   vSEP1 := ', ';
END IF;
END LOOP;
vSQL := vSQL || ' FROM EMP3 ';
FOR x IN (SELECT SEQ_ID, C001, C002, C003, C004 FROM APEX_COLLECTIONS WHERE COLLECTION_NAME = 'FILTERING' ORDER BY SEQ_ID)
LOOP
IF LENGTH(x.C004) > 0 THEN
   IF x.C002 = 'VARCHAR2' THEN
    vSQL := vSQL || vSEP2 || x.C001 || '=' || vQ || x.C004 || vQ;
   ELSIF x.C002 = 'DATE' THEN
    vSQL := vSQL || vSEP2 || x.C001 || '=TO_DATE(' || vQ || x.C004 || vQ || ',' || vQ || 'DD/MM/YYYY' || vQ || ')';
   ELSE
    vSQL := vSQL || vSEP2 || x.C001 || '=' || x.C004;
   END IF;
   vSEP2 := 'AND ';
END IF;
END LOOP;
RETURN vSQL;
END;This loops through the FILTERING collection twice. The first time to build up a SQL SELECT statement containing all of the columns in EMP3 that the user wants to show
The second loop then builds up a WHERE clause for the statement based on any filters the user wants to apply. I have used the DATA_TYPE values stored in the C004 field to identify the format of the value in the WHERE clause - either VARCHAR2, which puts the string in quotes, DATE, which casts the string as a date using DD/MM/YYYY format and then any other value (which should be NUMBER), which just outputs the value entered.
Note that I've used vQ to hold the quote character (CHR(39)) as I find this easier than trying to work out how many single, double or triple quotes I need to get quotes within the string.
All of this just builds up a string (vSQL) which is returned to Apex at the end of the code so that it can build the report.
Note that I have also ticked the option under the Region Source setting to show "Use Generic Column Names (parse query at runtime only)". This needs to be done as the columns are changeable.
2 - I created a button called P2_BACK_BUTTON which branches back to Page 1
Obviously, this is a very basic example. You could, for instance, go one step further and allow the user to pick the table (SELECT TABLE_NAME FROM ALL_TABLES) or view (SELECT VIEW_NAME FROM ALL_VIEWS). As the final report is being constructed as a string, it doesn't matter how the table/view name is derived. You could also add popups for calendars and calculators, where appropriate, on Page 1.
Andy

CUP 5.3 - Single Sign On fu00FCr end user request screen?

Hi everyone,
Is there any way to achieve Single Sign On in a windows environment using the corporate Active Directory for the END USER REQUEST SCREEN in CUP 5.3?
I am aware of the document "Single Sign-On with SAP BusinessObjects Access Control 5.3" by the SAP GRC RIG (Harleen Kaur) so I know how to achieve Single Sign On for the CUP application itself.
I am also aware of the option to deactivate "end user verification required" in the authentication source definition in CUP.
What our end users are asking for is true single sign on. They would like to enter a request WITHOUT providing network user ID and/or password manually.
Thanks!

Hi Raghu,
Thanks a lot!
We have not yet configured SSO but are in the phase of analyzing our options.
I understood that SSO is only possible for the server:port//AE/index_apr.jsp page in CUP.
What about the end user request screen (server:port/AE)? Will this work with Windows-SSO using SPNEGO? Would I set the authentication source to LDAP or to UME (UME has multiple LDAP as user data source)?
Many thanks and best regards
Patrick

Customizing labels in end user request screen

Hello everyone,
Is it at all possible to customize the labels for various languages in the end user request screen?
I would have assumed those labels were maintained in the "initial system data" files, but they are not.
Specifically, we are trying to change the label "User ID" to "SAP User ID" to make it clear for our end users which user ID this field refers to.
Thanks!

Hi Patrick,
It is not possible to change the filed label name. However, in GRC 10 I infer that End User Personalization (EUP) templates are available that allows you to customize.
Regards,
Raghu

End User Authorizations and Roles

Hi,
What all the authorizations i need to give to an End User, who uses the device.
Is it necessary for the userid to be same in <b>MI Client, MI server, Backend</b> systems.
Let me explain wat an end user does
>logs into MI client
>performs first synchronization
>Executes Mobile Application assigned
>and performs synchronization at the end of the day
rgds,
Kiran

Hi Kiran
Probably I wanst clear with my reply. You need to assign both the above mentioned authorizations to the same user who is performing a sync from the MI Client. S_ME_SYNC is required for the user to perform a sync from MI Client to MI server. S_RFC is required for the same user so that the data can be transferred from MI server to SAP backend and vise versa.
Hope I am clear now
Best Regards
Sivakumar

Let end users change AutoAttendant Gretting

Hi
I created a AutoAttendant and is working fine whit extension 150, i now need to let a end user be able to change the Greeting Message (this needs to be change daily), i follow the instructions on this guide
http://my.safaribooksonline.com/book/certification/ccna/9780132904087/chapter-7dot-cisco-unity-connection-and-cisco-unified-presence/ch07lev1sec7_html
I make a end user a Call Handler Owner, now when the end user i try to log in into the Cisco Unity Connection Administration gets a Not Authorized message and cant navigate to change the gretting, is there a specific URL for the end user to log in and change the gretting or what am i missing on the configuration ? i need to let the end user have a easy access to change the gretting.
Regards.

hi Mario,
The call handler "owner" or call handler administrator config will give the user the ability to change the greetings via the phone/TUI only. Not via any url and using the media master as indicated here;
Using the Cisco Unity Greetings Administrator to Record or Rerecord Call Handler Greetings
The Cisco Unity Greetings Administrator allows you—or the call handler owners that you assign—to manage call handler greetings from any phone. The owner of the call handler can be any user or system distribution list.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/connection/7x/administration/guide/7xcucsagx/7xcucsag150.html
Cheers!
Rob

Tabular form - let end user hide/show columns

I have been requested to create a tabular form, but end user should have ability to hide/show columns, also they should rename the column headers. So I have created a table with column name called "attribute1", attribute2", etc. Based on that table, create a tabular form, which has column header as "attrbute1", "attrbute2", etc. Now end user wants to rename attrbute1 as he wants. And he/she also wants to have a link called "hide/show" next to the column header, so end user can control which column they want to hide/show. It is so easy to do that control from developer side, however, shift that function to end user from front end seems very difficult to me. I have search around and haven't found any good solution yet. Please help. Thanks advance.

Hi,
Anyone, can help me with this scenario.
Brgds,
Mini

How to create new user and How can i assign end user roles

Hi,
I am new to SAP, please explain how to create end users and their roles
Thanks
ravi

Hi,
Roles are decided by IT managers. Suppose if Persons who are working in shopfloor or production side
give authorization to Production order create , change and Confirm like that etc
1. In role maintenance (transaction PFCG), choose the Authorizations tab page.
2. To change the authorization data for the transactions assigned to the role, choose Change Authorization Data or Expert Mode for Profile Generation. Otherwise, a dialog box appears in expert mode (see Regenerating an Authorization Profile After Changes).
Please take telp from Basis person also refer this link,
http://help.sap.com/saphelp_46c/helpdata/EN/52/6714a9439b11d1896f0000e8322d00/frameset.htm
Thanks

How to enable end users to escalate requests outside of newScale - end user view of delivery plan

How do you communicate to end users in a large organization, the procedures for escalation a request that is late or urgent. The views of the delivery plan available to users don't give them muche detail about who is doing the work.
I'm curious how other people communicate the escalation procedures - per service - to the end users that submit them? for instance, our unix admin team is pretty swamped and not meeting their OLAs reliably. They want to provide a way for the Appdev/IT users to know how to escalate requests that are late and urgent/important.
When a user submits a unix admin service on a req, if the user knows where to look in myservices, they can see the delivery plan, but enough detail to know who is doing the work. (we submitted an enhancement request a while ago to provide an options for a "full disclosure" view of the delivery plan). Even if they have enough access to service manager to find the req number and see the service manager view of the delivery plan, they still only see the service team/queue name, which might not be enough info for them to make a call or send an email.
We are discussing a few options and was curious what others are doing:
1. Update the Service description to include a contact distribution list for the fulfillment team (for requests with simple plans) or the service owner team for complex delivery plans.
2. Create a custom email template to be sent at start of delivery plan. Ccurrently we have a generic email that covers most requests, but are thinking of creating emails that provides service-specific escalation information.
3. Create an intranet page with escalation information by service, and perhaps including this as a link off the myservice home page or the service description.
The scope of this question is more around infrastructure requests that are fulfilled by centralized groups, not how end users escalate phone or computer requests. Our service-desk generally not involved in support of infrastructure requests, although they woudl probably be the escalation point for end-user requests
-Brian
running 2009.sp2

create a CSI program (from ITIL) that will be empovered to fix the issues with Unix admins, ie hire more people.
Dont fix process issues with technology, fix the process itself

End User Personalization - Mandatory field does not make it mandatory

I am on GRC 5.3 SP8 and when I set "Company" as "Mandatory" under "End User Personalization", it does not put an "*" next to Company or force the user to fill in the Company field.
How can I make sure that the user enters "Company" when doing a "Create Request form"? I want to make sure a red "*" is next to the field so that they update it. Right now I have a default value in there but I want to make sure they think about what goes in this field.
When I create a custom field and use "end user personalization", the red "*" shows up and an error occurs if they don't fill in the field, but the predefined fields don't work the same way.
Thanks,
Peggy

GRC Experts, please correct me if I'm wrong but from my understanding, the Request Screen in the MyWork tab is for Approvers/Admins/Security i.e. those with UME permissions of some kind. This is not the Request Screen for end users. We actually customize our UME roles to elimate the ability to use this Request Screen. We want all of our security requests to be done in the End User Request Screen.
Unlike the MyWork Request Screen, the End User Request Screen is customizable under configuration-->End User Personalization. As you've noticed, here you can customize what fields you see on the End User Request Screen, what fields are defaulted, etc. For example, for our company, we do not want end users picking and choosing roles. Our end users are not knowledgable on our roles so we save that step for a stage in which Security Admins choose roles for users based on what they asked for in the Request Reason.
Another advantage of using the End User Request Screen is that end users can create requests without having UME permissions; they need only to be authenticated against whatever system you have chosen to authenticate them against (for example, SAP) Configuration-->Authentication. As long as they exist in that system, they can create a request.
Every company is different. For us, we don't like that the MyWork Request Screen is not customizable and requires UME permissions to even access it. So we have essentially taken it away through security (based on the Security Guide provided by SAP).

CUPS 8.0 end user login issue

Hi All,
I am having CUCM 7.1.5 and CUPS 8.0(4) installed. The problem is when I tried to login the CUPS user page the it says "login failed". The CUPS intergration with CUCM seem to be fine because all the end users can be seen in CUPS. But I am not able to login the CUPS user page. Users have needed roles assigned to them.
CUCM is sycronized with LDAP server over SSL
Can anyone pls help me on this. What else I need to check? Is there any log to check on CUCM or CUPS?
Thanks

Hi Ronak,
It is not the problem login to the CUPC (still I didn't tried it), I have problem login to the CUPS User Web page using end user credentials in CUCM
End users have needed roles assigned and they also are CUP enabled users
Pls can you suggest me to any thing to check, As I said our CUCM is sycronized with LDAP server over SSL
Thanks

SOD for project team & end users

Experts,
1) Is SOD check is done for project team members like the end users?
2) Normally where the SOD is done for the end users ( VIRSA or 3rd party tools )? Is it checked after assigning the end users to the roles in the PRD or in DEV itself ? Where basically the VIRSA tool is implemented in SAP system?
3) Is there any special kind of tool to reset a huge no: of users password? ( other than the CATT/ECATT)
Thanks much,
Kevin

> 1) Is SOD check is done for project team members like the end users?
Project members mostly do not have access in live PRD systems. Once there, treat them like end users. See 2.
>
> 2) Normally where the SOD is done for the end users ( VIRSA or 3rd party tools )? Is it checked after assigning the end users to the roles in the PRD or in DEV itself ? Where basically the VIRSA tool is implemented in SAP system?
Your end users only exist in PRD most of the time. No need to create them in DEV. So SOD reporting is done in PRD.
> 3) Is there any special kind of tool to reset a huge no: of users password?
Don't know at the moment.

End User Role for Service Desk in Solution Manager

Hey,
I am launching the Service Desk functionality for my End Users. One thing that i want to know of is the role that I should assign my user in Solution Manager to access his message. E.g.
I have a user 'A' who creates a message from any system in my landscape:Test, QA, Dev or Production. Now this message reaches in Solution Manager and is assigned to a certain Support Team according to the rules I defined. Now the personnel of Support Team needs some feedback from the end user who created the message. For that the user 'A' has to log into Solution Manager, access his message and enter the details which the Support Team requested.
I want to know that what Role should i give to this user 'A' so that he is able to access ONLY the messages that he created i.e. "Reported by" field showing user 'A'; and is able to view and edit them.
If I give him the role SAP_SUPPDESK_CREATE and SAP_SUPPDESK_DISPLAY, he is just able to see the messages, all of them, but is not authorized to edit any. Please help me out in this matter as i need a solution asap.
Regards,
Bilal Nazir

Hi Nazir,
Create a role and add this t-code manually.
CRM_DNO_MONITOR - Transaction Monitor
This is will definitely solve your problem.
Feel free to revert back.
Thanks and Regards,
Ragu
ERP,
Suzlon Energy Limted, Pune
Extn: 2638
+919370675797
I have no limits for others sky is only a reason

Show Roles to end user

Hi,
My mission is to show roles to the end user and to give him possibility to make a request for one of the roles.
However I want to show different roles for different users based on their organizational place.
And my problem is that I can not find the way to do this.
For example if I use getObjectNames from com.waveset.ui.FormUtil I get nothing for end-user and I get all of the roles for configurator.
Does anybody tried to implement this?
Thank You!

why not show the exact items allowed for the login user's role? then you don't have to display the role to a specific item.

Who & Roles & responsibiliries of a BW End User??

Hello Experts,
Plz let me know answers for these Qs..
1.Who is an SAP BW End User? How many end users usually exist after a BW Go Live?
2. Roles & responsibilities of a BW End User?
3. Are the Admininistration people alone(eg: CEO,Business analysts/decision makers etc.) who access only these developed reports are called BW End Users??
4. Do the BW End Users load any data clicking any of the InfoPackages..on a regular basis??
I have a doubt.. on exqactly who is that ( a BW End User or the people in the Support group sitting in the company who implemented BW for a client) who actually loads this master data/transaction data by clciking on the infopackages for LO etc OR with the process chains.
plzzz make me clear!! I assure points.
Regards,
Sapster.

Hi,
1.Who is an SAP BW End User? How many end users usually exist after a BW Go Live?
A) SAP BW end user are the users who are going to generate the reports which you create it in Query Designer.
It depends on the requirement and implementation.
2. Roles & responsibilities of a BW End User?
A) BW end users play a very important role in the requirement phase as they are the one who interact with the BW consultants for initial documentation. And they will be responsible for the final sign off as well...
3. Are the Admininistration people alone(eg: CEO,Business analysts/decision makers etc.) who access only these developed reports are called BW End Users??
A) Again it depends on who are going to view your reports... It might be business analyst, managers, CEO's etc.,
4. Do the BW End Users load any data clicking any of the InfoPackages..on a regular basis??
A). I guess not, they are responsible only for generating the reports based on their manager's requirements... Everything is done thru process chains...
Regards,
Kishore

Let end user request a role

Similar Messages

Maybe you are looking for