List the user's permissions

Dear Experts,
May I know how can I list the user's permissions; currently use Tcode & etc.?
wilson

Hi Wilson,
See from SU01, you get the information about Which roles are assigned to the specified USER.
E.g Z_SPRO
and in PFCG transaction, you enter this role ( Z_SPRO), and you will get a list of Transaction Codes assigned to Role (Z_SPRO).
But please Note that, You must have the authorization to Display the Role in PFCG transaction, otherwise you can not see the Transcation Codes Assigned to that Role.
so link is like this
USER ID > Roles> Transaction Code
I hope you will find this helpful.
If my answer is satisfactory, Please grant me the points.
Regards,
Amol Joshi

Similar Messages

I have a Win7Pro SP1 PC locked down with a Group Policy as it is a public facing PC. PDF fillable forms cannot be completed when logged on as the restricted user. The forms work as a normal user. What are the user requirements/permissions needed to fill f

I have a Win7Pro SP1 PC locked down with a Group Policy as it is a public facing PC. PDF fillable forms cannot be completed when logged on as the restricted user. The forms work as a normal user. What are the user requirements/permissions needed to fill forms?

Well, try this (I was able to fix my with these steps):
Go Utilities > Disk Utility
Select your Startup Disk, e.g. Macintosh HD
Then, under the First Aid Tab, click Verify Disk Permissions.
If there are errors, then click repair Disk Permissions.
After it is done, restart the computer and see if your problem is resolved.
I hope this help.
Zeke
www.ZekeYuen.com/blog/

Is it possible for a Web Part to interact with a list the user does not have permissions for?

Say I have a custom web part that queries a list or adds list items, etc. Does the user have to have the equivalent permissions on the list itself to use the web part? Would the SPSecurity.RunWithElevatedPrivileges Method be a way to get around this? Or is
there a better way?
Basically I want certain users to have a more controlled access to a list. But if I try to access the page with the web part on an account without permissions for the list, I get an Access Denied response.

One way of elevating code is, as you already mentioned, using SPSecurity.RunWithElevatedPrivileges which will run SPSecurity.CodeToRunElevated with Full Control rights. From MSDN documentation of the method for SP 2013 (http://msdn.microsoft.com/en-us/library/microsoft.sharepoint.spsecurity.runwithelevatedprivileges.aspx)
you can see that this code runs under Application Pool identity:
Type: Microsoft.SharePoint.SPSecurity.CodeToRunElevated
A delegate method that is to run with elevated rights. This method runs under the Application Pool identity, which has site collection administrator privileges on all site collections hosted by that application pool.
Another method, a bit more security fine-grained, can be used. The idea is to instantiate new SPSite object using overloaded constructor which takes Microsoft.SharePoint.SPUserToken as a parameter: http://msdn.microsoft.com/EN-US/library/ms469253(v=office.15).aspx.
Example can be seen here: http://www.sharepointdeveloperhq.com/2009/04/how-to-programmatically-impersonate-users-in-sharepoint/. Using this approach, you can run your code in the context of the user who doesn't necessarily have to be site collection admin.
This user can have only access to the list in question.

LDAP Authentication Listing the users

Hi,
Iam new to OBIEE. I have LDAP authentication added to my repository.Please let me know how i can get the list of users in LDAP on to my OBIEE Presentation Catalog and Users so that I can classify them into various groups and add security feature.

If your user groups are held in LDAP you can pull them in as part of the authentication block my mapping the attribute to the GROUP variable.
Basic principle of using those groups and how the RPD interacts with presentation catalogue is explained well here :
http://obieeblog.wordpress.com/category/obiee/obiee-security/

Script to list the users and their privileges in a database

Hi Team,
Can someone provide me a script that list all the users and their privileges in a database?
DB version:11.2.0.2
OS:AIX

Osama_mustafa wrote:
Why you create your own script
SELECT * FROM USER_SYS_PRIVS;
SELECT * FROM USER_TAB_PRIVS;
SELECT * FROM USER_ROLE_PRIVS;
That won't tell him what privileges a user has via a role. It will only tell him what privilges were granted directly, and what roles were granted directly. But those roles have privileges, and may have other roles, which have still more roles and privs, etc. It's a recursive issue and a simple select from user__privs won't get it.
Pete Finnigan has a good script for reporting the entire picture. I leave it as an exercise for the student to use google to find it. I have already given all the information needed to complete that exercise.

Is it possible to let the SecurityManager ask the user for permissions?

Hi there!
I would like to write an applet which should realize single-sigon via JAAS and for jaas I need some access to the underlaying os which is permitted by the security manager.
I dont want to buy a certificate or to go through all our (700) Computers and install my self-made certificates and change the policy file.
So is there a way to let java ask the user if it trusts the applet (may with remeber this desision) to e.g. let it access features needed for jaas.
This way can be direct (via api call) or not (applet signed via free long valid (at least 5 years) certificate), however the only important thing is that I get access to the system.
Any ideas, I would be happy about (nearly g) everything ;-)
Thanks a lot, lg Clemens

However thanks a lot for help g
Found the answer myself: Simply sign the applet with an self-made certificate, the next time the browser is restartet there will be a promt for acceptimg the certificate.
Cool!

I have a user who has permissions on site A B C 's some libraries. How can I get a list for all the contents the user have permission for?

The user has permissions on site A B, and C. within the sites, the user has permissions on some lists/libraries.
how can i retrieve an entire list to see what the user has permissions on?
thank you
I might be a newbie in some area. But I'm working hard. :)

You can get the report using powershell, please check below posts
http://social.technet.microsoft.com/Forums/sharepoint/en-US/5a3252bf-cb03-4488-9a0d-f4e0ce07d497/user-permissionsaccess-report-in-sharepoint-site
http://reality-tech.com/2011/12/30/reporting-on-all-user-permissions-in-a-web-application/
My Blog- http://www.sharepoint-journey.com|
If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

To list the current users

In my place there are 10 users created but at given point
of time only an average of 5 users working.
Anyone please tell me the "select" statement to list the
users who are all currently connected with oracle database.

Query V$SESSION disctionary view to list cnnected users.

How do I create a specific packages for users where in only the admin has the access of which software the user can download?

Is there any possibilities that the admin of the team can limit the packages of the user? Only the admin can add and remove software to be downloaded for specific users.

You can include single app plans in team packages, but otherwise no. This will exclusively depend on the users' local permissions on the computer - if the can install one app, they can install all of them, be it only as a trial.
Mylenium

Enumerate the users that have access to a particular directory

Hi, my name is Jennifer and I have been searching for an answer to my problem through several blogs. The problem is that I have a Directory of which I want to not only retrieve the users\groups that have access to it but also enumerate through the groups
to list actual users. The groups part is the main issue here. If I use get-acl, I can return any number of particular Active Directory groups that have access, however, I need to list the users inside this group and get-acl will not output an object I can
work with. I thought I could do something like this (which I may have seen on this forum before):
get-acl "C:\NestedGroupTest" | %{$_.access} \ ft -property identityreference
This will return the groups\users that have access. Example:
Domain\OU
NT Authority\system
Builtin\users
ETC...
I have tried exporting this output to a file and then trying to use get-adgroupmember (which obviously will not work on the non-AD groups) but the objects are of the wrong type so basically nothing in the Active Directory module will work...
This seems like such a simple issue but it is causing me grief to no end...please help

I can't guarantee that this will work in all cases, but it seems to work on my test domain. Warning: it's very slow and inefficient. It requires
this module (get the 3.0 test version), but you can modify the foreach block's code somewhat to get it to work with Get-Acl.
Get-Item C:\NestedGroupTest | Get-AccessControlEntry | ForEach-Object { $PropertyNames = $null }{
if (-not $PropertyNames) {
# We need to copy the property. This will get a list
# of the properties on each ACE when it encounters
# the first ACE (since the rest of this is so ineffecient,
# we can feel good that we saved some work by doing this)
$PropertyNames = $_ | Get-Member -MemberType Properties | select -exp Name
# Create a new hashtable that will be used to create a PSObject
$NewObjectProps = @{}
foreach ($CurrentProperty in $PropertyNames) {
$NewObjectProps.$CurrentProperty = $_.$CurrentProperty
# Check to see if this SID belongs to an AD group
Write-Verbose ("Current principal: {0}" -f $_.Principal)
try {
$Group = Get-ADGroup -Filter { SID -eq $_.SecurityIdentifier } -ErrorAction Stop
catch {
# Write a warning or something?
if ($Group) {
Write-Verbose " -> Group, so looking up members"
$Users = $Group | Get-ADGroupMember -Recursive | select @{N="Principal"; E={$_.SID.Translate([System.Security.Principal.NTAccount])}}, @{N="SecurityIdentifier"; E={$_.SID}}
else {
Write-Verbose " -> Not an AD group"
$Users = $_ | select Principal, SecurityIdentifier
# Go through each user/non-translated group, modify two
# hashtable properties, and create the new PSObject
$Users | ForEach-Object {
$NewObjectProps.SecurityIdentifier = $_.SecurityIdentifier
$NewObjectProps.Principal = $_.Principal
$NewObject = New-Object PSObject -Property $NewObjectProps
# This will make the new object show the module's custom formatting:
$NewObject.pstypenames.Insert(0, "PowerShellAccessControl.Types.AdaptedAce")
$NewObject
That should resemble the output that Get-AccessControlEntry would give you, but AD groups have been translated to users. If you pipe that to Export-CSV, you'd have plenty of information for each ACE, including the path, principal, security identifier, access
mask, etc. You could also pipe that to Select-Object and just ask for certain properties (try it with these properties: Path, Principal, AccessMask, AccessMaskDisplay, AppliesTo).
You can also use the Get-AccessControlEntry function's parameters to do some filtering on the ACEs that are returned (maybe you only want ACEs with FullControl, or ACEs that were not inherited...)
Give it a shot and let me know if it works for you. If you need more explanation of what's going on in the foreach-object process block, let me know and I'll try to help. It can be modified to work with version 2.1 of my module, and with Get-Acl.

The user account in which the Oracle VSS Writer Service is running does not have the DBA privileges to log in to the Oracle instance.

VSS-00011: Connection to database instance <instance_name> failed.
Cause : The user account in which the Oracle VSS Writer Service is running does not have the DBA privileges to log in to the Oracle instance.
Action : Run the Oracle VSS Writer Service in a user account that can connect to the Oracle instance with DBA privileges.
I have assigned ora_dba group to the user that runs the Oracle VSS Writer Service which is the only Oracle solution but still getting
the above error. Was advised to raise the issue here that it is an OS issue. Pls help

The user account cannot access Oracle Database instance. And also how do you temporarily disable security software on the server.
Have you checked what I already asked for? "Try using the user account and access the Database Instance.
That will let you see if the problem is with the user account permissions or not."
If this does not help then you can contact Oracle as suggested by Dave.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Active Directory: how to return users account permissions RWDA?

In SCS 7.x
I`v been looking throught idoc functions and couldn`t find one to return the users account permissions when they log in with active directory..
How is this done..
I`v noticed they added the code in 10g..
<$userHasAccessToAccount("profile_account", "R")$>
Thanks.
Update:: I ended up just writing my own function that called a service returned AD info split the string and matched it against the account to return 1 = R, 2 = W, 4 = D, 8 = A
R = 1
RW = 3
RWD = 7
RWDA = 15

In SCS 7.x
I`v been looking throught idoc functions and couldn`t find one to return the users account permissions when they log in with active directory..
How is this done..
I`v noticed they added the code in 10g..
<$userHasAccessToAccount("profile_account", "R")$>
Thanks.
Update:: I ended up just writing my own function that called a service returned AD info split the string and matched it against the account to return 1 = R, 2 = W, 4 = D, 8 = A
R = 1
RW = 3
RWD = 7
RWDA = 15

Users and permissions for a small home server

Hello community,
I have been using Linux on the desktop for many years now, but unfortunately my knowledge about servers is very limited, almost non-existent. Therefore my question is most probably equally well fitting here and into the newbie corner.
I'm trying to set up a little home server which should be in charge of following tasks:
- CUPS print server in the local network
- access to shared files through NFS in the local network
- backup (again over NFS)
- an Owncloud server
- maybe a mail server in the long run (NSA, paranoia, etc. )
For now I have set up the print server, the NFS server and was working on the Owncloud installation, when Owncloud gave me some errors with users and permissions. So I was led to the idea of rethinking the users and permissions on server. So far there is only the root user who may do everything. This seems like a quite unsafe configuration. I'd like to make it safer. First, the printer, the backup and the locally shared files should be accessible from the local network only. SSH access should also be accessible locally only. The Owncloud file folder should be accessible from the internet, but of course only for the Owncloud users registered to the Owncloud server.
What is the best way to set up users and permissions for such a set up?
Thanks for any hints,
PhotonX

Hi, i think it depends who are you serving for, if you are just serving for a small office or home server or a big organization. The following quick thinking just came to me:
I think cups set automatically a system user of its own, and runs as it, so no trouble there. Cups also has the option to set users and it uses the system users as default, i think it depends in in how many printers/users your have in your server.Users that can manage cups are in the lp group.
For nfs every user should have their home, samba is also a good option if you have windows computer in your network and it integrates better with graphical file managers like nautilus in the clients side, but it is a hassle to configure.
You should run the web server (owncloud ) as it own user, maybe you can manage to set something up for owncloud in the filesystem, but owncloud uses a database, and the users for owncloud are stored in there, and they are not system users.
You can configure ssh for local use only enabling the corresponding subnets in your /etc/sshd.conf and optionally but recommended you can set a firewall and permissions. You can use iptables but i prefer ufw for simple setup.
I think you should read the wiki:
https://wiki.archlinux.org/index.php/users_and_groups
and the other respective topics in the wiki.
Also as an advice i know that arch linux is a great distribution, but you have to do more work to mantain a stable server. I would recommend debian or another more conservative distro, but of course it is your choice.
Last edited by hydrosIII (2014-11-06 06:26:45)

Query to display the user's and their group's

Hi ---Is there a way to list the user and the roles that were assigned to them by running a query on the Data base? also can we configure development obiee environment to use prod security so that if removed from prod, will also be removed form dev?

user007009 wrote:
Hi ---- my bad. version is 11g and currently not using WLS LDAP but through LDAP server(AD) configured in Web logic console.
Also regarding not possible if using WLS Ldap.
Where does these user data gets saved then?? xml?,database table?, ff?.. or was it mentioned in the oracle documentation that we can't get the info??..please throw some light..
any idea on what actually is the source for the page security>realms>users and groups? ... they might be saving it some where and i am having hard time finding it in the Oracle Documentation as well.I suggest you read this : http://docs.oracle.com/cd/E23943_01/core.1111/e10043/introroles.htm
And https://blogs.oracle.com/robreynolds/entry/security_in_obiee_11g_part_1 to know more about Security. The default users would be in identity store.
If you want to get the list of WLS users and WLS groups then have a look at : http://mverzijl.wordpress.com/2012/08/23/weblogic-wlst-get-users-and-groups/
Coming to your original questions .. To get the list of AD users and AD groups not Roles two different things, may be you can try
http://social.technet.microsoft.com/wiki/contents/articles/2195.active-directory-dsquery-commands.aspx or use some LDAP browser .
SVS

Give a user read permissions to folder but deny him/her copying contents? Is it possible?

Hi,
Is there a way to give a user read permissions to a folder but deny him/her copy permissions? I have been searching for way to do this in windows server 2012 R2 without any luck. I have a folder that i would like a user to see the contents but not change
or copy it. Any one who know the tricks?
Thanks,
Jama.

Yes,
Give the user read permissions to a folder, then he only read, but not write. Additionally, you can set Deny Write, to overwrite any inherited permissions.
Best Regards,
Jesper Vindum, Denmark
Systems Administrator
Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem.

List the user's permissions

Similar Messages

Maybe you are looking for