Maintenance mode permission level

I am using scom 2007 R2. Please suggest me What is the minumum permissions i can give to place a server into maintenance mode for Operations team.

Hi
The roles that can update Maintenance Mode Settings are Operator, Advanced Operator and Administrator. The least privileg is the SCOM Operator Role.
I hope this helps,
Stefan
Blog: http://blog.scomfaq.ch

Similar Messages

SCCM 2012 Software Update Management for Windows Servers and how to automatic set SCOM maintenance mode?

Hi,
We planning to go one level higher to automat and have more dynamic Software Update Management for Windows Servers. We have SCCM 2012 R2, SCOM 2012 R2 and SCO 2012 R2.
Our plan is to pur server in an AD-Group to get Update Schedule, from the servers will be importet to an Collection for Automatic Update and reboot. If I understand Everything right SCOM can't read AD-Group and put then in an Schedule maintenance mode. SCOM
can read reg value as exempel.
IS there any smar way to make the SCOM Maintenance Mode Schedule dynamic?
I found this
http://www.scom2k7.com/scom-2012-maintenance-mode-scheduler/?
/SaiTech

You could use Orchestrator to put the servers from a specific collection, or AD group, in maintenance mode in SCOM. For an example see:
http://www.systemcentercentral.com/orchestrator-how-to-scom-maintenance-mode-for-windows-computers-in-an-sccm-collection/
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

InfoPath Domain Permission Level error. See description.

I am on a temporary assignment. For this assignment I made a form in InfoPath, submitted on SharePoint. Everything works as expected on SharePoint. After I move on from this assignment to the next, the owner of the SharePoint need to have
access to InfoPath form. I mean, if he wants to edit the form, or work on the form, he should be able to do it. When i emailed him the InfoPath form, he was unable to open the form with the following error message:
"Forms that require the domain permission level contain features that access information on a network, such as data connections, linked images, and code."
Please help!!

Hi,
Try couple of things:
1. Tell the other person to not open the form directly but right click and select Design. This should open the form in design mode. The other person should have InfoPath installed on their local machine.
2. If you have created any Data Connection in the form, then it might not open as stand alone and the others will be able to open it from the Library where it is published.
3. You should also check the settings, where the form is Browser enabled or not? If you try to open just by clicking on the form, it will try to open in local machine rather than browser.
Similar issue is stated here:
http://social.msdn.microsoft.com/Forums/sharepoint/en-US/7d937195-24df-40a7-97eb-b40c551ae3d3/users-cant-open-form-because-it-requires-domain-permission-level?forum=sharepointcustomizationlegacy
Regards, Kapil ***Please mark answer as Helpful or Answered after consideration***

SUNFIRE V880 in maintenance mode

Hi,
Sunfire V880 server start to maintenance mode and in run level 6.
I have try to boot to solais DVD rfrom ok prompt and cannot boot.
this is imposible to modify in runlevel 6 vfstab or inittab.
wath can i do please help me.
thank you

Hi.
Please describe current state and what you see on terminal
Level init 6 - mean reboot the system. So it can not be stable state.
What error messages you got when try boot from DVD ? What Solaris version you try boot ?
What Solaris version was installed on server ?
Regards.

FWSM maintenance mode - vlan 1

Hi,
A client has had their FWSM fail, when you try to start the module the switch eventually disables the power to that slot (%C6KPWR-SP-4-DISABLED: power to module in slot 4 set off (Module Failed SCP dnld)). I have turned off diagnostics with 'no diagnostic boot level' and then use 'boot device module 4 cf:1' to bring the FWSM up into maintenance mode. I can then session up from the switch and log in to the FWSM as root.
After inputting all the necessary IP info I can't ping anything on vlan 1 as I would expect, I have set the FWSM as 192.168.1.2 and a FTP/TFTP server as 192.168.1.1
I have removed the firewall vlan groups and tried to put them back with just vlan 1 but this isn't accepted (the reasons are covered in other posts on the forum). What am I doing wrong as the instruction say that vlan 1 is the only vlan that is accessable whilst the FWSM is in maintenance mode.
I can create an int vlan 1 in the switch and ping my ftp server so know that the switchport is set up correctly, I can also see that Po308 is formed and when the module boots I can see the Gi4/xx interfaces come up (FWSM is in slot 4).
Any ideas of what to try next?
............and they aren't covered by maintenance agreements
FWSM
Maintenance image version: 2.1(4)
[email protected]#show images
Device name             Partition#              Image name
Compact flash(cf)       4                       c6svc-fwm-k9.3-1-4-0.bin
Switch
SWITCH# sh ver
Cisco IOS Software, s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(33)SXI7, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Mon 18-Jul-11 05:49 by prod_rel_team
ROM: System Bootstrap, Version 12.2(17r)SX7, RELEASE SOFTWARE (fc1)
Regards
Mel

Recently i met the same problem.
When installing FWSM board on the Catalyst 6509 there is not communication access via vlan1 in the maintenance partition.
Moreover, the FWSM works properly in the aplication partition(cf:4).
Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXH8, RELEASE SOFTWARE (fc1)
System Bootstrap, Version 12.2(17r)SX5, RELEASE SOFTWARE (fc1)
Mod Ports Card Type                              Model
1   48 48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-TX
4    6 Firewall Module                        WS-SVC-FWM-1
5    2 Supervisor Engine 720 (Active)         WS-SUP720-3BXL
8    5 Communication Media Module             WS-SVC-CMM
Mod MAC addresses                       Hw    Fw           Sw           Status
1 001b.d41a.8360 to 001b.d41a.838f   1.5   8.4(1)       8.7(0.22)BUB Ok
4 0003.fead.962e to 0003.fead.9635   3.0   7.2(1)       4.1(14)      Ok
5 0017.9444.c3ec to 0017.9444.c3ef   5.4   8.5(2)       12.2(33)SXH8 Ok
8 0017.0ee2.13cc to 0017.0ee2.13d5   2.8   12.4(25c),   12.4(25c),   Ok
FWSM versions
FWSM Firewall Version 3.2(20)
Device Manager Version 5.0(3)F
Not possible to verify the switch is in the service.
I guess the reason is likely next.
FWSM supports only untagged packets on the vlan1. By default catalyst 6500 not tagged native vlan1.
In my case globally enabled tagging in the native vlan.
#sh vlan dot1q tag native
dot1q native vlan tagging is enabled globally
sh vlan dot1q tag native
dot1q native vlan tagging is enabled globally
Per Port Native Vlan Tagging State:
Port    Operational          Native VLAN
           Mode               Tagging State
Gi1/2   trunk                 enabled
Gi1/8   trunk                 enabled
Gi1/13 trunk                 enabled
Gi1/14 trunk                 enabled
Gi1/17 trunk                 enabled
Gi1/18 trunk                 enabled
Gi1/21 trunk                 enabled
Gi1/27 trunk                 enabled
Gi1/30 trunk                 enabled
Gi1/32 trunk                 enabled
Gi1/38 trunk                 enabled
Gi1/42 trunk                 enabled
Gi1/43 trunk                 enabled
Gi1/44 trunk                 enabled
Gi1/46 trunk                 enabled
Gi5/2   trunk                 enabled
Po2     trunk                 enabled
Po308   trunk                 enabled

Maintenance Mode Switch for APEX

Is there any way that I can throw an switch in APEX and have it allow users who are currently logged in to finish their sessions (maybe displaying an alert message at the top of their pages asking them to finish what they are doing quickly and logout) but display a message denying new users the ability to login and use APEX. What I am after is a way to gracefully clear users off of my app server so I can take it down without giving a grand maul das boot to active users. Kind of the "The store is now closing, please take your final purchases to the registers at this time." type of announcement. Lock the front doors but let people who are already inside finish their business type of result. If this does not exist, it would be a nice feature to have at the internal workspace control level.

Hi,
A Windows Schedule task,
http://technet.microsoft.com/en-us/library/cc748993.aspx
Please read this one:
Management Pack for the SCOM 2012 Maintenance Mode Scheduler
http://blog.tyang.org/2014/05/22/management-pack-scom-2012-maintenance-mode-scheduler/
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Error while enabling maintenance mode

Hi,
while enabling maintenance mode, the following error arises
sqlplus -s &un_apps/***** @/d01/oracle/visappl/ad/11.5.0/patch/115/sql/adsetmmd.sql ENABLE
An error occured while running adsetmmd.sql.
Continue as if it were successfull [No] :
charan

[oracle@oraapps VIS_oraapps]$ sqlplus system/manager @$ORACLE_HOME/rdbms/admin/utlrp.sql
SQL*Plus: Release 8.0.6.0.0 - Production on Wed Mar 19 08:15:06 2008
(c) Copyright 1999 Oracle Corporation. All rights reserved.
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.6.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.6.0 - Production
unknown SET option beginning "SQLPLUSCOM..."
PL/SQL procedure successfully completed.
Table created.
Table created.
Table created.
Index created.
Table created.
Table created.
SELECT o.obj#, o.type#, o.owner# FROM obj$ o
ERROR at line 2:
ORA-00942: table or view does not exist
SELECT o.obj#, o.type#, u.name AS owner FROM utl_recomp_all_inv o, user$ u
ERROR at line 2:
ORA-00942: table or view does not exist
Package created.
No errors.
Warning: Package Body created with compilation errors.
Errors for PACKAGE BODY UTL_RECOMP:
LINE/COL ERROR
60/10 PL/SQL: SQL Statement ignored
61/29 PL/SQL: ORA-00942: table or view does not exist
64/10 PL/SQL: SQL Statement ignored
64/17 PL/SQL: ORA-00942: table or view does not exist
104/7 PL/SQL: SQL Statement ignored
104/14 PL/SQL: ORA-00942: table or view does not exist
183/13 PL/SQL: SQL Statement ignored
184/35 PL/SQL: ORA-00942: table or view does not exist
188/13 PL/SQL: SQL Statement ignored
189/35 PL/SQL: ORA-00942: table or view does not exist
196/13 PL/SQL: SQL Statement ignored
LINE/COL ERROR
197/35 PL/SQL: ORA-00942: table or view does not exist
202/13 PL/SQL: SQL Statement ignored
203/35 PL/SQL: ORA-00942: table or view does not exist
267/10 PL/SQL: SQL Statement ignored
268/42 PL/SQL: ORA-00942: table or view does not exist
361/10 PL/SQL: SQL Statement ignored
420/15 PL/SQL: ORA-00942: table or view does not exist
538/11 PL/SQL: SQL Statement ignored
539/19 PL/SQL: ORA-00942: table or view does not exist
BEGIN utl_recomp.recomp_serial(); END;
ERROR at line 1:
ORA-04068: existing state of packages has been discarded
ORA-04063: package body "SYSTEM.UTL_RECOMP" has errors
ORA-06508: PL/SQL: could not find program unit being called
ORA-06512: at line 1
DECLARE
ERROR at line 1:
ORA-06550: line 1, column 7:
PLS-00201: identifier 'DBMS_REGISTRY_SYS.VALIDATE_COMPONENTS' must be declared
ORA-06550: line 1, column 7:
PL/SQL: Statement ignored
ORA-06512: at line 8
=======================================
[oracle@oraapps VIS_oraapps]$ sqlplus system/manager
SQL*Plus: Release 8.0.6.0.0 - Production on Wed Mar 19 08:17:49 2008
(c) Copyright 1999 Oracle Corporation. All rights reserved.
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.6.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.6.0 - Production
unknown SET option beginning "SQLPLUSCOM..."
SQL> @/d01/oracle/visappl/fnd/11.5.0/patch/115/sql/AFCORLGS.pls
DOC> | Copyright (c) 2005 Oracle USA, Inc., Redwood Shores, California, USA |
DOC> | All rights reserved. |
DOC> +=======================================================================+
DOC> | FILENAME
DOC> | AFCORLGS.pls
DOC> |
DOC> | DESCRIPTION
DOC> | PL/SQL specification for package: FND_CORE_LOG
DOC> |
DOC> | Core Logging Diagnostic Tool
DOC> |
DOC> |
DOC> | HISTORY
DOC> | 03/22/2005 PDELUNA Created
DOC> |
DOC> *=======================================================================*/
Package created.
Commit complete.
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.6.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.6.0 - Production
[oracle@oraapps VIS_oraapps]$ sqlplus system/manager
SQL*Plus: Release 8.0.6.0.0 - Production on Wed Mar 19 08:19:49 2008
(c) Copyright 1999 Oracle Corporation. All rights reserved.
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.6.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.6.0 - Production
unknown SET option beginning "SQLPLUSCOM..."
SQL> @/d01/oracle/visappl/fnd/11.5.0/patch/115/sql/AFCORLGB.pls
DOC> | Copyright (c) 2005 Oracle USA, Inc., Redwood Shores, California, USA |
DOC> | All rights reserved. |
DOC> +=======================================================================+
DOC> | FILENAME
DOC> | AFCORLGB.pls
DOC> |
DOC> | DESCRIPTION
DOC> | PL/SQL body for package: FND_CORE_LOG
DOC> |
DOC> | Core Logging Diagnostic Tool
DOC> |
DOC> |
DOC> | HISTORY
DOC> | 03/22/2005 PDELUNA Created
DOC> |
DOC> *=======================================================================*/
Warning: Package Body created with compilation errors.
Commit complete.
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.6.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.6.0 - Production
[oracle@oraapps VIS_oraapps]$ sqlplus system/manager
SQL*Plus: Release 8.0.6.0.0 - Production on Wed Mar 19 08:20:21 2008
(c) Copyright 1999 Oracle Corporation. All rights reserved.
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.6.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.6.0 - Production
unknown SET option beginning "SQLPLUSCOM..."
SQL> @/d01/oracle/visappl/fnd/11.5.0/patch/115/sql/AFPFPROB.pls
DOC> | Copyright (c) 1993 Oracle Corporation Redwood Shores, California, USA |
DOC> | All rights reserved. |
DOC> +===========================================================================+
DOC> | FILENAME
DOC> | AFPFPROB.pls
DOC> |
DOC> | DESCRIPTION
DOC> | PL/SQL body for package: FND_PROFILE
DOC> |
DOC> | Maintains the server side cache of profile options.
DOC> |
DOC> | NOTES
DOC> | This module is called by AutoInstall (afprof.drv) on install and
DOC> | upgrade. The WHENEVER SQLERROR and EXIT (at bottom) are required.
DOC> |
DOC> | HISTORY
DOC> | 3/23/93 T Morrow Created
DOC> | 5/27/93 G Buzsaki Updated to 10.X spec
DOC> | 8/25/93 G Buzsaki Added GET_ANY procedure
DOC> | 2/17/94 S Stratton Added security profiles to initialize
DOC> | 4/30/96 T Morrow Added SAVE and SAVE_USER procedures.
DOC> | 03/20/99 S Sung Replaced != with <>
DOC> | 09/18/00 R Tse Added GET_TABLE_VALUE and
DOC> | GET_ALL_TABLE_VALUES functions.
DOC> | 01/03/01 J Cordes Rewrote get_specific() to minimize
DOC> | logical reads. (Bug 1563556)
DOC> | 05/08/01 G Khoury Rewrote find, put, get, get_all_table_values
DOC> | to implement hash_table for caching of
DOC> | fnd_profile_option_values. (Bug 1663264)
DOC> | 11/13/01 R Tse Implemented multiple caches for storing
DOC> | profile values at the 4 different levels.
DOC> *===========================================================================*/
Warning: Package Body created with compilation errors.
Commit complete.
Input truncated to 6 characters
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.6.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.6.0 - Production
[oracle@oraapps VIS_oraapps]$

Getting error while opening a saved for later notification: The selected action is not available. The cause may be related to security. Contact your system administrator to verify your permission level for this action.

Hi All,
While opening a saved for later notification, we are getting "The selected action is not available. The cause may be related to security. Contact your system administrator to verify your permission level for this action". error.
This is a custom notification.
Please help.
Thanks
Raghava

HI All,
Please help on this issue.
Thanks
Raghava

User analysis at Action level and Permission level

Hi Gurus,
I am totally confused by the way our CC is working while using it for User Analysis. I understand that during Risk Analysis for a user with Report Type "Action Level" will give the conflicts at the transaction level for the user and with Report Type "Permission Level" will give the conflicts at the Object level for the user. Also the permission level report includes the results of the action level report as well and hence Permission level report is more detailed & reliable.
But now when I run the analysis report for a particular user both at Action & Permission level...the user is not getting any conflicts at Action level but it is showing conflicts at the Permission level. For another user the vice versa is happening. Could anyone help me in understanding the above 2 scenarios?
Regards,
Lakshmi.

Hi
A user to be need to have a action level conflict should have that transansaction code access only ie object s-tcode = xyz transaction code.
Similarly for a user to be reported in permission level conflict the user should have access to
S_tcode = xyz transaction code Plus all other authorisation objects...Or in other words if the user is missing any authorisation object it wont be reported there...
So just check what authorisation object level check is enabled for that transaction code in the rule architect tab.. Thereafter see whether user have access to all those authorisation object with the values specified...
Parveen

User Analysis at Permission Level - Detail Report (RAR SP12)

Hello All,
I have having question regarding the User Level Analysis at Permission level report. Currently, we are on GRC Access control 5.3 SP12.
Per my understanding when you execute the User level analysis at Action level, you get SOD conflict reports based on T-code level and not on authorization / permission level. But, if you execute the user level analysis at permission level then SOD report is based on the authorization / permission object level.
But now, when I execute the user level analysis at PERMISSION LEVEL in the Informer tab, in the report I am only able to see "Transaction Code Check at Transaction Start" name in the Permission Object Column and "Transaction Code" name in the Field column.
Look forward to hear from you all.
Thanks in advance,
Regards,
Angelica

Hi Angelica,
This behaviour is ok for those risks in which you have not enabled any Object/Field value. It will pick S_TCODE Object and show you the risk.
This is useful because -
1. If you have risks defiend at Tcode level - you can still catch them while running risk analysis at permission level.
2. If you have Object Values defined in risk and you are running permission level analysis it will show risk only if Object Values meet. In that case permission level risk anlysis will not show risk if there is no actual risk.
3. Running risk analysis at Action level can show false positives when risk is defined ta Object level. So, it is always better to r
un alanysis at permission level, it will bring all actual risks skipping false positives.
4. You can run only one level risk analysis in CUP and ERM and permission level covers all risks.
If you have risk defined at Object Level and the role/user is not fulfilling all values, it should not show in permission level. In your case, if it is showing only "Transaction code check at start" and the risk is defined at Object Level, then sure it is a bug.
Regards,
Sabita

Looking for a Powershell Script which can put the scom servers in maintenance mode

Looking for a Powershell Script which can put the scom servers in maintenance mode so that SCOM should not send an alert during planned task.
Rahul

1. Provide list of servers line-by-line in C:\ServerList.txt, make sure you provide limited no. of servers, do not exceed 20 - 25 per batch
2. Save the script with suitable name (test.ps1)
3. Open PowerShell cmd prompt
4. Script accepts 3 params - TimeInMinutes, Reason and Comment
**** Please note, this script will work for SCOM 2012 R2
param([int32]$TimeMin, [string]$Reason, [string]$Comment)
try
$api = new-object -comObject 'MOM.ScriptAPI'
Import-Module operationsmanager
New-SCOMManagementGroupConnection
$Servers = Get-Content "C:\ServerList.txt"
$Time = (Get-Date).Addminutes($TimeMin)
Foreach ($Server in $Servers)
#Get Computer instance
$ComputerClass = Get-SCOMClass -Name Microsoft.Windows.Computer
$ComputerClassInstance = Get-SCOMClassInstance -Class $ComputerClass | Where {$_.DisplayName -eq $Server}
If ($ComputerClassInstance -ne $Null)
$HealthServiceWatcherClass = Get-SCOMClass -name:Microsoft.SystemCenter.HealthServiceWatcher
#Get Health Service Watcher Class instance of the server
$HSWClass = Get-SCOMClass -Name Microsoft.SystemCenter.HealthServiceWatcher
$HSWClassIns = Get-SCOMClassInstance -Class $HSWClass | Where {$_.DisplayName -eq $Server}
#Starting the maintenance mode
Start-SCOMMaintenanceMode -Instance $HSWClassIns -EndTime $Time -Reason $Reason -Comment $Comment
Start-SCOMMaintenanceMode -Instance $ComputerClassInstance -EndTime $Time -Reason $Reason -Comment $Comment
Write-Host "Health Service Watcher and Agent server "$Server " kept in maintenance mode" -foregroundcolor "green"
$api.LogScriptEvent('MaintenanceModeScript.ps1', 200, 0, "$Server kept in maintenance mode for $TimeMin minutes")
Else
Write-Host $Server" not found " -foregroundcolor "red"
$api.LogScriptEvent('MaintenanceModeScript.ps1', 201, 1, "$Server could not be found in domain")
Catch [system.exception]
$api.LogScriptEvent('MaintenanceModeScript.ps1', 201, 1, $_.Exception.Message)
Faizan

Error in SharePoint hosted app: Add permission level to the list programmatically

I am trying to add permission to the list which I have created in my app. I am trying to give current user some permission to add update delete items from my list. I have used one article from MSDN(http://msdn.microsoft.com/en-us/library/office/jj247079.aspx)
site. And my code is as bellow:
function execOperation() {
debugger;
context = new SP.ClientContext(appweburl);
var factory =
new SP.ProxyWebRequestExecutorFactory(
appweburl
context.set_webRequestExecutorFactory(factory);
appContextSite = new SP.AppContextSite(context, appweburl);
var appContextSite2 = new SP.AppContextSite(context, hostweburl);
var siteColl = appContextSite2.get_site();
hostweb = appContextSite2.get_web();
context.load(hostweb);
web = appContextSite.get_web();
context.load(web);
user = web.get_currentUser();
context.load(user);
que_list = web.get_lists().getByTitle("MyList1");
context.load(que_list);
que_list.breakRoleInheritance(true, true);
var permissions = new SP.BasePermissions();
permissions.set(SP.PermissionKind.viewListItems);
permissions.set(SP.PermissionKind.addListItems);
permissions.set(SP.PermissionKind.editListItems);
permissions.set(SP.PermissionKind.deleteListItems);
// Create a new role definition.
var roleDefinitionCreationInfo = new SP.RoleDefinitionCreationInformation();
roleDefinitionCreationInfo.set_name('Manage List Items');
roleDefinitionCreationInfo.set_description('Allows a user to manage list items');
roleDefinitionCreationInfo.set_basePermissions(permissions);
var roleDefinition = web.get_roleDefinitions().add(roleDefinitionCreationInfo);
web.breakRoleInheritance(true, false);
// Create a new RoleDefinitionBindingCollection.
var newBindings = SP.RoleDefinitionBindingCollection.newObject(context);
// Add the role to the collection.
newBindings.add(roleDefinition);
// Get the RoleAssignmentCollection for the target list.
var assignments = que_list.get_roleAssignments();
que_list.breakRoleInheritance(true, true);
// Add the user to the target list and assign the use to the new RoleDefinitionBindingCollection.
var roleAssignment = assignments.add(web.get_currentUser(), newBindings);
context.executeQueryAsync(onSuccess, onFail);
I have just copied the code from that article. But when I run my app it give me error :
You cannot customize permission levels in a web site with inherited permission levels
Any suggestions, What am I doing wrong?
Thank you in advance...!

Problem solved.
It turns out there should be NO leading '/' in the relative URL despite the example shown in http://msdn.microsoft.com/en-us/library/office/dn292553.aspx#Folders with "/Shared Folder".
The correct GetFolderByServerRelativeUrl-parameter in my case is 'Lists/Productdocuments'.
Unsure whether example is wrong or if it applies to other cases than mine.

5508-HA standby in Maintenance mode

My standby controller is in maintenance mode. Other post say to simply reboot the standby but I'm worried about doing this during business hours. Say I did reboot it during business hours, would it affect the active controller? All redundancy links are connected.
(Cisco Controller) >show redundancy sum
Redundancy Mode = SSO ENABLED
Local State = MAINTENANCE
Peer State = UNKNOWN - Communication Down
Unit = Secondary - HA SKU
Unit ID = 00:06:F6:DC:17:00
Redundancy State = Non Redundant
Mobility MAC = 68:EF:BD:8E:61:E0
Maintenance Mode = Enabled
Maintenance cause= Negotiation Timeout

No it won't affect the active controller:
While booting, the WLCs will negotiate the HA role as per the configuration done. Once the role is determined, the configuration is synced from the Active WLC to the Standby WLC via the Redundant Port. Initially WLC is configured, as Secondary will report XML mismatch and will download the configuration from Active and reboot again. During the next reboot after role determination, it will validate the configuration again, report no XML mismatch, and process further in order to establish itself as the Standby WLC
http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/High_Availability_DG.pdf
https://supportforums.cisco.com/discussion/11758901/ask-expert-high-availability-wireless-lan-controller-wlc

Warning: The system has not been taken off maintenance mode completely

After I enabled Maintenance mode using adadmin, I ran Compile Flexfields. Then I disabled Maintenance mode. But, on the 11i login page, I keep getting a warning message:
Warning
The system has not been taken off maintenance mode completely. Please contact your System Administrator.
I am sure I disabled the Maintenance mode in adadmin. Why I still get the warning? How to fix it? Thanks a lot.

Thanks a lot. That is the fix.
One more question. After I ran "Compile Flexfields", I got
Number of successful descriptive flex compilations : 7520
Number of failed descriptive flex compilations : 1
How can I find the failed description flex? The log does not give info on this. And, how to fix it?
Thanks a lot for your help.

Permission level ruleset download.

Hi,
We have unmitigated risks showed up when the risk analysis is done by action level, and those transactions showed up in the transaction usage history(stats) reports, but we use permission level risk analysis in AE and CC, so these risks dont show up and we didn't have to mitigate at the time of provisining.
Now I'm in a stage where I need to prove that unmitigated risks are not really risks as per permission level. Because of the no.of risk ids showed up, i'm looking for some easy way to prove this instead of going by each risk id auth object values and comparing with user access in sap system.
Also, looking for any way to download clean permission level rule set., so I could develop program for comparision. So I tried to download using 'Search permission rules'' report, but the format is not great, would require lot of changes in order to use downloaded for manual comparision in the excel.
Thanks
Laks

SAP_ALL,
Add SAP_ALL to the Permission level ruleset, before downloading.
It will solve your problem.
Thanks,
Lakh

Maintenance mode permission level

Similar Messages

Maybe you are looking for