Managing Groups and Filters Externally

Can I manage groups and filters from an external agent such as LDAP? Or can groups at least be added, etc from an external API?Thanks.

Best I found on this thread from two years back is to use API or MaxL.Is this still the answer? Anyone know if I can manage my groups in MSAD and grant permissions to the AD groups?If not, is anyone willing to share code/links?respond to group or to tklein at rubytuesday.com

Similar Messages

Using Customize grouping and filtering for EPPM 8.2.1 family

Are there any know issues or BUGS when using customize grouping and filtering returing more than the filtered projects?
We are customizing grouping on Project Status and Region and filtering on Region and Let by Code
Thanks

Are there any know issues or BUGS when using customize grouping and filtering returing more than the filtered projects?
We are customizing grouping on Project Status and Region and filtering on Region and Let by Code
Thanks

Reinstalling SCSM with new Management Group and existing DB

Hello!
My customer has an issue. He installed SCSM MS and called Management Group with spaces. Because of that DW cannot use it Data source.
As I know I cannot change name of Management Group and have to reinstall SCSM from scratch. But I need to keep his existing ServiceManager Database.
Do I have an option to make a brand new MG, but keep an existing Database?
Thank you!

Hi Schubarov,
The management group is a difficult one because the database is based on the name of the management server and the management group name. These really have to remain the same to be able to use the SserviceManager database.
When installing the Management Server, the installation wizard should not allow you to enter spaces if they are not supported. Not sure how they managed to get the spaces in the Management Group name to start with. I'd be keen to know if the Wizard allows
spaces, but the DW registration does not.... That sounds like a terrible bug if it is true.
There are a few guides out there, but they are NOT supported by Microsoft and who knows what could happen.
Sorry that there is not a simple answer.
Brett
Brett Moffett

Best Practice for managing Groups and Users

We want to create a Corporate Portal for the Department and it's Organizations. We want to have one Portal Public page as the main entry for all our users. When a user login, he will be re-direct to is Organization Portal page.
I need to find a good document, a case study if possible, on how to define my Groups in OID to achieve this. I need a document that explain how to setup and manage Groups for a Corporate Portal.
Thank you!

Hi!
The Portal Admin Guide gives a good overview about the groups administration.
I don't know about case studies that address your problem.
When you have different home pages for different groups you can administer this with the Portal Group Profile portlet in the admin section of Portal.
cu
Andreas

Timemachine, Groups and an external RAID

I'm using Timemachine and an external RAID to backup the entire server each night. But when I want to use Timemachine to retrieve a previous version or deleted file I have to change permissions on the folder to access it. Ideally I'd like to be able to enter Timemachine in an easier manner.
I have tried creating a user in Server Preferences that corresponds to the user for the server and logging in using a server user. Neither worked.
Any ideas?
thanks
Gideon

Try un-mounting the drive from the Linux computer and see if you can access it as NAS.

ISE 1.2: Remove unused Sponsor Group and Identity Group

Hi
I started with ISE 1.1.2 and now upgrade to 1.2.
There are 1. Sponsor Groups and 2. Identity Groups which are no more in use, but I am not able to remove them anymore.
1. One is a special Sponsor group which sponsor group policy I already removed. The I go to Aministration>Web Portal Management>Sponsor Groups and select the appropriate Group ans click delete and ok to confirm, the following error is displayed:
com.cisco.cpm.nsf.api.exceptions.NSFEntityDeleteFailed: java.rmi.RemoteException: Failed to execute the Query : DELETE_USERONAPP ORA-02292: integrity constraint (CEPM.EDF_GST_SPGRPID_SUB) violated - child record found ; nested exception is: java.sql.SQLIntegrityConstraintViolationException: ORA-02292: integrity constraint (CEPM.EDF_GST_SPGRPID_SUB) violated - child record found
2. The same happens with one Identity Group. I do not have it active anymore. Not in authentication, and not in authorization policy. I go to Administration>Identity Management>Groups> and select te group to remove, and click "Delete selected" and confirm with ok, the following error occured:
Cannot delete selected Identity Group(s) because there are resources which are mapped to these or its child identity group(s)
Is there any reason for any of these issue?
Many thanks

Hi ,
Please open service request with cisco. These kind of issues may happen when the dependencies are deleted from UI but there is a chance that some of the dependencies may not be deleted completely and are not visible from UI as well. These kind of issues can be resolved under cisco guidance.
Thanks,
Naresh

AP groups and redundancy

Is it possible for APs to failover between controllers when AP groups are in use? I have seen separate documentation on AP groups and AP failover but nothing that says how to implement both at the same time.
I have tried to work it out but when I created the group on the back up controller I am not able to add the AP to the group as it is not asociated to it.
Has anyone else come across this or have any ideas?
We are currently using 4400 controllers running 5.2.

Are your controllers in the same mobility group? (Controller|General|Default Mobility Name)
You can also check under Controller|Mobility Management|Mobility Groups to see if other controllers are set up to exchange Mobility Management info.
If you are in the same Mobility Management group then when failover to another member/controller in that group occurs and the AP Group name is the same on both controllers the APs should automatically join that AP Group name on the controller they failed over to.
Our implementation (still in the early stages) includes 8 WiSMs Controllers that are in the same Mobility Management group and will fail across campuses if we lose a WiSM module or chassis.
We will be using smaller controllers (4402's) at remote sites with their own Mobility Name. That is to prevent constantly exchanging client info with other controllers over wan links. If/when those failover to the main campus they will wind up being in the AP Group default-group on the WiSM environment.

SCOM 2012 Global Architecture, One management group or multiple?

Hi Folks,
I work for a global firm, we have multiple data caters in different regions. America, UK, Australia, China etc etc. We are looking to roll out SCOM 2012 for monitoring all systems. Our environment
1,000 Windows servers
All servers on the same Active Directory domain
10 Mbps links between data centers.
My question is around whether to use multiple management groups or one? I’ve seen recommendations for both. For example
In the Infrastructure Planning and Design guide for SCOM 2012 it is stated:
“A centralized management model with large remote locations works best with a management group in each region and a local management group (which provides a consolidated view of alerts and status) in the parent location. In this case, the centralized management
group connects through the software development kit (SDK) and functions as an additional console on each of the connected management groups.”
However moderators in this forum have stated
“Each management group has its own set of SQL Servers and Management Servers \ Gateways. It also adds considerably to administrative overhead. I'd try to avoid
multiple management groups where possible.”
” It will get expensive in terms of hardware and software with multiple management groups and you will duplicate a lot of work with regards to overrides”
“If you go with multiple Management Groups then you would need to add on a fair number of SQL licenses plus additional hardware. “
“Presumably if I have multiple management groups will that mean I will have to
create rules for each Management Group- correct. Same
with overrides. It could add a lot of administrative overhead. “
It would seem easier to just deploy one management group with the management servers in one datacenter but I’m concerned with performance. I’ve heard
stories about SCOM deployments architected in this way not performing well because of network latency. i.e admins from all regions besides the region local to the SCOM deployment not wanting to use SCOM because application performance is too slow.
What would the SCOM experts recommend for this scenario?
MH

1) My question is around whether to use multiple management groups or one?
Factors to consider in determine the number of Management group
• Scaling
• Agents separated from their management server by WAN-speed network links
• Political, administrative or security requirements within the organization requiring separate management groups.
• A view of AD DS topology required across multiple forests.
• A dedicated management group required for auditing purposes.
• Disaster recovery functionality required.
• Consolidated views of connected management groups required in Operations Manager.
• Operations Manager integration with the VMM console.
With refer to your situation
a) 1,000 Windows servers
b) All servers on the same Active Directory domain
c) 10 Mbps links between data centers.
It is suggest that one Management group is required.
2) It would seem easier to just deploy one management group with the management servers in one datacenter but I’m concerned with performance
It is recommend that you should deploy Gateway server in region office which has more than 10 agents.
• Gateway server reduce network bandwidth utilization. Agents located across WAN links consume network bandwidth, potentially affecting service delivery to and from the remote location. A gateway server can consolidate the traffic.
Roger

Running SCOM ACS in multiple customer environments from the same SCOM management group ?

We are currently monitoring multiple customer environments from the one SCOM management group and are looking at possibilities of using ACS for auditing.
Is this technically possible ? Does the ACS collector service need to sit on the customer side ? could it be installed on the same server acting as the SCOM gateway server ?

Hi,
The number of ACS forwarders that can be supported by a single ACS collector and ACS database can vary, depending on many factors, such as the number of events that your audit policy generates, the role of the computers that the ACS forwarders monitor.
If your environment contains too many ACS forwarders for a single ACS collector, you can install more than one ACS collector. Each ACS collector must have its own ACS database.
An ACS Collector must be installed on computers running Operations Manager management server and for security reasons, it must also be a member of an Active Directory domain.
More details please refer to the article below:
http://technet.microsoft.com/en-us/library/hh212908.aspx
Regards,
Yan Li
Regards, Yan Li

Custom dashboard view for multiple connected management groups

Hi all,
I've connected 2 scom management groups and I'm able to see the connected alerts in the alert views.
Is it also possible to show those connected alerts in a dashboard view ? Because the Show Connected Alerts - button is not availble in dashboards views. Is it possible to filter on mgmt group in dashboard views ?
Kind Regards,
J. M.

It is possible, but not without customization. Also, as Alexis mentioned, you could populate a custom field with management group information. It's overkill to use SCORCH just for this, as this could be achieved with much less effort using the command
channel and a relatively simply powershell script...
Jonathan Almquist | SCOMskills, LLC (http://scomskills.com)

Connected Management Groups

I'm currently reviewing a design that has multiple management groups (for scale), with a root management group containing
no agents or devices at all, but simply connecting to each of the other groups using CMG's.
It's my understanding that data does not traverse through CMG's. It simply allows a single unified view of the alert data of each CMG, so I'm confused as to why you would have this root MG, and all it's supporting infrastructure (OpsDB, DW DB etc)
when there's no agents at all.
Wouldn't you just have the other MG's (all containing agents) in a CMG configuration, i.e connecting to a single 'local MG' that also has agents.
Cheers,
E

Hi,
Connected management groups enable the consolidation of alerts and the running of tasks from multiple management groups. Tasks can be initiated from a local management group to run on managed objects of a connected management group. This scenario is used
to scale up the number of managed computers or objects you can monitor beyond the capabilities of a single management group.
The management group in which the data is consolidated is called the local management group, and those that contribute their data to the local management group are called the connected management groups. They relate to each other in a hierarchical fashion,
with connected groups reporting up to local groups. The connected groups are in a peer-to-peer relationship with each other. Each connected group has no visibility or interaction with the other connected groups; the visibility is strictly from the local management
group to the connected management group.
Deploying the Connected Management Groups Scenario
http://technet.microsoft.com/en-us/library/bb418761.aspx
Managing Connected Management Groups in Operations Manager 2007
http://technet.microsoft.com/en-us/library/cc540367.aspx
Hope this helps.
Regards,
Yan Li
Regards, Yan Li

Does idm support maintenance of access manager's group/role/filtered role

The xml of Access Manager Realm Resource Adapter has object types group, role and filtered role with object feature list,create, update and delete. Does that mean with the adapter installed, we can make use the idm to maintain the access manager's group/role/filteredrole? Is there any customization/configuration needed in order to provision these features in idm?
Thanks,

1. The AM agent can return ldap attributes after authentication. What you can do is use Sun Directory Server Proxy to provide a virtual view of both LDAP and your DB to AM.
2. Sun Role Manager is a tool for role mining and attestation, ie it helps with compliancy verifications which is required by many businesses these days. Sun Identity Manager does not need Sun Role Manager if you just want to provision roles for your users, however, as it appears to be the case in your envirionment, the roles created by IDM are exported to SRM for compliance verifications.

Creating New Security group and Refreshing Security Filters

Hi
I have created a new security group (and added people to it)
I have given this security group write access to certain dimension members within the planning application
I have refreshed the security filters via Planning_Manage Database_Security Filters
But the people in the new security group still dont have write access to the dimension members
If I look in EAS ... I cant see the the new security group that I have created
Question 1
Do I need to refresh the security filters via EAS
If I do this ... I know that I need to make sure that no one is in the Essbase application
Do I also need to make sure that no one is within the relavent planning application?
Question 2
Is it enough to refresh the security filters (tick security filters) .. or Do I need to tick database in the manage database options
Question 3
Does anyone have any suggestions that I havent mentioned above?
Thank you
PD

Hi John
Thanks for your suggestion
I tried this and He still doesnt have write access
He doesnt need to be able to lock and send values via essbase ... However when we are in planning, He cant submit data to the dimension members mentioned above.. i.e the cells are all green
I have checked and doubled check the security on the dimension members (and form security) in the form that he cant edit
Do you have any other suggestions?
Thank you
PD

"Disk Utility has lost its connection with the Disk Management Tool and cannot continue. Please quit and relaunch Disk Utility." Trying to format my iomega external HD for use with Mac

Hi. Trying to connect iomega ext. HD. i have to reformat for Mac. When i plug in & go to Disk Utility,the external shows up and i'm supposed to click "partition". When i do, a box comes up saying ""Disk Utility has lost its connection with the Disk Management Tool and cannot continue. Please quit and relaunch Disk Utility." I quit and relaunched, same results. After googling my question, i came up with this:
"Disk Utility has lost its connection with the Disk Management Tool and cannot continue. Please quit and relaunch Disk Utility."
(Quitting and reopening Disk Utility does not help.)
The following also appears in Console log:
*** malloc[419]: Deallocation of a pointer not malloced: 0x290a410; This could be a double free(), or free() called with the middle of an allocated block; Try setting environment variable MallocHelp to see tools to help debug : for architecture i386 object: ./Applications/iTunes.app/Contents/MacOS/iTunes malformed object (unknown flavor for flavor number 0 in LC_UNIXTHREAD command 27 can't byte swap it)
Workaround
Quit Disk Utility.
From the Finder's Go menu, choose Go to Folder....
Type the following, then click OK: /Library/Receipts
Temporarily remove these iTunes receipts from /Library/Receipts (sort the folder alphabetically as a list):
iTunes.pkg
iTunes4.pkg
You can put them on the desktop, for example. Do not remove iTunesX.pkg or iTunes Phone Driver.pkg.
Open Disk Utility and repair disk permissions again.
Quit Disk Utility.
Put the removed iTunes receipts back in /Library/Receipts.
Note: This issue does not affect Disk Utility's verify or repair disk features.
All seemed good, for a moment, until, upon going back to Disk Utility after removing itunes4.pkg and putting on desktop (i did not have itunes.pkg to remove) the same thing was happening. When i highlite my iomega ext. on left of page, disk perrmissions is grayed and does not allow me to click on it. Same problem from the start. Can somebody please help me out here? That would soooo awesome. Thanx!

i'm just scared i will do something wrong on my own and lose my data.
You shouldn't be scared of that, because you should already have backups. If you don't have backups, then backing up is the first priority.
Insert the Snow Leopard DVD and restart. When you hear the chime, hold down the C key and keep holding it until the Apple logo appears on the display. You should now see the language selection screen. Select your language, then choose Utilities > Disk Utility from the menu bar. In the Disk Utility window, select the external drive (not the internal). The drive may already have a data partition, in which case there will be another icon below the drive icon. Choose the drive icon, then select the Partition tab. Create a single partition with the default options (GUID partition table, Mac OS X Extended Journaled).
When the partitioning is done, select the startup volume on your internal drive in the DU window. Select the Restore tab. Drag the icon of the startup volume to the "Source" field. Then drag the icon of the newly-created volume on the external drive to the "Destination" field. Make sure you have this right. Then click the Restore button, and the data on your startup volume will be copied to the external drive.

Info Package Group Management? and Triggering of Event Chains ?

Hi GURU's
Info Package Group Management? and Triggering of Event Chains ?
Thanks
Bhima Chandra Sekhar G

Hi Bhima!
IP GROUP:
http://help.sap.com/saphelp_nw04/helpdata/en/80/1a65b5e07211d2acb80000e829fbfe/content.htm
About chains and triggering events:
http://help.sap.com/saphelp_nw04/helpdata/en/41/243d3828135856e10000009b38f842/content.htm
Hope it helps!
Bye,
Roberto

Managing Groups and Filters Externally

Similar Messages

Maybe you are looking for