Model User Issues

Hello All,
We are running GRC10.1 and continue to have issues with the Model user process.
We have created new templates (EUP)for user creation / deletion / change and these are working correctly, We changed the default EUP ( As we were told this is the one used by Model user) to mirror the user creation template making the user group field, in the user system details tab, mandatory. When the model user process is used it does not take the default EUP into account.
Plus using the model user option I assumed it would copy parameters / license type / user group from the model user to the new user and this is not the case. There are some fields that are present in the user system details tab we would also like to make mandatory (Contractual User Type ID) but we cannot do this as they dont appear in the EUP list so I dont see how these can be managed. I have taken a look at OSS notes and the one I can find relating to EUP has already been applied.
Any help would be appreciated.
Regards
Mark

bcbecker wrote:
I see your point but I am not sure I agree. I really like to be able to cut and paste between apps, no mater what they are. Re-typing an email address that is displayed in a browser page seems just plain retrograde.
well from a BES admin point of view, if you need to browse the web for work, you should do it using the "BlackBerry Browser" inside the smartphone, and not some browser connected to an unsecure Wi-Fi network.
Your problem comes from using the Browser of the PlayBook and not the one from the Bridge.
bcbecker wrote: 
Don't get me wrong, I think that the PlayBook security model is excellent. I just think that the current implementation is overzealous and heavy-handed.
I think the current implementation is in advance compared to the BlackBerry Balance theory, and therefore we are in the middle of the digital river (haha ). This is quite unfortunate because RIM has not educated the PB users enough on what the Bridge is, and it leads to your current frustration.
From my personal point of view, I like the ability to block copy/paste from the Enterprise world to the Personal world, but I don't like blocking the other way around. It's not as if you could bring a virus by copy pasting text...
@knotty you were supposed to give some feedback after your week in Orlando!
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

Similar Messages

  • Access Request "Model User" - Role Type "Role" disabled in "Select Model Access" screen.

    Hi All,
    I am implementing GRC AC 10.0 - ARM  for provisioning in SAP R/3 and Enterprise Portal systems.
    While using "Model User" access request, I find that UME portal groups are coming as disabled and are not available for selection in tab 'Select Model Access'.
    Also only Type "Single Roles" appear for assignment or selection in the "Model User" form. Type "Role" appears disabled.
    Request help, thanks.
    Regards,
    Piyush.

    Thanks all for the suggestions but issue persists.
    I ran repository object sync in full sync mode for the portal system.
    I re-imported the portal groups.
    Still as earlier while using "Model User" request, I can see the groups with the reference user but it is grayed out and not available for selection.
    The other three scenarios (Access request, Copy Request & Template) work fine. In those request I can select the portal groups as well.

  • Monitoring user issued queries...and how long queries have been running.

    soalris 9
    oracle 9i and 10gr2
    I am trying to get the user issued query and how long it has bee running.
    I was trying to test on test database running a query under scott schema with
    1.5 million records which is almost taking more than 5 minutes and trying to
    see If I can see the query and how long it has been running.
    I ran script(show.sql---from Ask tom) got it from NET and i see session status as INACTIVE while query was still running. And I do not see the query in output.
    I could see the show.sql query in output.
    Why is it showing session status as INACTIVE when the sql is still running.
    Could you please provide me sql that will show user issued quries and how ong they have been running
    Message was edited by:
    user539835
    Message was edited by:
    user539835

    Go to Morgan's Library at www.psoug.org and look up "DBMS_APPLICATION_INFO." This built in package has a procedure named SET_SESSION_LONGOPS that may help you.

  • Dynamically Identifying user issuing SQL statement

    Client wants to provide security to certain data by first capturing the identity of every user issuing a SQL statement, then, based on the user and a security table, allow access to certain data. Is this doable? TIA...

    Oracle has a whole product centered around this called "Label Seurity", which I'm guessing may be too much for your needs. Check out this marking shag for info about "virtual private databases" http://technet.oracle.com/deploy/security/oracle8i/pdf/vpd_wp6.pdf
    Basically, the idea is that the "old school", but still perfecly fine, way to do it is to create views for each group of users and grant permissions to the views for the appropriate users. Optionally using synomyms into their schemas to give users the same name for the different views.
    The virtual private database and similar stuff is hard to explain. I think of it as the db engine auto-adding a where clause to each sql statement based upon who you are. If that makes any sense.
    I've tried this a couple of different ways, but have yet to hit upon one that seems easy & generally applicable.
    Good Luck -d

  • Multi-User Issues

    I've taken over development of a Vs2003(vB)/MsSql2000 application which usually runs in on a Windows 2000 server with multiple workstations running the application simultaneously in Remote Desktop Sessions.
    The central user interface element of the application is an un-databound grid (actually a farpoint spreadsheet) which displays sql table rows that are accessable from every workstation. The grid refreshes its content whenever a specific subroutine is called.  That subroutine performs a query which loads its results into a collection which is then loaded into the grid. The subroutine is called during startup and at other times using the rather elaborate mechanism described below.  Each workstation also has the ability to modify any row in the grid via a dialog-based editor.  The grid itself is not setup to allow inplace editing.
    The grid usually contains about 200 records and 20-50% of these records get modified (some repeatedly) every hour.
    My question involves the classic multi-user issues of keeping all of the seperate workstation's grids current as individual workstations make modifications to the data.
    What is Microsoft's recommended method for handling multi-user data-refresh requirements in custom applications written in VB.NET2003 with MsSQL2000?
    Now that you know what I'm looking for, let me add a little more detail.  The existing code handles this multi-user refresh issue in the following way...
    A SQL Trigger is attached to the SQL Table's Insert/Modify and Delete events. That Trigger calls the xp_logevent built-in stored procedure to make an entry in the NT Event Log.
    The application contains a subroutine to handle EventLog("Application").EntryWritten messages.  That subroutine calls the subroutine (mentioned earlier) which refreshes the grid contents through a new SQL query.
    In this way, whenever any workstation changes the table data, a trigger fires which makes a log entry and broadcasts an EntryWritten message into the global windows environment.  The individual applications (each running in their own RDP session) hear the message and respond by refreshing their grid.
    This all seems a little "rube goldberg" to me, but it has worked for many years.
    That is, until we moved the SQL2000 server to a seperate machine to improve program responsiveness.
    Now when the trigger is fired and the log entry is made, the EntryWritten message is broadcast into the windows environment of the dedicated SQL server where there are no applications listening for it.  Meanwhile, the applications continue to run with unrefreshed data on the (now) dedicated RDP server from where the EntryWritten messages cannot be "heard".
    So my question really comes down to this...
    In an environment where the SQL server and the RDP server are two seperate machines, what is the best method for coordinating multi-user screen refreshes across seperate applications running in distinct RDP Client sessions?
    Thanks in advance for any assistance.
    Peace,
             Colt Taylor
             Computer Golf Sofware

    Colt,
    Is this still an issue?
    Thanks!
    Ed Price, Power BI & SQL Server Customer Program Manager (Blog,
    Small Basic,
    Wiki Ninjas,
    Wiki)
    Answer an interesting question?
    Create a wiki article about it!

  • Macbook Pro 2010 Model Keyboard Issue - Middle keys not working

    Hi.
    I have a Macbook Pro 2010 model, for no other reason other than my cat sitting on it (tiny cat, very dry...) the middle row of keys (A,S,D,F,G,H,J,K,L) all stopped working, CAPS still works, as well as : ; " ' and the enter/return key.
    I've done nearly everything I can think of, reset everything, reinstalled OS X... Other than pulling the thing apart.
    Any suggestions or ideas of how I might fix this cheaply? Or what the problem may be?

    Hello AJTheGamer
    Check with the Keyboard Viewer to make sure no other keys are being pushed down to prevent it from the keys that you are typing to be registered. Another thing you can check is to try and create a new user to see if the issue carries across the system as a whole.
    One or more keys on the keyboard do not respond
    http://support.apple.com/kb/ts1381
    Mac OS X: How to troubleshoot a software issue
    http://support.apple.com/kb/HT1199
    Regards,
    -Norm G.

  • Different PO layout for different users - issue

    Dear Experts
    I am facing following issue: in ME23N in the item detail tab 'Purchase Order History) I have two end-users who see different columns; user A can see columns like Amount (=value of GR) and Amount in LC (=value of GR in local currency) while user B can see these fields.
    First I checked the view in the PO History tab and both are using Basic list. And then I compared the layout and the point is that user A cannot even select mentioned columns in the Change Layout option - the columns Amount and Amount in LC simply aren't available to be added in Change Layout option.
    I hope some of you could share any experience what else could control the layout of PO item details on the user level.
    Many thanks to all in advance and best regards
    Miha Egart

    Dear Jürgen
    Perhaps dfo you have some hint which authorization object could control this?
    Thx, Miha

  • Solidworks model mating issue in 3D Picture control

    Hello
    I have been following example of LQR and linear inverted pendulum ...where we can import Solidworks model in Labview and have our own control.....
    I made SCARA and I am being able to access individual part ...however I still have some mating issues with individual part....
    Please have a look at VI I have attached and see how Arm1, Arm2 and ZArm doesnot follow Parent Child relationship.  
    As I have leaned andgot help from forums.....I will get it this time too ....
    Thanks in advance.....
    Thanks & Regards,
    Kunal Raithatha.
    CTD - CLAD (I wish I can take off that A, and maybe use it later to replace D :-)
    Easy Tip :- "To copy an image to a VI icon, drag the image file and place it on the icon
    located in the upper right corner of the front panel or block diagram" ...If you know any
    more reply back.
    Solved!
    Go to Solution.
    Attachments:
    Forum.zip ‏73 KB

    Hello Vugie and Zach ...Few more favors plzzz
    Is there a way I can focus and zoom in zoom out particular portion of the scene, I can do it along Z axis but it will zoom whole scene. I guess Camera Control setting but not getting how to do it.
    Also
    1. When I RUN a vi, change camera (spherical) position and STOP a vi,
    next time I run my vi scene display shows last Camera position, Is there
    a way that for every new RUN of a program Scene Display erases old
    image and starts over again. Looks like re initializing Camera Position.
    2. Scene in Continuous loop and Camera Controller >> Spherical. Scene
    display gives kind of broken and flashy display while changing camera
    position using mouse.
    3. If I translate any object and again translate-rotate to change center
    of rotation, isn't it Total translation and then rotation.
    4. When I plan to show stretch/compress from one end, it will be again translating object half a distance similar to Pivot ???
    Is there any easy way to find Translation you apply to move your center
    of rotation, I waste lot of time when I import someone's vrml model, its
    lot easy if I make my own using 3D geometries at least I know half a
    distance to move.
    Also see another method I am trying in which I have all 3
    objects imported as a separate vrml and I called via one vrml.  I tried
    different translate-rotate combination but nothings working out
    Thanks in Advance
    Thanks & Regards,
    Kunal Raithatha.
    CTD - CLAD (I wish I can take off that A, and maybe use it later to replace D :-)
    Easy Tip :- "To copy an image to a VI icon, drag the image file and place it on the icon
    located in the upper right corner of the front panel or block diagram" ...If you know any
    more reply back.
    Attachments:
    SCARA3309.zip ‏81 KB

  • Dynamic Local User Issue

    When i look at snapins thru consoleone i can see that Zenwork 7.0.1 snapin is installaed.
    I have Novell Client 4.91 SP5 and Zenwork Client 7.0.173.91015 installed on the clients running WinXP Pro SP3.
    There is different of failures that happens..
    Senario 1:
    I install a Latitude D610 with a WinXP Pro SP3 original CD, from scratch. I only install the drivers for the LAN-card to get access to the network. I do not update windows updates etc.
    I install the Novell Client 4.91 SP5, after that i install Zenwork Client 7.0.173.91015. And apply some registry settings to make the novell client to use the "tab-function" and hide advanced settings etc..
    I have my eDir user "ADMIN1" with the policy package with settings to Dynamic Local User set to create a local user with name Admin, but im not using volatile user. So the local windows user Admin will be saved when logged out.
    I login once with my Admin1 user, it creates the local profile Admin from Default User (with the help of Zenworks, and the policy Dynamic Local User?). I restart the computer and login again, and the local profile Admin craches and create a new one from Default User but this local user profile is namned Admin.Computername.
    Ive tested this with atleast four other computers (different hardware) so it cant be a driver issue.
    Ive looked thru the local logs, and i cant find anything about any problem with reading the NTUSER.DAT as could be a problem to load the local profile.
    I even tested this senario when i update all windows updates etc, with two different version of the zenworks client and so on. ive been testning this for like 100 times now atleast. and same failure is happening. Ive even tested this in a virtual environment (vmware workstation).
    Senari 2:
    Like the problem descried above, in some cases it loss the connection or something with the zenwork server side and the zenwork client on the client computer... Since it does not attempt to use the settings from Dynamic Local User, becuase i got the windows login window, and i have to login to an already existing windows local account (with otherwords i cant login to the Admin-profile since i dont know the login information to this account since its created by zenworks / dynamic local user settings, and from the settings there you cant set a password, just the name and role of the windows accout that should be created)..
    And after a while i try again, and then the settings from Dynamic Local User passes by and log into the, (let me say) Zenworks created local user profile (set by Dynamic Local User settings).
    I wanna mention that all computers thats old, no reinstallation.. I can login to without problem, without any crashes of the Windows Local Profile.
    Ive succeded once without any Windows Local profile crash, rebooted this computer over and over again, and no failure. If you succed twice, it seems like its fine. But then i reinstalled this computer, just like i did to make it success. But this time it failed on the second try, and got a crashed profile....
    Its kinda old hardware to the server where i have my Zenworks, could that be the case? Could it be some timeouts?
    The concults i use to fix some problems in our environment updated zenworks from the serverside just before christmans.. Could it be any problems with some windows patch etc?
    Any help would be appreciated!
    // Jokohanho

    > installed on the clients running WinXP Pro SP3.
    <snip>
    > I restart the computer and login again, and the local
    > profile Admin craches and create a new one from Default User but this
    > local user profile is namned Admin.Computername.
    I only know of one XP SP3 issue that could cause this, but it involves a pw
    change and RP:
    "When you try to log on to a Windows XP SP3-based computer by using a
    roaming profile, the roaming profile cannot load."
    http://support.microsoft.com/kb/958058
    Regards
    Rolf Lidvall
    Swedish Radio (Ltd)

  • "_unknown" user issue

    I recently bought a new mac (iMac 27") and used the migration assistant to move my profile from my old mac to the new one. However, prior to doing so, I created a couple of IDs one or two of which had admin access.
    After I then successfully migrated my profile (which had admin access) from my old mac I deleted the new users I had created on the new iMac.
    This has left my user id with UID = 504 and this "_unknown" user having much of the read/write capabilities for installed software. It's causing me problems when updating.
    Luckily it appears as if all Mac software (including OS) is upgrading fine as for these programs "system" has read/write access. But on software I've installed myself (Firefox, Google Earth, etc) I have this other issue.
    I've read elsewhere that this is not uncommon (especially if doing exactly what I did above) and even found a post on a supposed fix.
    The fix suggests creating a new user id with admin access, going into system prefs, accounts, advanced and then changing the home directory and then deleting the account. Taking the new ID (which should take UID 501 since it's now open) and renaming it to the recently deleted account and changing the home address back.
    I went to go try and found under advanced settings for my current user it appears that if I want (I didn't try for fear of screwing something up) that I can simply change UID 504 to 501. Would this not work?
    Either way, what is the preferred method for straightening this out. Much thanks in advance to anyone that can help.
    Cheers,
    Brad

    Just a couple of Mac things. One, users have accounts, not profiles., and accounts have UUIDs (unique user IDs). Now, I strongly suggest you start over, wiping the new machine and on first boot do the migration using the setup assistant. See Best Practices and Setup new Mac for the details. That will restore things to normal behavior.

  • Permissions of HDD's keep randomly changing somehow only having the option "Write to Dropbox" ... I've never touched Dropbox in my life + General Privalege/Users Issues

    A few off things been happening recently with permission on my hard-drives and various mounted items. I've noticed this happen on and off for a good year, but gotten far worse last few days. When I right click on one of my four internal hard-drives (all OSX Journal format) as it was a few minutes ago the permissions did not even include my username name, but a new user called 'Admin' instead, and 'Staff' and 'Everyone', all of the settings were locked to the option "Write only (Drop Box). I should say I avoid any cloud hosting like the plague out of principle, not even looked at thier websites also I've even banned my computer from every single main one, for incoming and outgoing connections, by using the the Pseudo-Firewall Little Snitch. Also banned the 5+ background processes bundled with OSX that connect you to icloud.com.
    I was unable to change the permissions (as write:dropbox was the only one listed for all three accounts). Since my user is an Admin I unlocked and added my local account under my login name to the list, and then I had the the option 'Read & Write' 'Read Only' and still 'Write only (Drop Box)'. Now it's giving me a few more options, like removing the admin account (even though only option is still the dropbox, same as the staff account which I can also now delete). The 'everyone' account (which I can't delete, and wouldn't've anyway, because that'd be stupid) is still however greyed out with the only option being the dropbox one.
    Basically I've issues like this with all my drives on and off for months, the above is just one example of this weird kind of behaviour. So why does Drop Box keep appearing, and somehow changing all my permissions like this? That is my main question, however I'll briefly list a series of other odd things I've noted recently in the paragraph below. I just want to know if it's abnormal behaviour or totally expected.
    Side-notes: a) I also have noticed strange behaviour with the hidden and locked folders and files, ie, some are locked so I cant even get permission as admin to see content of them, these folders all say 0 Byte size even though (if or when) I work my in though terminal they clearly have many files in b) many of my hidden folders give the info of being created and modified all on the date 01/01/1970 even when I add a plain document to them or something and modify them right then c) many of these folders show a new privilege for me called "Custom" (with no way of customizing or finding out what such a privilege does) and if I change it from custom to read/write/whatever, it vanishes as an option never to be seen again. d) A lot of these folders temperamentally do one of three things: The get info says it contains xx files with say 20 mb in, but when I get in it's 100% empty in explorer even with hidden files being shown, or conversely many folders hang with the loading button when 'calculating size' in-definitely only to have nothing inside, or lastly a hidden folder will says it's a got a huge file-size content (up to 3gb) on on accessing it it's blank e) Lastly some very specific folders simply don't let me in or alter any privileges at all, the only name listed is 'Admin' but it's greyed out. f) Apple > About this mac > More info > System Report > Profiles it simply says "No information found".
    (This should instead be in the Maveriks forum, could a mod move it, if no one answers here, if at all possible?)
    Message was edited by: LazyGenious

    User File Ownership - Reset   see post by Linc Davis

  • User issue-- "itunes has stopped working"

    This week I have been unable to access iTunes, instead receiving the following error message: "iTunes has stopped working."
    I have reviewed earlier discussions, especially this recent one:
    http://discussions.apple.com/thread.jspa?threadID=1464059&tstart=15
    I have tried most of the suggestions, but I have run into a few roadblocks that I wanted to see if I could get some help with. But before all of that, I wanted to note that I created a new user account and was able to access iTunes that way. Unfortunately, however, this is not a good long term solution. I would like to try to resolve whatever issue exists with my user account.
    With respect to the potential solutions identified in the earlier post:
    *“Completely Remove iTunes and Quicktime”*
    #17—no such files existed in my windows\\system32 folder.
    *“Empty your Temp directory and restart”*
    I got the following error message :The action cannot be completed because the folder is open in another program. Close the folder and try again. I thought that I had closed all of the applications.
    *“Clean Up iTunes installer files on the computer”*
    When you click on the link under this suggestion, you get a warning from Windows not to use this utility with 2007 Office system products, which are what I have.
    *“Download Quicktime Standalone Installer”*
    I have no interest in Quicktime and only have it because it is apparently bundled with iTunes. Still, I tried this and it did not fix the problem. (BTW, Quicktime still works fine.)
    *“Disable other conflicting software”*
    I used MSCONFIG to try to troubleshoot conflicts. First, the instructions in article 305415 indicate that the following two items will be under the "startup" tab: "iTunesHelper" and "qttask." These were not listed. Second, when I clicked the "services" tab and selected "hide all microsoft services," there were 25 items still listed, which seems not right to me. I did not proceed here because I was concerned about causing some disaster.
    If anyone has any insight here and would be willing to share it, I would greatly appreciate it!
    PS--is there a way to copy and paste the list of startup programs so that I can print them and review them one by one? Thanks!

    +But before all of that, I wanted to note that I created a new user account and was able to access iTunes that way.+
    Up until now you've been working through techniques for troubleshooting System-wide problems. But that fact you relate about the user accounts indicates that you've got a user-account-specific problem, and the troubleshooting techniques are different for those.
    In your normal user account, try the techniques listed under "User-specific Troubleshooting" in the following document:
    iTunes for Windows Vista: Troubleshooting unexpected quits, freezes, or launch issues

  • Systemd --user issues

    Hi,
    upon running
    systemctl --user status
    I get
    Failed to read server status: Input/output error
    Here are my dumps of systemctl status user@$UID and journalctl -b _SYSTEMD_UNIT=[email protected] I know pulseaudio is not starting correctly, I probably still have it set up to start the service instead of the socket. Wanted to change that but --user is not working at all. Any tips welcome!

    mauritiusdadd wrote:
    Is that the only message displayed? Is there anything interesting in the journal? What is the output of the following commands?
    systemctl status dbus.service
    systemctl status --no-pager
    systemctl --state failed --no-pager
    Here is dbus, systemctl status --no-pager and failed. Tor fails with this, so it doesn't seem to be related.
    karol wrote:https://bbs.archlinux.org/viewtopic.php?id=186232 ?
    I read the thing and at the end he says it was a conflicting symlink. How can I find that? I don't know from logs what is causing the issue and browsing through folders I don't see anything specific. Tor is the only failing service and there is just 1 symlink pointing at the correct place. For pulseaudio I don't see a symlink at all.

  • Sharepoint browse portal from AD users issue

    Dear All,
    for my sharepoint 2013, i am able to browse the portal from system admin user with no issue but not for AD users !!
    it keep showing windows security credentials required despite i put the correct credentials,
    what should i do?
    please help

    Hi iwadds,
    According to your description, my understanding is that SharePoint keeps on prompting for authentication.
    I suggest you test with IE and add the site into Trusted Site.
    If you configure proxy server for IE, please try to bypass it.
    http://msdn.microsoft.com/en-us/library/cc750194.aspx
    If this issue still exists, please disable lookback check. You can do as the following blog:
    http://sp-vinod.blogspot.com/2013/03/disable-loop-back-check-in-sharepoint.html
    Best Regards,
    Wendy
    Wendy Li
    TechNet Community Support

  • Essbase users issue

    Hi Guru's,
    we created around 1800 users for the current project. But the issue is if we synchronize all users from Shared services, Essbase might be hangs.
    these belong to native.
    So kindly let me know how to handle this issue?????
    Anyone seen this behavior before or have any suggestions?
    Thanks in Advance.................

    1.so when you have created users and assigned those users with role then you have to refresh security through eas,of course it will take some time for 1800 users after that you will have to connect again its just as that messagge says when you refresh it.
    2.now i will be sharing what i have done,basically i have users list and i made maxl scripts using excel having maxl statements(create user 'john doe';..) and i have executed them and same goes with roles tooo.When we execute this maxl scripts users will be in sysn with shared services.(this has worked for me )
    also go though from page 617
    http://download.oracle.com/docs/cd/E12825_01/epm.111/esb_dbag.pdf

Maybe you are looking for