Modify user authorization on runtime

Hi,
I would like to know if there is a way we can modify a user's authorization during program runtime?
Appreciate any help on this.

Hi,
Try with TCODE: SUIM
Regards,
Bhaskar

Similar Messages

Authorization Policy for Modify user in OIM 11gR2

Hi Experts,
Requirement: I want the users in particular org not to modify certain user attributes and users from other org should be allowed to modify user.
I have created user1 whose organization is org1 and role is role1. I have also created user user2 under same org and same role. I assigned the Admin Role "User Administrator" role to user2.
So If user2 from same org1 tries to modify certain attributes then OIM should throw error message. I have completed till this.
But when the user from diff org say org2 with Admin Role "User Administrator" tries to modify user, OIM is not allowing to modify user which should not be the case.
I want the Auth Policy to trigger only for Org1. I have specified the below condition for my custom policy in OES admin console but it is not triggering.
The condition is
IF ( OrclOIMTargetEntity = 'true' AND OrclOIMUserOrganizations = 'true' AND STRING_AT_LEAST_ONE_MEMBER_OF(OrclOIMUserOrganizations,['25','1000000']) = true )
What am I missing?
Any help is much appreciated.

Hi
Can anyone let me know the steps to restrict modify user operation for the users belonging to specific organization in OIM 11gR2. The condition which I specified under Authorization Policy in APM console is not triggering at all.
Thanks!

How to get acrobat reader exe path on user system at runtime

aoa!
i want to open oracle reports in acrobat reader. for this purpose, i need acrobat reader exe file path of client. plz help to get that path in oracle reports.
Tools used:
Oracle Reports version 6
Database: 10 g
OS: Windows XP SP2
Regards
M. Asim Hameed

<userSettings>
<Client.Properties.Settings>
<setting name="ParamValue" serializeAs="String">
<value>OFF</value>
</setting>
</Client.Properties.Settings>
</userSettings>
If i modify the value during runtime from "OFF" to "ON" by opening the
Client.exe.config, the application still access the old value. But if i close the application and open again then it reads the updated value.
Is there someway to make the exe read the updated user settings at runtime .
Regards Nithin Joseph
Hello,
I am afraid that it is impossible because the application just read that value just one time when loading the application, and the modification will not affect the value any more.
Instead, you could place a xml file, and load the value when you want to do any action with the event handler.
Regards,
Carl
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Usr_key: Modifying user in OIM 11gr2

Hi Experts,
My requirement: while modifying the user i need to get the "usr_key" or "User Login" of that user for further use.
I am new to OIM, so can anyone of you help me in resolving my isseu.
Thanks in advane.

Hi
Can anyone let me know the steps to restrict modify user operation for the users belonging to specific organization in OIM 11gR2. The condition which I specified under Authorization Policy in APM console is not triggering at all.
Thanks!

Non-Super User Authorization

Dear expert,
SBO only allow super user to modify the authorization. Is there any solution for non-super user to change the authorization setting.
Regards,
Kit

Kit,
Login as SuperUser,
1. Go to Administration>System Initialization>Authorization-->General Authorization.
2. Select your User -->In the right hand side window select "No user Authorizations" at the end of the window -->Give full authorization.
Let me know if this works.
Thanks
Krishna
Message was edited by:
Krishna Kishor Kammaje

-2 ERR_USRFAIL: User authorization failed

Hello guys,
First to mention my system:
OS: Windows 2003 server
DB: MaxDB 7_7_06_17
I have one problem to connect through Database Manager to one DB instance that just now I have installed.
What I want to do is to install one MDM server.
The bellow are the steps that were already performed:
-installed Java server with sapinst (this created its database ZJD)
-after this Java server was finished installed I started to create one DB MDM instance using SDBSETUP.exe
-I was able to create this MDM instance successful
And the problem is here: This MDM database instance that was created with defaults users DBA and DBM. When the creation of this MDM was finished I tried to connect with both Database Manager and DBMCLI to MDM instance using these users but I am not able to connect. I get the   "-2 ERR_USRFAIL: User authorization failed" error. Can you tell me which is the reason?
I am sure that I typed the right user and password. I tried to uninstall all and installed again inclusive OS and the same error. I mention that to instance ZJD I am able to connect.
I tried with default users for Maxdb (DBA with pass: SECRET and DBA and DBM with pass: SECRET and DBM) but this doesn't work.
Can you help me to solve this problem?
Best regards,
Florin Radulea

Hello,
Bellow is the output for
sdbregview u2013l command:
package "DB Analyzer":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            bin/dbanalyzer.exe
IS SUBPACKAGE:        NO
DBANALYZER PATH:      E:/sapdb/programs
package "Server Utilities":
PACKAGE DIRECTORY:           e:/sapdb/programs
SOFTWARE VERSION:            7.7.06.17
PACKAGE VERSION:             0
VALID:                       YES
MODE:                        64 bit
MODIFICATION DATE:           13.04.2010
REQUIRE:                     Base >= 7.7.06.17
FILELIST:                    YES
HAS DISPLAY NAME:            NO
SCRIPT:                      YES
TEST FILE:                   bin/x_server.exe
IS SUBPACKAGE:               NO
INDEPENDENT PROGRAM PATH:    E:/sapdb/programs
package "PCR 7300":
PACKAGE DIRECTORY:        e:/sapdb/programs
SOFTWARE VERSION:         7.3.00.59
PACKAGE VERSION:          0
VALID:                    YES
MODIFICATION DATE:        13.04.2010
REQUIRE:                  Base >= 7.3.00.59
FILELIST:                 YES
HAS DISPLAY NAME:         NO
SCRIPT:                   YES
TEST FILE:                runtime/7300/pgm/libpcr.dll
IS SUBPACKAGE:            NO
PRECOMPILER 7300 PATH:    e:/sapdb/programs
package "PCR 7301":
PACKAGE DIRECTORY:        e:/sapdb/programs
SOFTWARE VERSION:         7.3.01.22
PACKAGE VERSION:          0
VALID:                    YES
MODIFICATION DATE:        13.04.2010
REQUIRE:                  Base
FILELIST:                 YES
HAS DISPLAY NAME:         NO
SCRIPT:                   YES
TEST FILE:                runtime/7301/pgm/libpcr.dll
IS SUBPACKAGE:            NO
PRECOMPILER 7301 PATH:    e:/sapdb/programs
package "PCR 7500":
PACKAGE DIRECTORY:        e:/sapdb/programs
SOFTWARE VERSION:         7.5.00.51
PACKAGE VERSION:          0
VALID:                    YES
MODE:                     64 bit
MODIFICATION DATE:        13.04.2010
REQUIRE:                  Base >= 7.5.00.51
FILELIST:                 YES
HAS DISPLAY NAME:         NO
SCRIPT:                   YES
TEST FILE:                runtime/7500/pgm/pgm64/libpcr.dll
IS SUBPACKAGE:            NO
PRECOMPILER 7500 PATH:    E:/sapdb/programs
package "Webtools":
PACKAGE DIRECTORY:    e:/sapdb/programs/web
SOFTWARE VERSION:     7.6.03.09
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              ODBC >= 7.6.03.09 64
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/webdbm.dll
IS SUBPACKAGE:        NO
WEBTOOLS PATH:        E:/sapdb/programs/web
package "SAP Utilities":
PACKAGE DIRECTORY:           e:/sapdb/programs
SOFTWARE VERSION:            7.7.06.17
PACKAGE VERSION:             0
VALID:                       YES
MODE:                        64 bit
MODIFICATION DATE:           13.04.2010
REQUIRE:                     Base >= 7.7.06.17
FILELIST:                    YES
HAS DISPLAY NAME:            NO
SCRIPT:                      YES
TEST FILE:                   bin/dbmrfc.exe
IS SUBPACKAGE:               NO
:                            E:/sapdb/data
INDEPENDENT PROGRAM PATH:    E:/sapdb/programs
package "Redist Python":
PACKAGE DIRECTORY:     e:/sapdb/programs
SOFTWARE VERSION:      7.7.06.17
PACKAGE VERSION:       0
VALID:                 YES
MODE:                  64 bit
MODIFICATION DATE:     13.04.2010
REQUIRE:               Base
FILELIST:              YES
HAS DISPLAY NAME:      NO
SCRIPT:                YES
TEST FILE:             bin/x_python.exe
IS SUBPACKAGE:         NO
REDIST PYTHON PATH:    E:/sapdb/programs
package "Base":
PACKAGE DIRECTORY:           e:/sapdb/programs
SOFTWARE VERSION:            7.7.06.17
PACKAGE VERSION:             0
VALID:                       YES
MODE:                        64 bit
MODIFICATION DATE:           13.04.2010
REQUIRE:
FILELIST:                    YES
HAS DISPLAY NAME:            NO
SCRIPT:                      YES
TEST FILE:                   pgm/dbmcli.exe
IS SUBPACKAGE:               NO
INDEPENDENT DATA PATH:       E:/sapdb/data
INDEPENDENT PROGRAM PATH:    E:/sapdb/programs
package "JDBC":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.6.06.05
PACKAGE VERSION:      0
VALID:                YES
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            NO
IS SUBPACKAGE:        NO
JAVA DRIVER PATH:     E:/sapdb/programs
package "Messages":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     MSG 0.7732
PACKAGE VERSION:      0
VALID:                YES
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            NO
IS SUBPACKAGE:        NO
MESSAGES PATH:        E:/sapdb/programs
package "ODBC":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/sdbodbc.dll
IS SUBPACKAGE:        NO
ODBC PATH:            E:/sapdb/programs
package "SQLDBC 77":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Database Connectivity >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/libSQLDBC77.dll
IS SUBPACKAGE:        NO
DBC PATH:             E:/sapdb/programs
package "Database Kernel":
PACKAGE DIRECTORY:    f:/sapdb/mdm/db
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Server Utilities >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/kernel.exe
IS SUBPACKAGE:        NO
DEPENDENT PATH:       f:/sapdb/mdm/db
PACKAGE DIRECTORY:    e:/sapdb/zjd/db
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Server Utilities >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/kernel.exe
IS SUBPACKAGE:        NO
DEPENDENT PATH:       e:/sapdb/zjd/db
package "Loader":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Redist Python >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            bin/loadercli.exe
IS SUBPACKAGE:        NO
LOADER PATH:          E:/sapdb/programs
package "SQLDBC":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base
FILELIST:             YES
HAS DISPLAY NAME:     YES
SCRIPT:               YES
TEST FILE:            pgm/libSQLDBC.dll
IS SUBPACKAGE:        NO
DBC PATH:             E:/sapdb/programs
package "SQLDBC 76":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.6.06.07
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Database Connectivity >= 7.6.06.07
FILELIST:             YES
HAS DISPLAY NAME:     YES
SCRIPT:               YES
TEST FILE:            pgm/libSQLDBC76.dll
IS SUBPACKAGE:        NO
DBC PATH:             E:/sapdb/programs
package "Fastload API":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              SQLDBC 77
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/libSDBLoader.dll
IS SUBPACKAGE:        NO
FASTLOAD PATH:        E:/sapdb/programs

After 10.1.2 upgrade, Create/Modify User/Group requires re-authentication

I have 3 systems - 2 were 9.x (AS10g R1) upgraded to 10.x (AS10g R2), 1 was installed as 10.x. On the two upgraded systems, after a Portal user logs in (with administration privileges), navigates to the "Administration" tab and clicks either the "Create New User", "Modify User", "Create New Group" or "Modify Group" links, they are prompted for a username and password again. On the system installed with 10.x, this does not happen. Submitted iTar was unresolved. Has anyone seen this before?
Thanks in advance.

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you boot, and again when you log in.
Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a Fusion Drive or a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to boot and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal boot may also be somewhat slow.
The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, reboot as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

Variable value to be populated based on user authorization

Hi all,
I want to have a variable with single value on plant.
when the user executes the report, value of the variable has to be populated automatically based on the authorization of the login user and it has to show the output without displaying the selection screen.
Kindly guide me of, what type of variable to create and to proceed.
Thanks.
I

Hi
Restriction Plant from user authorization can be achieved by the following steps
1. Plant infoobject should be authorization relevant.
2. make authorization object including plant and restrict to the plant u needed and assign the profile to the user
3. in BEX create variable of authorization type on plant. this variable will get the default values for the plant from the user authorization on the selection screen of the query.
4. if you dont want to display the variable on the selection screen then remove the chek box in variable that " variable is not ready for input"
thanks
radhika

HELP - Modify user group by bulk un CUCM 8.6

Hi guys,
I am having problem by update/modify user group on CUCM.
There are already some users within user group with admin privileges. That should be changed, so I created a group with some privileges and then I tried to change the usergroup by bulk. but the bulk ADDS the usergroup to the correct and maintain both.
After that I decided to have 2 rows, for the same user, one for the group with empty space (to delete it), and another with the new usergroup. But CUCM does not either do that. it sills maintain the user group..
Does anyone has successfully changed the user group by bulk?
I will appreciate your advices.
Update Users - Custom File
Begin Time : 04/29/2015 13:46:41
Query :
Update Users in CUCM_1L_Template.csv
Failure Details :
users Error Code Error Description
******** NO ERROR FOUND ********
Result Summary :
UPDATE for 2 USERS passed.
UPDATE for 0 USERS failed.
End Time : 04/29/2015 13:46:41
Kind Regards.
Juan Gerardo Hernandez
CCNP Voice

That's correct, what you're seeing is WAD, this topic has been discussed plenty of times before, the only option you have is SNR

Adobe Premiere Elements 11 unable to launch - User receives Debug & Runtime Errors

Adobe Premiere Elements 11 unable to launch - User receives Debug & Runtime Error. The Adobe program launches and the Premiere Elements splash screen displays. Once the "Loading ImportQuicktime.pm" function completes the following errors display:
The program has been re-installed without success. The only way to open the program is to "Run as Different User" windows 7 function, using the local admin account. The Preferences Folders have been deleted and recreated without success. Any information for this error will be great. Thank you for your time.

Hi UBDEV,
Thanks for posting on the Adobe forums.
Please tell us if this system is on Network, if yes please make sure that My Documents Folder should be on the local drive not on the Network drive.
Regards,
Sandeep

OIM 11g Modify User Profile for Updating End Date

Hi Gurus!
We have an OIM implementation where users may request the creation of other users by means of a Create User request template. In this template we set the End Date to be 3 months after the request date.
In order for the requester to extend the period of a user's OIM user account (along with its provisioned resources) we customized a Modify User Profile by displaying the End Date field and automatically populate it again to 3 months after the request date. Also we developed a custom event handler to enable the user when it is disabled and the End Date is updated to a future date.
This Modify User Profile is working great when the user is still enabled (the End Date is still in the future), however, when the End Date has passed (and the user is Disabled) the requester is not able to see the user when selecting the Modify User Profile request template.
Is there a way to allow requesters to also see disabled users in the Modify User Profile request template?
Thank you in advance.
Regards,

Hi Kevin,
thanks for your reply!
But, in this case, when the user is already disabled due to his End Date, how can a requester, through the Self Service TAB, enable it?
The Enable User request template does not work since when trying to enable the user, OIM sees the End Date is already passed and the DataSet validation throws an exception.
The only way I saw was providing a Modify User Profile Request template to change the End Date and developing a custom event handler to enable the user upon the extension of the End Date...
How can, in this situation, a requester enable the user and extend its End Date?
Thank you!
Regards,

Can approver modify user's request form in OIM 11g?

Dear All,
In OIM 10g, the approver of a request can modify user's request form, we just need to configure the permission in OIM. But, can we do it in OIM 11g?
If can, how can i configure it?
really need your help guys,, :D
Thank you,
--herry

Hi user12841694,
Thanks for the suggestion. But, the data (field) that can be modified by the approver is very limited. We cannot attach multi-valued attribute there (like Child Form).
Regards,
---herry

Portal Runtime error when modifying: com.sap.portal.runtime.logon.par

Hello,
We need some help because we get 'Portal Runtime error: iView: N/A Component Name:N/A' error when trying to access portal logon screen.
This is what we've done:
We've modified com.sap.portal.runtime.logon.par file and we've uploaded it but it doesn't work. Because of the error, we've overwritten this file with the original one but now it's imposible to access portal.
The situation it seems to be like before the modification of the .par file but we get the same error and can't access portal.
Please, do you know what could be the problem?
Thanks in advance

Hi Belen,
Here are the steps you would need to take
1. import the original par file into the NWDS and name the project as
    com.sap.portal.runtime.logon
2. Make sure the project name is com.sap.portal.runtime.logon
3. use winzip/winrar to extract the com.sap.portal.runtime.logon.par file in
    a local directory
4.Under the lib you would find two jar files copy them and paste them in your project
   under dist>PORTAL-INF>lib directory
5.move the files cert....till umResetPass....jsp into the PORTAL-INF directory
6. export the par to the server in question
7. restart your server
This should solve your problem..
Thanks,
Gokul

Modify User Postprocess event handler

Hi All,
Can some one tell me how to fetch complete set of user data in orchestration while i trigger my update event handler.?
eg
I have a event handler which is working fine on create user operation.(populates a custom udf Country based on employee type and another filed called city)
Now in my update if i update my city country shd be updated,but orchestration only returns values for the fields which are updated and not all,my employee type is returned as NULL,which makes my code to fail
Can anyone tell me how to get the existing data in orchestration?
I hope I am able to explain my scenario
Thanks

You can get all the attributes from Identity array or User
Check this
Re: EventHandler - How to get user Key
To modify user attribute
Urgent help required: Event Handlers
You can get lots of post related to you question.
HTH

Unable to modify user password through OAM identity system console.

HI,
I am trying to reset the password of a user through OAM Identity console.
I had logged in through orcladmin(admin), and tried to update the password for users, as well as orcladmin also.
After clicking save, its giving me error "Modify User Entry Failed" and password is not updated in LDAP
Also note that I am able to modify any other attribute of that user like last name, title, firstname etc through identity console.
Its only user password attribute which is not geting updated.
I am user OVD, which is integrated with OID & AD for user store.
Also I tried to set "Access Attribute control" for modifying user password, but that didnt help.
Kinldy suggest if you have came across this kind of issue.
Regards,
Ankit.

HI,
Thanks for the replies.
As my OVD is integrated with OID & AD both, I am picking up the users from OID for update.
Also the SSL is configured betveen OVD & AD, but still AD user password is also not successfull.
Niether of two is working.
I am not able to create a user through Identity System console, as I had not configured workfllow.
I believe for updating user attibute, workflow defination need not to be define.
Also As I had mentioned before, I am able to modify all the other attributes other than user password.
Also Schema is extended properly.
Thanks & Regards,
Ankit

Modify user authorization on runtime

Similar Messages

Maybe you are looking for