Multiple User Request via GRC 10.1

Hi ,
I was trying to submit multiple user for role assignment via GRC 10.1  . I was able to submit the request but when the request was forwarded to the role approves the approves not able to either reject or approve the request as in the risk violations tab there is no user id is showing.   In our workflow we need to run the risk analysis prior approving a request . Much appriciate if you anyone could advice where it goes wrong .

Dear Kumar,
can you please provide some more information. From my point of view risk analysis for multiple user works. The analysis criteria always shows as in your screenshot. If you check in SLG1 you can see if the risk analysis has been started and if you have errors.
Can you please check SLG1 and provide us with more infos?
Best regards,
Alessandro

Similar Messages

  • Enabling right click for multiple user accounts via ARD

    Is there a way to enable secondary click on multiple user accounts at the same time using ARD? Is it possible to do this using a UNIX code? If so could someone give me an example of the code?
    Thanks in advance for any help.

    It should be something like:
    defaults write com.apple.driver.AppleHIDMouse Button2 2
    You'll need to get the exact domain name for your systems' mice; use
    defaults domains
    and look for the mouse driver entry.
    Regards.

  • GRC 10: Initial password for multiple users creation in a ARQ request???

    Hi All,
    I was trying to create a request in ARQ for multiple users. I noticed that, I could add all the necessary required information for multiple users using the template. I added the roles as well. However, I could not set the initial password for multiple users as the tab "User System Details" (where the initial password is provided for a single user) is disabled!!!
    The users were successfully created in the R/3 system. However, due to non-availability of initial password, these users could not log into the R/3 system.
    May I know how to set the initial password for multiple users?
    Regards,
    faisal

    Vit,
    I was trying to test this multiple user creation scenario. But I am surprise to get a template where in I have only below mentioned fields:
    1. User Name
    2. User Id
    3. Email
    I filled these details and uploaded. Then filled the "User Access" details. While submitting the request, I got the error:
    "Last name is not mentioned for user id XXX"
    But there is not such column in provided template by GRC!
    I added 2 columns: First Name and Last Name and saved it and uploaded again. These details are not picked up!
    Following are the only columns shown:
    1. User Name
    2. User Id
    3. Email
    4. Manager
    Out of above, only "Manager" field is editable and others are disabled.
    Last time I remember, I has got complete template with all the columns. Unfortunately, I have deleted it and not available with me now.
    Any idea you have why am I getting such incomplete template?
    Regards,
    faisal

  • One CUP request for assigning role to multiple users

    Hi,
    We assign roles to users in production only through CUP requests.. We use GRC 5.3
    Here we have a case where we need to assign one role to  60 users in production(each user may have different  roles assigned in the back end) . I can raise one CUP request for all users using " multi-user" option in Copy request . But when we want to make a risk analysis , it will not show risks at user level as each user had different roles and may get different risks by adding new role.
    Instead it will give risks if any for only that new role which want to assign. Our manager is not accepting as this is not giving complete picture of risks for each user when we add new role.
    Please suggest me if there is any other way where I can make a risk analysis for each user when I created a CUP request for multiple users.
    Or the only solution is to create 60 CUP requests ?? this would be too manual
    Regards ,
    jaags

    Raghu,
    thanks for the reply, you are right as per the audit .But suppose if it is for 200 users ,creating 200 CUP requests will be impractical right.
    there should be some solution for this , because there will be many situations practically where we have to assign roles to N number of users.
    Is this possible in GRC 10 ? any idea ?
    Regards,
    Jaags

  • GRC EAM - Single Firefighter Multiple User Login

    Hi Folks,
    Good Day...Please need your valuable suggestion on the below issue...
    We have configured GRC EAM 10.0 with a mapping of Single User Id to Single Firefighter but now we have got a scenario where Multiple Users require single Firefighter ID .
    Mapping is done for Multiple users with single Firefighter ID., we have logged in with first user and successfully working but same time when the other user logged in, it is not allowing to enter into same firefighter (Popping a message as User1 is already using Firefighter)
    Please provide me if any solution...

    Hi Hima
    Good to hear (sorry for your first question and this one led me down that path)
    I assume the program to login to SAP (can't remember name off the top of my head) performs a check to see if FF is configured and the User is a FF Id. This program is locked down so you cannot view the code (if it's not the program then the kernel is performing a check but pretty sure it's the program).
    So in short, as soon as you configure the user to become a FF Id then it cannot be logged into via logon pad.
    As an additional security measure you should be able to deactivate the FF Id password as it is not required by GRC. This will add additional certainty that no user can access it (you will have change documents to show this should the account ever be removed as a FF Id).
    Regards
    Colleen

  • User details are missing in Access request in GRC 10.0

    Hello All,
    When we are trying to create Access request in GRC 10.0 for an user it results as user  details not found.
    Under SPRO - Maintain data source configuration we have configured 2 HR systems HR1 and HR2.
    But the User details exits in HR1 system and lies in validity also. We have tried to run the Repository Object Sync also still unable to search the details.
    But we observed even after the Sync job User details are not created in table GRACUSER and GRACUSERCONN. Is this could be the problem. Why its not updating even after the Sync job many times almost 10 times.
    We have also configured parameter 5023 to YES.Please advise.
    Thanks in advance.

    Did the sequence for HR1 set to 1 or 2, I hope you are following the suggestions given by Luciana in other thread.
    Please post your data source config screenshots otherwise.
    BR,
    Mangesh

  • Not able to create request for multiple user in oim 11gr2

    Hi,
    I am trying to assign a resource to multiple user using oim identity console as System Administrator.
    But when i am assigning the resource to multiple user its taking the same value for both the users.
    Please let me know how to add the different value for different users.
    Thanks

    That's the rules of how it works.  A request has 1 request form per resource for all users on the request.  Those fields must all be marked as available in bulk as well to be viewed if you have more than 1 user on the request.  If you need to provide different values based on the user, your best option is pre-populate adapters on the process form and use logic to populate the fields.  You will not be able to manually provide different values during the request.
    -Kevin

  • Multiple Users, Multiple iPods sync problem

    At home my iMac is set up with multiple accounts for my family members, 2 have iPod Nano's and I've an iPhone. Each of us has our own iTunes library. Now, a lot of the time I will stay logged in and just return to the log in window. Same goes with the kids who do the same (Time limited accounts means this happens quite often as they don't get logged off automatically).
    Up until 9.1 iTunes (I think, could have been 9.0) everything worked fine. I would leave my iTunes running constantly - this allowed me to stream over to our Airport Express units using the iPhone Remote app whenever I felt the need.... However, we've now run into a problem.
    More often than not my daughter will log in, dock her iPod and it won't show up on her iTunes - instead I have to switch to my user account where I'll find it showing up on MY iTunes! I then have to shut down my iTunes to allow her to sync her iPod with her iTunes.
    This didn't used to happen, it used to be that the user who was CURRENTLY logged on would get the plugged in iPod but that appears to be totally broken - I can't find any documents that say this is the way it was meant to work, searching the 'net for multiple users, multiple iTunes turns up so much that it's impossible to find any related issue.
    Is anybody else noticing this? Am I doing something daft wanting to use iPods & iTunes like this? Any suggestions on how to fix the issue?
    Thanks for any help!

    Chris CA wrote:
    it used to be that the user who was CURRENTLY logged on
    But according to your post, other users are still CURRENTLY logged on.
    Ok, so 'logged on' is vague, the other users are still logged on. I mean the user that has the desktop focus. The active user.
    a lot of the time *_I will stay logged in_* and just return to the log in window. Same goes with the kids who do the same (Time limited accounts means this happens quite often as *_they don't get logged off_* automatically).
    You can set System prefs - Security to log users off after xx minutes of inactivity.
    Yes, you can, but that does not solve the issue on 2 levels:
    1. If I did that then I couldn't leave my iTunes logged in to be able to stream from it to my Airport Express units. I'd have to manually go to the iMac and log myself in - which would kinda defeat the benefit of being able to control this all remotely as I've been doing perfectly happily for the past couple of years. 9 times out of 10 I don't want to be logged off for any number of reasons.
    2. As I said, some members of the household have Time Limits on their accounts via Parental Controls. This does not log users off, it merely drops them back to the login window. There is no way that I know of setting this up to actually log off. As a side issue, it'd be great if I could specify that for certain members of the family who use up all their time and get pushed back to the login window with Flash games running in a browser window consuming CPU unnecessarily... but that's a side-issue.
    You can send suggestions for iTunes here -> http://www.apple.com/feedback/itunesapp.html
    Um, ok, great, suggestion: Make iTunes work the way it used to work please . Seriously though, this is not a new feature request, I want to see if other people have experienced this and if there is a work-around out there.

  • Multiple Users - NOTES (Outlook/iTunes Synchronization issue)

    To date I have tried everything I can think of. My wife and I share one computer, and we use Outlook. We have new iPhones (purchased yesterday), and it appears that most of what we need to allow separate entries is working properly.
    However, in Outlook I can set up different "groups" of notes, but I cannot get iTunes to recognize them. Both my wife and I use Notes a lot ... we rely heavily on them (from our older Palm Centro and other Palm OS devices). We would like to be able to use the notes and have them synchronized, but she doesn't need my notes, and vice versa.
    Does anyone have suggestions for getting this to work?

    Notes do not appear to allow for multiple users via Outlook. Too bad. I have put in a "wishlist" request for this. Am closing the question.

  • CUP 5.3 - Single Sign On fu00FCr end user request screen?

    Hi everyone,
    Is there any way to achieve Single Sign On in a windows environment using the corporate Active Directory for the END USER REQUEST SCREEN in CUP 5.3?
    I am aware of the document "Single Sign-On with SAP BusinessObjects Access Control 5.3" by the SAP GRC RIG (Harleen Kaur) so I know how to achieve Single Sign On for the CUP application itself.
    I am also aware of the option to deactivate "end user verification required" in the authentication source definition in CUP.
    What our end users are asking for is true single sign on. They would like to enter a request WITHOUT providing network user ID and/or password manually.
    Thanks!

    Hi Raghu,
    Thanks a lot!
    We have not yet configured SSO but are in the phase of analyzing our options.
    I understood that SSO is only possible for the server:port//AE/index_apr.jsp page in CUP.
    What about the end user request screen (server:port/AE)? Will this work with Windows-SSO using SPNEGO? Would I set the authentication source to LDAP or to UME (UME has multiple LDAP as user data source)?
    Many thanks and best regards
    Patrick

  • Sharing an iTunes Library across multiple user account and a network.

    Sharing an iTunes Music Library across multiple user accounts.
    Hello Everybody!
    Firstly, this was designed to be run in Mac OS X 10.4 Tiger. It will not work with earlier versions of Mac OS X! Sorry.
    Here's a handy tip for keeping your hard drive neat and tidy, it also saves space, what in effect will be done is an iTunes music library will be shared amongst multiple users on the same machine. There are advantages and disadvantages to using this method.
    • Firstly I think it might be worthwhile to state the advantages and disadvantages to using this approach.
    The advantages include:
    - Space will be saved, as no duplicate files will occur.
    - The administrator will be able to have complete control over the content of the iTunes library, this may be useful for restricting the content of the Library; particularly for example if computer is being used at and education institution, business or any other sort of institution where things such as explicit content would be less favorable.
    - The machine will not be slowed by the fact that every user has lots of files.
    The disadvantages to this system include.
    - The fact that the account storing the music will have to be logged in, and iTunes will have to be active in that account.
    - If the account housing the music is not active then nobody can use the iTunes library.
    - There is a certain degree of risk present when an administrator account must be continually active.
    - Fast User Switching must be enabled.
    Overview:
    A central account controls all music on the machine/network, this is achieved by storing iTunes files in a public location as opposed to in the user's directory. In effect the system will give all users across the machine/network access to the same music/files without the possibility of files 'doubling up' because two different users like the same types of music. This approach saves valuable disk space in this regard and may therefore prove to be useful in some situations.
    This is a hearty process to undertake, so only follow this tutorial if you're willing to go all the way to the end of it.
    Process:
    Step 1:
    Firstly, we need to organize the host library, I tidied mine up, removing excess playlists, random files, things like that. this will make thing a bit easier in the later stages of this process.
    Once the library is tidied up, move the entire "iTunes" folder from your Home directory to the "//localhost" directory (The Macintosh HD) and ensure that files are on the same level as the "Applications", "Users", "Library" and "System" directories; this will ensure that the files in the library are available to all users on the machine (this also works for networks)
    Optionally you can set the ownership of the folder to the 'administrator' account (the user who will be hosting the library.), you may also like to set the permissions of 'you can' to "Read & Write" (assuming that you are doing this through the user who will host the library); secondly you should set the "Owner" to the administrator who will be hosting the library and set their "access" to "Read & Write" (this will ensure that the administrator has full access to the folder). The final part of this step involves setting access for the "Others" tab to "Read Only" this will ensure that the other users can view but not modify the contents on the folder.
    Overview:
    So far we have done the following steps:
    1. Organized the host library.
    2. Placed the iTunes directory into a 'public' directory so that other users may use it. (this step is essential if you plan on sharing the library across multiple accounts on the same machine. NOTE: this step is only necessary if you are wanting to share you library across multiple accounts on the same machine, if you simply want to share the music across a network, use the iTunes sharing facility.
    3. set ownership and permissions for the iTunes music folder.
    Step 2:
    Currently the administrator is the only user who can use this library, however we will address this soon. In this step we will enable iTunes music sharing in the administrator's account, this will enable other users to access the files in the library.
    If you are not logged in as the administrator, do so; secondly, open iTunes and select "Preferences" from the "iTunes" menu, now click the "Sharing" tab, if "share my library on my local network" is not checked, the radio buttons below this will now become active, you may choose to share the entire libraries contents, or share only selected content.
    Sharing only selected content may be useful if their is explicit content in the library and minors use the network or machine that the library is connected to.
    If you have selected "share entire library" go to Step 3, if you have selected share "share selected playlists" read on.
    After clicking "share selected playlists" you must then select the playlists that you intend to share across your accounts and network. Once you have finished selecting the playlists, click "OK" to save the settings.
    Overview:
    In this step we:
    1. Enabled iTunes sharing in the administrator's account, now, users on the local network may access the iTunes library, however, users on the same machine may not.
    Step 3:
    Now we will enable users on the same machine to access the library on the machine. This is achieved by logging in as each user, opening iTunes, opening iTunes preferences, and clicking "look for shared music". now all users on the machine may also access the library that the administrator controls.
    This in effect will mean that the user will not need to use their user library, it will be provided to them via a pseudo network connection.
    As a secondary measure, I have chosen to write a generic login script that will move any content from the user's "Music/iTunes/iTunes Music" directory to the trash and then empties the user's trash.
    This is done through the use of an Automator Application: this application does the following actions.
    1. Uses the "Finder" action "Get Specified Finder Items"
    1a. The user's "~/Music/iTunes/iTunes Music" folder
    2. Uses the "Finder" action "Get Folder Contents"
    3. Uses the "Finder" action "Move to Trash"
    4. Uses the "Automator" action "Run AppleScript"
    4a. with the following:
    on run {input, parameters}
    tell application "Finder"
    empty trash
    end tell
    return input
    end run
    IMPORTANT: Once the script is adapted to the user account it must be set as a login item. in order to keep the script out of the way i have placed it in the user's "Library" directory, in "Application Support" under "iTunes".
    Overview:
    Here we:
    1. Enabled iTunes sharing in the user accounts on the host machine, in effect allowing all users of the machine to view a single iTunes library.
    2. (Optional) I have created a login application that will remove any content that has been added to user iTunes libraries, this in effect stops other users of the machine from adding music and files to iTunes.
    Step 4:
    If it is not already enabled, open system preferences and enable Fast User Switching in Accounts Options.
    Summary:
    We have shared a single iTunes library across multiple user account, while still allowing for network sharing. This method is designed to save space on machines, particularly those with smaller hard drives.
    I hope that this hint proves to be helpful and I hope everybody will give me feedback on my process.
    regards,
    Pete.
    iBook G4; 60GB Hard Drive, 512MB RAM, Airport Extreme   Mac OS X (10.4.6)   iWork & iLife '06, Adobe CS2, Final Cut Pro. Anything and Everything!!!

    how to share music between different accounts on a single computer

  • How Can I Login To Multiple User Accounts Simultaneously

    I am using an Intel iMac (2GHz Intel Core 2 Duo) with 1GB of memory and 10.4.11. I have Fast User Switching enabled. I restart the Mac every morning. Then I login to a second user account. While at work, I access these accounts via VNC.
    Sometimes I forget to login to the second user account. I do it from work via VNC, which sometimes causes complications.
    Does OSX support simultaneous multiple user account login? If not, is there a work-around solution such as an AppleScript? This would provide a time savings to me, as well as a convenience if I forgot to login to the second user account before leaving home.
    Thank you.
    Kurt R. Todoroff

    Seems to me, in another discussion, the simple Fast User Switching does not
    do much really fast or automatically; there are a few faster steps than having
    to log into each and every account change (even when FUS is enabled) so
    this later development sounds a little more automatic, esp over a distance.
    Is there a third party app or valid script that an do the multiple logins automatic
    after the first-run; so passwords need not be re-entered, and the screen can just
    switch over "fast" to another open account window, ready to go to work in there?
    {And not just a keyboard shortcut to save a few little steps, overall.}
    Whichever way the road turns...
    Good luck & happy computing!
    {edited}

  • Multiple users accessing the same data in a global temp table

    I have a global temp table (GTT) defined with 'on commit preserve rows'. This table is accessed via a web page using ASP.NET. The application was designed so that every one that accessed the web page could only see their data in the GTT.
    We have just realized that the GTT doesn't appear to be empty as new web users use the application. I believe it has something to do with how ASP is connecting to the database. I only see one entry in the V$SESSION view even when multiple users are using the web page. I believe this single V$SESSION entry is causing only one GTT to be available at a time. Each user is inserting into / selecting out of the same GTT and their results are wrong.
    I'm the back end Oracle developer at this place and I'm having difficulty translating this issue to the front end ASP team. When this web page is accessed, I need it to start a new session, not reuse an existing session. I want to keep the same connection, but just start a new session... Now I'm losing it.. Like I said, I'm the back end guy and all this web/connection/pooling front end stuff is magic to me.
    The GTT isn't going to work unless we get new sessions. How do we do this?
    Thanks!

    DGS wrote:
    I have a global temp table (GTT) defined with 'on commit preserve rows'. This table is accessed via a web page using ASP.NET. The application was designed so that every one that accessed the web page could only see their data in the GTT.
    We have just realized that the GTT doesn't appear to be empty as new web users use the application. I believe it has something to do with how ASP is connecting to the database. I only see one entry in the V$SESSION view even when multiple users are using the web page. I believe this single V$SESSION entry is causing only one GTT to be available at a time. Each user is inserting into / selecting out of the same GTT and their results are wrong.
    I'm the back end Oracle developer at this place and I'm having difficulty translating this issue to the front end ASP team. When this web page is accessed, I need it to start a new session, not reuse an existing session. I want to keep the same connection, but just start a new session... Now I'm losing it.. Like I said, I'm the back end guy and all this web/connection/pooling front end stuff is magic to me.
    The GTT isn't going to work unless we get new sessions. How do we do this?
    Thanks!You may want to try changing your GTT to 'ON COMMIT DELETE ROWS' and have the .Net app use a transaction object.
    We had a similar problem and I found help in the following thread:
    Re: Global temp table problem w/ODP?
    All the best.

  • Is there an app or way for multiple users to access contact info?

    We are a small business that maintains a contact list of leads and clients in a MS word file. We can access those word files via our iphones, but only view them. Is there an app or way to have one person in the office maintain a database of leads and clients that a few users can access via iphone and simply touch the phone number to call them or touch the address for directions/map?
    We know we could each input the info in each of our phones independently, but that is dumb - given someone in the office maintains such info as part of their job and updates it weekly/monthly whatever. Do you see what I mean? I cannot believe there is nothing out there for this.
    Basically we are looking for a continuously updatable, multiple user, remotely accessible, interactive contact database with name, address, and phone number. I think that is what I would call it.

    I can access phone numbers directly from our client list in word.
    And that solves your quest looking for "a continuously updatable, multiple user, remotely accessible, interactive contact database with name, address, and phone number"?
    Wow... I never know Microsoft Word could do so much!

  • Multiple users on computer

    This question is somewhat answered on other forum posts, but it begs to be asked again. If enough people ask, maybe the bean counters will start to understand how regular customers buy and use books. Then those same features will be available on eBooks.
    Just installed ADE on one computer, under one user account. (System: Windows XP PRO sp3). Did this as both my wife and myself are getting eBook readers for Christmas. (Augen "TheBook" units)
    First issue / question why not have multiple user ID's supported on single device through the ADE interface directly?
    Can I actually have multiple activated ID's on XP via separate user log-ins? (Again, ADE should be one program instance with multi-users IDs to the one instance, not separate Windows accounts. It should also have a share/loan function and frankly an ownership transfer function.)
    The eReader device itself does not appear to support multiple user logins. So, I guess that means the reader is lock to a single Adobe ID?
    When will the above changes occur if ever?
    (I am also posing this question to Augen's tech support.)
    My soapbox comments to feed up to the publishing world's bean counters that are forcing DRM and fixing prices.
    Real world buying habits. Single book bought by myself or wife may be read by both of us. (Gee! Isn't that a surprise! We don't buy 2 copies.) And maybe occasionally loaned to a friend, passed on to a friend, donated to charity or sold at a garage sale. More likely sitting on a shelf after one or 2 reads.
    Real world current MSRP/list price on a new eBook: As much as or maybe slightly less than the same printed Hardbound book. More than same printed paperback book.(Viewed recent Mary Higgins Clark book as example: 75% of Amazon hardcover price and 163% of not yet released paperback price.)
    Real world cost of delivering eBook vs printed book: About one-tenth the cost of a printed book. And that is with all the extra manpower wasted on DRM programing and servers.It would be a twentieth without the DRM costs.
    Printing, warehousing and transporting books is not cheap. I am in the printing business. I know this.
    An eBook cuts out all the labor and material of printing, all the costs of physical warehouse and transport, and wasted un-sold product or remaindered product. Unsold returns from retailer back to distributor or manufacturer very by catagory and title. But range from 10-50%. That all is gone with an eBook.
    So, every level from publishing to retail is more profitable with the ebook model.
    Real world use of an Ebook with DRM ePub. Restricted to single user on apparently 6 computers and 6 portable devices. Effect is that at best I can buy a book and others in my household may read it on one of the registered devices as well. I have paid as much or more than a trade paperback. Publisher has received a higher profit by far and so has seller. Author has not received a higher percentage or royalty most likely.
    I can not sell it as used, I can not donate it to charity or library. This, even though I have paid full retail and that is effectively ten plus times as much over traditional printed book production and distribution costs. Distributor actually may have higher costs as they must maintain records access for an extended time, which with court cases will in the future probably mean 20 plus years. But, that cost should be well offset by no warehousing or brick & mortar store costs.
    Of coarse I can still read the full printed library of Mark Twain books that my grandmother purchased for my father and uncle in the 1920's today. And those books will last another 100 years with moderate care. So I am paying ten times more than cost, and book may last 20 years (with luck and no business failure)  INSTEAD OF 200.
    Long story short, I am willing to purchase an ePub even with reasonable DRM protections and at a price at or lower than trade paperback, even at 75% of hard bound one new releases on occasion. But, at the much higher profit potential of a single purchased book to publisher and retailer, one should be able to use and share it the same as a printed book.
    As it is, I can not even directly buy an eBook on most sites as a gift. Don't publishers know that books a often bought as gifts?
    Publishers: If your eBook sales are not at the level you would expect, maybe, just maybe the points above may have something to do with why consumers are not buying into eBooks as you would hope.
    I guess that ends my rant for now.

    This might not be the right way but since I was having similar issues today, this something that worked.
    I placed the domain.site file on my time capsule and the Imac which I created the pages with remembered the site.
    On my mac mini I can access the site it if I open the domain.site file directly using the finder and it will then open iweb on my mac mini. If I open iweb directly, it seems to remember previous iweb sites that I created but not the current one.
    Hope this helps.
    If anyone else has another way please let us know.

Maybe you are looking for