OAM View-Only Access in 11.5.10.2?

Is there any way to give a user view-only, or inquiry, access to OAM?
Or is there any way to give a user any access (view-only or not) to OAM without granting that user the "System Administrator" responsibility?
We are on 11.5.10.2 (CU2).
For SOX compliance, we need to remove "System Administrator" from our developers' EBS IDs. But these developers then lose any access to OAM when their "System Administrator" responsibility assignment is removed.
Auditors might find this surprising, but our developers need access -- even if View-Only -- to OAM in Production in order to monitor complex things like Workflow processes, managers, etc.
11.5.10.2 does have 2 seeded OAM responsibilities, but they do not seem to grant a user any access to OAM: "OAM Patch History" and "OAM Read Only Mode".
Any suggestions would be appreciated.

Did you figure out a way to achieve this?I believe this cannot be achieved -- Please log a SR to confirm this with Oracle support.
Thanks,
Hussein

Similar Messages

  • BOE XI 3.1 - 'View only access' to ADMIN User Account

    Guys,
    we are using BOE XI 3.1 FixPack 1.6 version.
    I want to create a Test ID (for example, Test_ID) which is having ADMIN Access. But i need to provide 'View Only Access' to this Test ID account. Means this Test ID can enter into CMC. But should not modify/delete/add/ users or usergroups or folders in CMC.
    Is it possible to provide 'View Only Access' to the user who is having ADMIN access?
    Much appreciated. Thank you.

    Hi Seb,
    This is not working. I tried the same in one of the Test ID (This is an Enterprise Account).
    But i am getting the message "Account information not recognized: Access is denied" in the CMC login page.
    I logged in via Administrator and verified the Test ID. The account is enabled.
    Please any help.
    Thank you.
    regards,
    Kiruba v.r.

  • View-only access to Catalyst 2960/2960S device manager

    I have noticed that when I access the (Web-based) device manager on a Catalyst 2960 or 2960S switch, the authentication prompt (from within IE, at least) includes the phrase, "The server <switch-hostname> at level_15_or_view_access requires a username and password." This would seem to imply that it's possible to configure view-only (a.k.a. read-only) access to the device manager, which would be perfect for first-level support personnel (in our environment). I reviewed the information on how to configure local authentication for the Web server (leveraging "ip http authentication local" among other commands), but the examples are a bit too broad for me understand how to specifically (and only) allow someone coming in via HTTP(S) to gain read-only access to the device manager. (Command line access should be denied entirely for the view-only user, if possible, or at least limited to commands that can't modify the switch's configuration.) Assuming this is possible, could someone cite the command sequence required?
    Thanks,
    Mike

    Hi,a customer want a user which has view-only rights on his catalyst switches. I created a user whit privilige level 7.If you log into the CLI everything is fine. But by trying to log into the web page the system wants a level 15 user.Is their any possibility to grant the level 7 user "view-only" rights on the Catalyst Device Manager?Thanks.Thanks.
    Hi,
    Check out the below link for SDM for read only user configuration
    http://conft.com/en/US/docs/routers/access/cisco_router_and_security_device_manager/application/notes/SDMcli.pdf
    Hope to Help !!
    Ganesh.H
    Remember to rate the helpful post

  • View only access to iCloud files

    I can send a link to my keynote files on iCloud, but is it possible to restric this to view only? I want to share slide shows with my students, but I don't want them editing my slides! Thanks....

    I see that there is a "View Only" option when I enable sharing in my keynote presentation.  But when I view the presentation while being signed out on a different computer, I am able to download and even edit the presentation!  What gives?  I can even print the presentation.

  • Material Description View Only Access

    We are trying to restrict the ability to change the material description for any transaction other than MM01 to the Basic Data 1 and 2 views. Due to business concerns, locking that field is not an option. We attempted to customize the subscreens to set the field attribute to output only, but it is set at a global level and setting the field to output only everywhere. This has been attempted through both Screen Painter and by following the documented subscreen customization process.
    I would greatly appreciate any input or suggestions.

    Dear Jeff,
    You could do this with Transaction Variant - Transaction SHD0.
    http://help.sap.com/saphelp_webas620/helpdata/en/eb/5fab41d79b11d296190000e82de14a/content.htm
    In the SAP Reference IMG, you can create transaction variants. Choose Basis Components -> Application Personalization -> Tailoring of Application Transactions -> Configure Transaction-Related Display Values for Fields (Transaction SHD0). Transaction variants allow you to preset values for fields in a transaction, set field attributes, or hide entire screens.
    To execute a transaction variant, you define a variant transaction using the Transaction Maintenance transaction (SE93).
    Once you have entered a transaction code and short description, choose transaction type Transaction with variant (Variant transaction).
    To define a variant, enter the name of the transaction and the name of the variant. You can then use the new transaction code to start the special variant of the transaction.
    Hope this will help.
    Regards,
    Naveen.

  • Visual administrator access - view only access

    Are there any roles available for just view access to Visaul Administrator tool? 
    We would like to give view access to the development team if that is possible...thanks..

    Hi,
    There no such type of Access providing to the developers
    We have to Login into VA with J2EE User itself. So no Chance
    Check with this Link if Helpfull
    http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
    Regards
    Seshagiri
    Edited by: N V Seshagiri on Feb 19, 2008 5:26 AM

  • Opening a shared "view only" Keynote in Keynote for iOS ?

    I've shared a keynote with co-workers and given them view-only access.  It really needs to be viewed either on a Mac or in Keynote for iOS so that it retains it's audio soundtrack and it's animations.  My co-workers don't have Macs, but they do all have staff iPads.  When I send them a link to share the view-only keynote, it tries to direct them to a Safari tab and iCloud. 
    Is there a way for them to open a view-only Keynote in the Keynote app for iOS?  That's the only way they can see it with the designed animations and audio.

    I figured it out and they DO play the background soundtrack on the iPad.
    These were files created in Keynote 5.3 (iWork '09).  However, since that version doesn't allow sharing to iCloud, I made a copy of the file and opened it in Keynote 6.2 (newest version).  I shared it to iCloud as view-only.
    When you click on the emailed link to the shared document, it opens a page in Safari on the iPad.  This page includes a download link.  Once you wait for the download process to finish, the normal "Open in. . ." popup (overlay at the top) appears on the Safari page and it then allows you to open the presentation in Keynote for iOS.  This plays the file AND the background soundtrack.  One of the presentations had an iTunes playlist as the background soundtrack.  Another presentation had a "recorded narrative".  Both files played with their audio intact. 

  • View only responsibiliteis in 11.5.8

    Can someone please help me ? I am new at this. I want to set up the resposibilities in "view only" mode so that user cann't update the data. Does anyone knoe how to do this?
    Please let me know. Any help would be appreciated.
    Nikunj

    From Release 11 there are seeded Inquiry Only responsibilities available for few modules.. For e.g. Payables Inquiry, Receivables Inquiry. These responsibilities can be assigned to the users as View Only access modules.
    To check the seeded responsibilities: System Administrator responsibility
    Navigate: Security&gt;Responsibility&gt;Define
    Find: %Inquiry
    For the modules where such feature is not available, you may have to determine the Form Functions for which you need query only feature.
    Login as System Administrator: Application--&gt;Function--&gt;
    In form function window query the function that you want to run in QUERY ONLY mode, create a new Function (record) using this function name, and enter QUERY_ONLY=YES in the parameters field. Create or modify the menu and menu structure that needs to be attached to this function. Create or modify the responsibility to associate with the above menu/menu structure. Finally assign this responsibility to the user.
    Best Regards,
    Sanjeev

  • How to grant accountB view only permission to all objects owner by accountA

    Hello,
    I would like to accountB have view only access to AccountA's objects, tables, views, procedure names and code, functions name and code, etc.
    I do NOT want the accountB create any new object or execute any object belongs to accountA.
    How do I do that?
    Thanks.

    Tables and views are relatively easy, but you've got to do it on an object by object basis (thus it will need to be part of the promotion process whenever A creates a new object). You can write a bit of dynamic SQL to handle the grants for existing objects.
    CREATE ROLE a_read_only;
    BEGIN
      FOR t IN (SELECT * FROM dba_tables WHERE owner = 'A')
      LOOP
        EXECUTE IMMEDIATE 'GRANT SELECT ON a.' || t.table_name || ' TO a_read_only';
      END LOOP;
      FOR t IN (SELECT * FROM dba_views WHERE owner = 'A')
      LOOP
        EXECUTE IMMEDIATE 'GRANT SELECT ON a.' || t.view_name || ' TO a_read_only';
      END LOOP;
    END;
    GRANT a_read_only
       TO b;Granting access to code is a bit more complex (at least potentially). From a database perspective, you can grant A SELECT access on DBA_SOURCE. That will allow B to write queries against DBA_SOURCE to see code but it will apply to all code that anyone owns, not just A. And if B is using a tool to try to view the code, that tool will generally want to query ALL_SOURCE which only has data for the source of objects that B has the ability to execute. You could create a view that exposes just the rows from DBA_SOURCE that you want B to see but then no tool will ever be able to display the source.
    Justin

  • Allowing View Only right to CMC in BO 4

    We are trying to create a VIEW only access to our BO consultant in our production CMC.  But there are certain things that are hard to control.  For example, Authentication - Is there a way to make it VIEW only.  How about other options listed below - is there a way to make it so he can view it but not change it;
    Deleting Licensing Info
    not allow changes to Configuration of Audit database
    in Settings not allow hot backup durations, cluster members, Reset Account Activity - Peak Licenses user
    We are using BO 4.0 SP5 Patch 5.4 on a windows server.
    Thanks
    Abdul

    Hi,
    you can find more information hete:
    What's new in BI 4.0 SP06 - Specify CMC Tab access with user group
    Please be aware that this functionality is available only with SP06 and later.
    Regards
    -Seb.

  • Is there way 2 give users VIEW only in Adm Services Console(essbase)?

    Hi,
    Currently we have ADMIN user logging into "Administration Services Console" (essbase) and we would like to give access to a super user access to this as well so he can view the calcs. Is there a way to give that person VIEW only access?
    jang

    galen2 wrote:
     am i missing something obvious, or is this not available in audition ?
    No, that view (that I've always found rather annoying, myself) isn't available. But zooming in and out in Edit View is easily and rapidly achieved by more than one method, and once you've got used to it you'll not particularly want to go back, I suspect. Audition isn't a clone of Wavelab, and Adobe deliberately don't implement features in the same way as in other software unless there is absolutely no choice in the matter - which is rare.
    Incidentally, most people in your situations find replies like this quite annoying. Please don't take it personally - that's just the way it is with software; you get used to the way it works, or if you don't like it then get something else that does it for you. There is no universal paradigm for how an audio editor 'ought to' work, and neither should there be. But in this regard, I have to say that an awful lot of editors all over the world having to work fast in radio stations use Audition as the tool of choice - simply because editing on it is extremely intuitive and quick, without resorting to confusing multi-screen views.

  • View read allows read only access

    Hi friends,
        I have created maintainance view, I am getting this warning " View read allows read only access , Maintainance not possible". So to avoid this, what should i do now.
    Thank you

    Hi,
    In Delivery and maintence check if the field Data Browser/Table View Maint. has the value delivery and maint allowed
    or delivery and maint allowed with restrictions.
    Regards,
    Rajesh Kumar

  • How to view only specific authentication requests in access tracker

    Requirement:
    How to view only "Healthy/Unhealthy" requests from a specific Webauth service.
    Solution:
    If we have more than one Webauth service (based on conditions such as Device type or NAS IP or posture status etc) and we need only Healthy/Unhealthy requests from a specific service in access tracker for administrative use; we need to create a custom Data filter.
    Configuration:
    Below are the steps to achieve the same:
          Navigate to Monitoring > Data filters > Click on "Add" option to create a new filter
          Specify a name on the "Filter" tab
          Select the "Rule" tab to specify the unique condition (to filter the access tracker request)
          Create the below conditions: 
                     ( Commonystem-Posture-Token CONTAINS Healthy ) 
                     -   AND   -   ( Commonervice CONTAINS Windows-health-check )
          5.        Save this filter
    Now we can use this Data filter in access tracker to only view Healthy Webauth requests from "Windows-health-check" service.
    Verification
    So now we can verify the output by looking at the access tracker. 
    At present we can see "Eight" webauth requests in access tracker. Now we want to see only Healthy web-auth request from "Windows-health-check" service.
    We change the data filter to the Custom "healthy-filter" and now only see one request in access tracker as per our requirement.

    Hi Vignesh,
    ANy luck on this ? I am trying the almost same thing...and stuck at same point.
    Please let us know if you have any more information.

  • How can I view only a subset of my contacts in iOS?

    I have a large number of contacts.  I sync my contacts with iPad, iPhone, and Mac Contacts.  How can I group my contacts, then choose to view only one group?
    I see how to create groups in OSX, although it is a little tedious to begin with to create a field for grouping for each and every contact.  But I cannot see how to use these groups in iOS7, or maintain the grouping field, or view only a subset of all accounts.  My goal is to create a group of personal contacts, like favorites, then see only those contacts by default but have access to all contacts if I need to.

    How can I select only a portion of my screen to be recorded with QuickTime?  I've seen this as an option online but can't figure out how to make the program able to highlight a certain area of my screen to be recorded.
    If you are still using Snlow Leopard, then you can't. This functionality was added to QT 10.1 which runs under Lion.

  • XCM(Extended Configuration Management) Read Only Access for Webshop

    Hi,
    We dont hav e XCM admin access in our project.We need to have just the view(read only) access.This will help us immensly during any troubleshooting. Plus we will save a lot of time while troubleshooting if the view access is avaialable to us. In case of any issues in the XCM setting, we can easily pin point the issue and ask the ERP team to change it. In absence of it we can only speculate what could have gone wrong on the XCM side. Is there any role in XCM so that we can get just read only access.
    Regards

    Hi,
    The below note will help you.
    Note 1014383 - Read only user in the XCM and Administration area of ISA
    Regards,
    Shanto Aloor

Maybe you are looking for