OIM 9.1.0.2 provisioning privileges for user?

Hi there,
I can provision users to my DB. Great.
However, if the user then logs on to the DB, they are rejected because they do not have connect privileges.
How can I set up my provisioning so that the user is not only created in the DB, but also granted basic privileges that allow them access DB features?
All the best, 2Hugh

I am using the Standard Connector.
The question is how do I use it?
The tasks described below were performed in the Design Console as xelsysadm.
I have opened the process Database Access Oracle User and ticked the auto-prepopulate and Autosave form.
I've set up a pre-populate rule that calls this process and refers to the resource object called Database Access Oracle User RO. It only fires if the user created is in group Oracle.
I've opened Form Designer and created a new version of UD_DB_ORA_U (Database Access Provisioning form for Oracle User). Within the pre-populate tab of this form, I've added pre-populate entries for username, password and IT resource.
In the child tables tab under the UD_DB_ORA_U form, the roles and privileges tables are present.
However, I can not see how I can configure these so that they get pre-populated with the other user pre-populate entries (IT resource, username and password).
Any help with my impasse much appreciated.
Thanks,
2Hugh
Edited by: 2hughg on 16-Feb-2011 07:31

Similar Messages

  • Failed to reconcile provision object for User

    Hi,
    I am doing RACF reconciliation for users.
    But reconcilaition events are in Event Received state.
    If I try to reapply th recon matching rule.
    Exception is Failed to reconcile provision object for User.
    any pointer?

    Once Verify reconsilation Data, specially which are mandatory for User.

  • Remove sysdba privilege for user

    Hi,
    $ sqlplus
    SQL*Plus: Release 9.2.0.7.0 - Production on Thu Apr 19 05:57:41 2007
    Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.
    Enter user-name: / as sysdba
    Connected to:
    Oracle9i Release 9.2.0.7.0 - 64bit Production
    JServer Release 9.2.0.7.0 - Production
    SQL> exit
    Disconnected from Oracle9i Release 9.2.0.7.0 - 64bit Production
    JServer Release 9.2.0.7.0 - Production
    $
    $
    $ id
    uid=5000(webman) gid=103(wbroot)
    $I want to remove "sysdba" connect privilege for user "webman", what do I need to do?
    I am on HPUX
    Thanks

    I tried the revoke command below & I am stiil able to connect as "/ as sysdba" for webman.
    revoke sysdba from webman;These are the users on in the DB.
    SQL> select username from dba_users;
    USERNAME
    SYS
    SYSTEM
    OUTLN
    WEBMAN
    DBSNMP
    SECW
    SEC
    DAEMON
    8 rows selected.
    SQL> select username,granted_role,default_role from user_role_privs;
    USERNAME                       GRANTED_ROLE                   DEF
    WEBMAN                         CONNECT                        YES
    WEBMAN                         DBA                            YES
    WEBMAN                         OT_ADM                         YES
    WEBMAN                         OT_OWNER_ROLE                  YES
    WEBMAN                         OT_SEC                         YES
    WEBMAN                         OT_USR                         YES
    WEBMAN                         RESOURCE                       YES
    7 rows selected.

  • OIM 9.1.0.2 provisioning privilege configuration?

    Hi there,
    I've set up an access policy to provision users of a certain employee type/role to an Oracle DB.
    However, (a) when I create said user, no provisioning seems to occur.
    (b) I'd like to adapt the provisioning so that it grants connect privilege and some other privileges to users of this type.
    If I provision the user manually, they are created in my DB fine.
    Any help given gratefully received.
    Go well, Hugh
    Edited by: 2hughg on 09-Feb-2011 05:52

    Which group you have attached with Access Policy ?
    Have you created membersip rule for that group ?
    Access Policy always works with Group. Just givemembership to newly created user into Group which is attached with Access Policy and see what happens.

  • "Create User" gives ORA-01031: insufficient privileges for user sys

    I am on Oracle 11g db, 11.1.0.6 and login successfully using sys/password as sysdba. This login is successful.
    [oracle@RH5-32-OR bin]$ ./sqlplus sys/abcd1234 as sysdba
    SQL*Plus: Release 11.1.0.6.0 - Production on Thu Jan 21 06:06:51 2010
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.1.0.6.0 - Production
    With the Partitioning, Oracle Label Security, OLAP, Data Mining,
    Oracle Database Vault and Real Application Testing options
    However, I cannot create a new user, getting error about insufficient privileges. I though since this is a sys login with role DBA, it should be allowed to create user.
    I also logged in to enterprise manager console using the same credentials, and navigated to: Security->Sys.
    - Under the system tab, and can see "Create User" granted.
    - Under the role tab, there is DBA granted.
    SQL> create user myuser identified globally;
    create user myuser identified globally
    ERROR at line 1:
    ORA-01031: insufficient privileges
    Where to check for previleges? And how to debug. I am really very surprised.
    Thanks.

    I don't have first hand experience of using Database Vault myself, but according the manual the default setup prevents SYSDBA from creating users when Database Vault is enabled (which I would guess is the case based on the banner posted above) This behaviour can be modified by the Vault administrator.
    http://download.oracle.com/docs/cd/B28359_01/server.111/b31222/db_objects.htm#BEIJIFGA

  • [Gnome] Sometimes (!) missing privileges for user

    Hello,
    every 10th or so boot, I don't seem to get all the rights I specified for my user - that means I'm unable to mount DVDs and under System I'm missing the shutdown/reboot/... options. That's very peculiar since usually it is there and I don't see any reason why sometimes it just doesn't work.
    Thanks
    Moritz

    If we gave you the solution to this issue, we would also give you the solution to your ability to change the stop time.
    It's unix, there may be a way of doing what you want. In this situation, I think it would be hard. You need to look into sudo.  To install a program you need admin priveleges.
    Robert

  • Provisioning Adaptor for Primavera

    Hi All,
    please could you tell me the Provisioning Adaptor for Primavera is exists
    or not? It's very important for me because my company wants integrate
    Oracle Internet Directory with Primavera.
    And now I start learning Oracle Identity Managment (OIM 9.0.2). I haven't experience in Identity Managment, but our company has integrated OID with OEBS. And next level we need to integrate OID with Primavera.
    How I can do my adaptor to Primavera? Please give me reference to documentation because I can't find it.
    Please give me your experience in this question and describe what method I have to select in this case.

    http://www.ilounge.com/index.php/articles/comments/inline-remote-mic-adapters-fo r-iphone/
    Google is your friend...

  • Provisioning/Reconcilation of user details b/w OIM and microsoft outlook

    Hi All,
    I need help regarding provisioning/Reconcilation of user detials between OIM and Microsoft Outlook.
    Can anyone send me by providing any documents,links or any other source so that i can follow that for performing it.
    Thanks & Regards,
    Rajesh.

    Hi All,
    I created the java program which creates the contact in the outlook.But for running the program with out errors I set the path of two jar files in the classpath. Now I created the jar file and while loading the jar file from the list it is showing as server could not load class.The program requires one DLL file also.I didnt set its path in the classpath.
    I tried to resolve it by following this link but it didnt got solved.
    Server could not load class
    Can anyone help me to resolve this so that my class works fine.
    Thanks & Regards,
    Rajesh.

  • OIM 11g - Issue with Bulk Load Utility for Account Data

    Hi,
    We are trying to load the account data for users in OIM 11g using bulk load utility.
    We are trying to load the account data for resource "iPlanet". For testing purpose, we made one account entry in csv file and run the bulk load utility. After the bulk load process completes, we have noticed that resource is provisioned to the user multiple times and multiple entries have been created in process form table.
    We have tried to run the utility multiple times with a different user record each time.
    The out put of the below sql query:
    SELECT MSG FROM OIM_BLKLD_LOG
    WHERE MODULE = 'ACCOUNT' AND LOG_LEVEL = 'PROGRESS_MSG'
    ORDER BY MSG_SEQ_NO;
    is coming as follows:
    MSG
    Number of Records Loaded: 126
    Number of Records Loaded: 252
    Number of Records Loaded: 504
    Number of Records Loaded: 1008
    Number of Records Loaded: 2016
    Number of Records Loaded: 4032
    We have noticed that each time the number of records loaded is increased to double from the records loaded in last run even when the csv file contains only one record.
    Provided below are the parent and child csv file entries.
    Parent file:
    UD_IPNT_USR_USERID,UD_IPNT_USR_FIRST_NAME,UD_IPNT_USR_LAST_NAME,UD_IPNT_USR_COMMON_NAME,UD_IPNT_USR_NSUNIQUEID
    KPETER,Peter,Kevin,Peter Kevin,
    Child file 1:
    UD_IPNT_USR_USERID,UD_IPNT_GRP_GROUP_NAME
    KPETER,group1
    Child file 2:
    UD_IPNT_USR_USERID,UD_IPNT_ROL_ROLE_NAME
    KPETER,role1
    Can you please throw some insight on what could be the potential cause for this issue and how it could be resolved?
    Thanks
    Deepa
    Edited by: user10955790 on Jun 25, 2012 6:45 AM

    Hi Deepa,
    I know from 'User load' perspective that is required to restart Oracle Identity Manager when we need to reload data that was not loaded during the first run.
    So, my suggestion is restart it before reload.
    Reference: http://docs.oracle.com/cd/E21764_01/doc.1111/e14309/bulkload.htm#CHDEICEH
    I hope this helps,
    Thiago Leoncio.

  • IPod Classic 80GB - "iTunes library cannot be saved you do not have enough access privileges for this operation" It says it has synced but it hasn't. Help please I am not very tech minded

    iPod Classic 80GB. Message reads ' iTunes library cannot be saved you do not have enough access privileges for this operation'.  It says it has synced but it hasn't. Please help, I am not very tech minded.

    See this article about troubleshooting the error message regarding access privelages.  It may be preventing your iTunes library from being able to save/retain music you have recently imported to it, which may explain why no new content is being added to your device.
    Trouble adding music to iTunes library or importing audio CD
    B-rock

  • HT1751 I am trying to backup my iTunes library onto an external hard drive but it won't complete due to 'insufficient privileges for some of the items'. Am I doing something wrong and is there a solution to this problem?

    Hi All,
    I am currently trying to backup my iTunes library onto an external hard drive so that I can copy it onto my new Macbook Pro. I have been following the steps posted on the Apple website however each time I get a dialogue box stating:
    'The operation cannot be completed because you do not have sufficient privileges for some of the items'.
    Is this because I have items that were bought under another persons iTunes account? If so, is there a solution to this problem? Or am I doing something completely wrong?
    Thanks in advance,
    Sbrooks19

    Go through the below forum with similar issue and follow the process mentioned by "Macjack" in the beginning.
    https://discussions.apple.com/thread/4499820

  • What does this message mean, "The iPad cannot be synced.  You do not have enough access privileges for this operation?"

    I need some help syncing my iPad.  I get a message about not having enough privileges for this operation.  Any help would be appreciated.
    Thanks,

    It means you are using windows and the user agent stuff is messed up.
    Try looking at permissions on the drive iTunes library is on.

  • HT1386 I get an error message when I try to sync my iPod touch - "you do not have enough access privileges for this operation"

    I recently installed a new hard drive on my PC, downloaded iTunes, updated the software on my iPod touch and now I get this error message when I try to sync:  "you do not have enough access privileges for this operation."  It never did this before, whether it's the upgrade in software or something in iTunes, but it's very frustrating, since I'd like to add more things to my iPod.

    See:
    iPhone - not enough access privileges: Apple Support Communities

  • How do i resolve my itunes from saying " The itunes application could not be opened. You do not have enough access privileges for this operation."

    Everytime i click to go to my itunes, the message "The Itunes application could not be opened. You do not have enough access privileges for this operation." pops up. I have tried my best to fix it by adding another account to my computer and setting that one as the administator and mine as the regular user. When i did that the itunes worked on both, but when i changed my account back to administator and the other account to the regular user my account didnt work but the other one did. I also tried to uninstall and reinstall itunes. This message popped up when i tried to update the itunes to the newest one. And still it wont go away. Can someone help me please. Thanks!

    Are you logged in with administrative rights? Did you check your security software settings? Troubleshooting security software issues

  • Help! "The iTunes application could not be opened. You do not have enough access privileges for this application"

    I am getting the following error when trying to open iTunes: "The iTunes application could not be opened. You do not have enough access privileges for this application." I am logged in with the admin (and only) user account on my laptop, so I'm confused as to why this would start happening all of the sudden.
    I poked around in the control panel trying to find random options that would fix it, but nothing has. I'm running Windows 7.
    Thanks for any help!

    have you seen this discussion ?

Maybe you are looking for