OIM 9.1.0.2 Resource Profile Query

Hello
I need to get the usr_key or any info on the users in OIM that have a certain condition. I have a number of OID resources for users that have a status or 'provisioned' but when looking at the resource tasks the system validation is set to 'cancelled'. Due to this, updates are not flowing to these users. I am looking through the tables to try to find the resource task list and the status info so I can find the system validation cancelled and location those users. Does anyone have a query to search through and find all users with system validation = canceled and resource status as provisioned? Any help you can give would be appreciated.
Thanks
Nick

I'm positive there's a great way to do it with SQL, but you'll need to look at 4 tables:
1) OBJ (Objects) - Here you are looking in OBJ_NAME for 'OID User', once found get the OBJ_KEY value for the row.
2) OST (Object Status) - In this table, you can find all the statuses for the OID User resource based on the OBJ_KEY value. Look for the applicable ones and get the OST_KEY value for each row.
3) OIU (Object Instance for Users) - Now you can query this table for all results where OST_KEY equals the desired values as found in step 2.
4) USR (Users) - Here you can get the User ID's (usr_login), User Key (usr_key) or any other value for users to help with the query.

Similar Messages

  • OIM manipulating provisioning - description on resource profile

    Kamaraden!
    I have an OIM installation with AD and Exchange connectors. When users are provisioned, going back to the resource profile, you can see the resource and several data, for example the Description field. For AD User, descriptions shows the windows logon name (what I think it is correct), and for Exchange, it shows a number (probably a key of some table). Trying to discover from where this description field is taken, I realized that it comes from the ORC table, ORC_TOS_INSTANCE_KEY (if I change it, it changes in the description of the resource profile too).
    I have many questions about this. First of all, who puts this value in this field of the ORC table. I followed the provisioning tasks for AD and Exghange (Create User and Create Mailbox), and got inside the code (I decompiled it with cavaj), but the logic of the adapters attached to that process task and the code in the java classes, only creates efectively the user or the mailbox, and returns.. so, when the resource profile is being modified?
    Other question related to that, is where are the conventions of the process tasks names for provisioning? For example, FIELD Updated reacts over the event of modification of FIELD. Create User sounds logic for provisioning when a resource is granted on an application, but Create Mailbox? How is this task attached with the provisioning submit of a resource?
    DrLDAP

    You are right, the number that you see in the description field in the resource profile is the ORC KEY. If you need to change this to show any value in the process form, you can do so by going to the provisioning workflow form in the design console and click of Map Descriptive field.
    I dont think it has been documented anywhere about the field name<space updated> task.
    The name Create User or Create Mailbox has no significance. you can really keep any name for the task. The way OIM understands that it needs to execute this task is if it sees the task is marked as "Required for Completion". all tasks marked required for completion will be executed by oim before it can say that provisioning has been completed. For e.g i a provisioning process all you might need to do is send a mail and not create any account etc.
    then you have a task "Send mail" (or any name) mark the task as required for completion. Now when this resource is granted by the admin to the user, this task would have executed. The name is not of essence when it comes to provisioning.

  • How to enable only one resource profile outof 3 while disabling user in OIM

    Hello,
    I have 3 resource profile for AD user with 3 diffrent IT resources.
    When i try to disable the user in OIM, then it disables all the resource profiles attached for that user.
    I would like NOT to disable one of AD User Resource profile out of 3 .
    How can I do that?
    Thanks

    This is the same post as one made about a week ago.
    I would suggest the following:
    1. Create an adapter that has an input of the domain, or some other identifying attribute. In this adapter, use logic to return a response of either DISABLE or DO_NOTHING.
    2. Create a new Process Task called something like "Disable Resource Determiner". Attach your adapter you just made, and on your response codes, for DISABLE, trigger the disable task, and on DO_NOTHING, then do nothing... Set this adapter to be triggered on disable.
    3. On your previous disable task, remove the disable trigger.
    Now when your disable is triggered, you have logic to determine which target resource is being used, and then whether or not to disable the resource or do nothing.
    -Kevin

  • Restrict the reources on OIM resource profile

    Hi all,
    Is it possible to restrict the resources that show up on the resource profile.
    I have a requirement where AD administrators should o nly manage their resource.
    Thanks,
    M

    Go to Resource Object and Remove the Allow All check box , it wont show up in resource file for any user
    Also , check the Provision by Object Admin Only
    Thanks
    Regards
    Edited by: Surendra Singh Khatana on Apr 7, 2010 11:39 PM

  • Removing items in Resource Profile

    Hello,
    I had a poorly configured AD adapter while test provisioning a few users, and now the Resource Names are stuck in a permanent "Provisioning" status. Inside, all task say "Cancelled". Can I do anything to remove the bad "AD User" resources from a user's Resource Profile?
    Thanks much
    Alex

    Certainly Yes. As you said that your tasks are in a status of canceled, so it means its equivalent to the Delete Resource use case. This process might be similar to the Task Archival process provided by the OOTB OIM. Refer the following section of the documentation for Section-10 Using the Task Archival Utility
    http://download.oracle.com/docs/cd/E14049_01/doc.9101/e14059/tasks_archival.htm#sthref96
    Hope it helps.
    Thanks
    Sunny

  • Any update in UDF should also reflects in resource profile

    Hi,
    I want to do a task:-
    I am updating any user defined field in user form(Ex. Middle name). I need that it should automatically updated in resource field(Iplanet) and vice-versa.
    How can i do this task??
    Thanks

    Hi,
    done the following things
    1) In Lookup.USR_PROCESS_TRIGGERS I have added Code as USR_UDF_LOCATION and decode as Change location name
    2)Created an Adapter named as Iplanet Change Department of type process task.
    3) Added Variable Department resolved at run time
    4) then created an Adapter task
    5)in iPlanet User process defination i added task change location and on intergartion tab set the Adapter i created.
    But not able to reflect in resource profile. Tell me if i am missing any step???

  • Resource Profile

    Hi,
    Can resource profile be shown
    for the resources assigned to other projects.<br
    />
    Regards,
    Olby Shaju

    Hi Francis,
    Interesting question...and the answer I believe is yes ;)
    If you take a look at the resource profile documentation -
    http://download-uk.oracle.com/docs/cd/B14117_01/server.101/b10739/dbrm.htm#ADMIN027
    Particularly the section on "Creating Consumer Group Mappings", we can use the SET_CONSUMER_GROUP_MAPPING procedure to set the consumer group based on a session attribute, where the session attribute is one of -
    ORACLE_USER
    SERVICE_NAME
    CLIENT_OS_USER
    CLIENT_PROGRAM
    CLIENT_MACHINE
    MODULE_NAME
    MODULE_NAME_ACTION
    SERVICE_MODULE
    SERVICE_MODULE_ACTION
    EXPLICIT
    If you take a look in v$session for an active APEX session, you will see that the MODULE contains the application details, the action contains the page details whilst the CLIENT_INFO contains either APEX_PUBLIC_USER, nobody or the login name (if the user has authenticated).
    Unfortunately the SET_CONSUMER_GROUP_MAPPING doesn't seem to let you use the CLIENT_INFO (i.e. the username), although you could potentially get round this by manually setting the module or action yourself (say to something like "app_id:page_id:username").
    Hope this helps,
    John.
    http://jes.blogs.shellprompt.net
    http://apex-evangelists.com

  • OIM 11g - Reconciliation of Target Resource Status

    Hi,
    We're working with OIM 11.1.1.5.2 and connectors DBUM 9.1.0.4 and MSAD 9.1.1.7.
    Provisioning and reconciliation seem to be working correctly, but we found that the status of the resource is not getting reconciled on OIM console.
    For example, if we provision an user with an Oracle Database account, and then lock the account on the database, when we run reconciliation the event is generated and finished with "update succeded", we go to the UD_DB_ORA_U table and find that the field UD_DB_ORA_U_LOCK has a "LOCKED" value, then if we check the logs we can see that the connector is correctly mapping the resource status with the OIM object status:
    prepareTargetUsersRecordInOIMFormat : record value : LOCKED
    prepareTargetUsersRecordInOIMFormat : map : {OPEN=Enabled, 1=Disabled, YES=Disabled, 0=Enabled, EXPIRED & LOCKED=Disabled, NO=Enabled, LOCKED=Disabled}
    prepareTargetUsersRecordInOIMFormat : roValue : TEMPORARY_TABLESPACE_QUOTA
    prepareTargetUsersRecordInOIMFormat : Temp RO value : null
    prepareTargetUsersRecordInOIMFormat : reconData : [{Default Tablespace=27~USERS, Authentication Type=PASSWORD, Password=Dummy, Default Tablespace=27~USERS, Authentication Type=PASSWORD, Password=Dummy, Default Tablespace Quota=, Profile Name=27~USUARIOS, IT Resource=Oracle, User Name=USPRUEBA65, Temporary Tablespace=27~TEMP, Account Status=LOCKED, Status=Disabled, Global DN=, Privilege List=[], Role List=[{Role Admin Option=NO, Role Name=}], Temporary Tablespace Quota=}]
    prepareTargetUsersRecordInOIMFormat:: FINISHED
    But, even though the reconciliation has succeded the administrative console shows the account on "Enabled" status, and when I check the OIU table i can see that the OIM object status is still enabled.
    I found some threads related to this issue, the most similar was this one: Reconciliation for the deleted user accounts on Target Resource but everything there do not seem to be of much help because all tasks described are already done by the connector installation (at least in msad and dbum connectors).
    This problem is happening both for Active Directory and Oracle Database Users, maybe we're missing something but based on the documentation for both connectors we thought it was an OOTB functionality. Is there some system property or connector parameter we need to configure to make this work?
    Thanks.
    Edited by: fmc on Jul 26, 2012 12:53 PM

    Hi Pallavi,
    Well, you were right after all, we were mixing 2 totally different problems here and it got us confused.
    The problem with the DBUM connector was exactly what you said, a bug in the connector, just needed to modify the connector task object to status mapping. We were checking the Reconciliation Update Received task on AD and we thought it would be the same, and it was obviously not. Well, in this case teh recon event was being generated but nothing happened, after we changed the process task it worked like a charm.
    On the other hand, the problem with the AD reconciliation was that our search filter on the recon job was configured to ommit accounts with the disabled status (!(userAccountControl=66050)), it was certainly a silly problem, never thought we had that in the filter (it's a huge filter and we didn't pay attention to that clause the first time around) but everything is working now, thanks!

  • Does the Resource Profile LOGICAL_READS_PER_CALL count TEMP

    Does anyone know if the profile resource LOCIAL_READS_PER_CALL counts reads from the TEMP/SORT segment.
    The reason I'm asking is because we had an adhoc report user write a query that caused a huge cartiesian product that consumed all of the temp tablespace, 8.5G. The knee-jerk reaction would be to add more space to the TEMP tablespace, but the poorly written query was the problem. The user running the query does have a profile that restricts the LOGICAL_READS_PER_CALL to 3500000. The query did fail since it could not allocate any space from the TEMP tablespace, but not before it caused two other sessions to fail for the same reason. The query had several sort/merge operations so I was hoping that when it was reading back from a temp segment it would be added to the counter and would then terminate the session.
    If this counter is not used for TEMP reads does anyone know of another way to limit the amount of temp space for a particular user?

    Logical read concerns the block read into the buffer no ? So I don't see relation with the tablespace TEMP.

  • Printing the Resource Profile in the Tracking View

    As above.
    Struggling to print the profile section of the Tracking View - there's a checkbox to print the profile, but it's greyed out.
    Any suggestions - or a "it's not possible" - appreciated
    Versiobn 6.2.1 - SP 3
    David

    Hi,
    after selecting a resource in Resource Center, use "Resource Assignments" in the ribbon. In Resource Assignments view, use "Timephase Data" (second button from left).
    This will give you information about Actual Work.
    Hope that helps?
    Barbara
    To increase the value of this forum, please mark the replies that helped to solve your issue as answer. If you find answers to questions from other forum participants to be helpful, please mark them as helpful. Your participation will help others to find
    an appropriate solution faster. Thanks for your support!

  • [OIM 9.1.0.2] RESOURCE NOT REVOKED BY ACCESS POLICY WHEN USER DISABLED

    Hi Experts,
    OIM Build Number: 1866.62 ( BP15 )
    IHAC that faced an unexpected behavior on User disabling.
    Some users were associated to groups that had access policies applied.
    When those users were disabled, they didnt lose their associated groups and also the resource and permission associated thru access policy applied to those groups.
    I saw that there was a bug reported to that issue. So I performed the action plan and set up the XL.EvaluateMembershipForInactiveUser System Property as TRUE. Now after disabling the users are properly removed from groups.
    Customer problem: For those users, almost 1000, I did a recon just to estimule the identity, so the membership rule was applied and the groups were removed, but OIM didn't evaluate the access policies and didn't revoke the resources.
    I ran the Evaluate User Policies task, and it seems to be stuck. Should the Evaluate User Policies schedule task work for that scenario? Should the resource after running that task be revoked?
    Any help would be very appreciated.

    Hi Nishith,
    I ran the task, but it seems really stuck. It displays the RUNNING status, but any effect is observed. I have to change task status to INACTIVE in the Design Console.
    This task has 2 attributes: Batch Size= 500 and Number of Threads=20.
    But I have noticed this task in another environment (w/ BP 18 applied), it has 3 attributes: Batch Size= 500 ; Number of Threads=20 and Time Limit in mins=1.
    Is it any enhancement for this task in order to improve its performance, or something like that?
    What else I can check?
    Thanks in advance.

  • OIM Error while provisioned AD resource

    Hi,
    During provisioning of AD resource create user is rejected and getting the following error.
    Task Name - Create User
    Resource Name:AD User
    Description:
    User:j oe [JOE]
    Status:Rejected
    Response: com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks.<init>(java.lang.String, java.lang.String
    Response Description: Unknown response received
    Notes:
    Assigned to User: System Administrator[XELSYSADM]
    Error Details
    Apr 12, 2010: Exception java.lang.NoSuchMethodException: com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks.<init>(java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, com.thortech.xl.dataaccess.tcDataProvider) was thrown in adapter "ADCS Create User". The Adapter Response was "com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks.<init>(java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, com.thortech.xl.dataaccess.tcDataProvider)" .Setting task status... "com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks.<init>(java.lang.String, java.lang.String" does not correspond to a known Response Code. Using "UNKNOWN".

    People, we already updated Ower OIM version 9.1.0.0 to 9.1.1.1 and then to 9.1.1.4. The problem is that we have problems to revoke an AD resouce, the error message in AD log is (take into account that create and modify the account works OK):
    2010-06-15 21:26:17,847 ERROR [XELLERATE.WEBAPP] Class/Method: ProvisionedResourcesForUserAction/revokeProvisionedResources encounter some problems: The logged in user does not have permissions to perform this operation
    Thor.API.Exceptions.tcAPIException: The logged in user does not have permissions to perform this operation
         at com.thortech.xl.ejb.beansimpl.tcUserOperationsBean.revokeObjects(Unknown Source)
         at com.thortech.xl.ejb.beans.tcUserOperationsSession.revokeObjects(Unknown Source)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:597)
         at org.jboss.invocation.Invocation.performCall(Invocation.java:359)
         at org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(StatelessSessionContainer.java:237)
         at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invoke(CachedConnectionInterceptor.java:158)
         at org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(StatelessSessionInstanceInterceptor.java:169)
         at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidationInterceptor.java:63)
         at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:121)
         at org.jboss.ejb.plugins.TxInterceptorCMT.runWithTransactions(TxInterceptorCMT.java:350)
         at org.jboss.ejb.plugins.TxInterceptorCMT.invoke(TxInterceptorCMT.java:181)
         at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.java:168)
         at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:205)
         at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor.java:138)
         at org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:648)
         at org.jboss.ejb.Container.invoke(Container.java:960)
         at sun.reflect.GeneratedMethodAccessor131.invoke(Unknown Source)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:597)
         at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:155)
         at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
         at org.jboss.mx.server.Invocation.invoke(Invocation.java:86)
         at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
         at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
         at org.jboss.invocation.local.LocalInvoker$MBeanServerAction.invoke(LocalInvoker.java:169)
         at org.jboss.invocation.local.LocalInvoker.invoke(LocalInvoker.java:118)
         at org.jboss.invocation.InvokerInterceptor.invokeLocal(InvokerInterceptor.java:209)
         at org.jboss.invocation.InvokerInterceptor.invoke(InvokerInterceptor.java:195)
         at org.jboss.proxy.TransactionInterceptor.invoke(TransactionInterceptor.java:61)
         at org.jboss.proxy.SecurityInterceptor.invoke(SecurityInterceptor.java:70)
         at org.jboss.proxy.ejb.StatelessSessionInterceptor.invoke(StatelessSessionInterceptor.java:112)
         at org.jboss.proxy.ClientContainer.invoke(ClientContainer.java:100)
         at $Proxy745.revokeObjects(Unknown Source)
         at Thor.API.Operations.tcUserOperationsClient.revokeObjects(Unknown Source)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:597)
         at Thor.API.Base.SecurityInvocationHandler$1.run(Unknown Source)
         at Thor.API.Security.LoginHandler.jbossLoginSession.runAs(Unknown Source)
         at Thor.API.Base.SecurityInvocationHandler.invoke(Unknown Source)
         at $Proxy800.revokeObjects(Unknown Source)
         at com.thortech.xl.webclient.actions.ProvisionedResourcesForUserAction.revokeProvisionedResources(Unknown Source)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:597)
         at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:280)
         at com.thortech.xl.webclient.actions.tcLookupDispatchAction.execute(Unknown Source)
         at com.thortech.xl.webclient.actions.tcActionBase.execute(Unknown Source)
         at com.thortech.xl.webclient.actions.tcAction.execute(Unknown Source)
         at com.thortech.xl.webclient.actions.ProvisionedResourcesForUserAction.execute(Unknown Source)
         at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
         at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
         at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
         at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
         at com.thortech.xl.webclient.security.SecurityFilter.doFilter(Unknown Source)
         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
         at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
         at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
         at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:182)
         at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
         at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)
         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262)
         at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
         at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
         at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446)
         at java.lang.Thread.run(Thread.java:619)
    2010-06-15 21:27:17,688 DEBUG [XELLERATE.ADAPTERS] Class/Method: tcADPClassLoader/getClassLoader entered.
    2010-06-15 21:27:17,688 DEBUG [XELLERATE.ADAPTERS] Class/Method: tcADPClassLoader/getClassLoader left.
    2010-06-15 21:27:17,688 DEBUG [XELLERATE.ADAPTERS] Class/Method: tcADPClassLoader/findClass entered.
    2010-06-15 21:27:17,688 INFO [XELLERATE.ADAPTERS] Event: Adding Columns to SDC. is initiated.
    Can anyone help us with this error? We are stoked and we do not know what to do? We will really apreciate your coperation. BEST REGARDS!!

  • OIM 9.1.0.1 Lookup -  Lookup Query

    Hi all
    We have already develop connector. But still have some questions...
    Parent process form with two lookup fields where second lookup values depends of the first lookup selected value.
    We have created second lookup like 'Lookup Query', yes we see right CODE, DECODE with relation of first lookup, and when pick value, only one value (DECODE or CODE) can be passed, not like simple Lookup ( when pick row ( DECODE and CODE ) saved to DB, and next review of the form field show DECODE value (but in mind) it is CODE) :)
    i want 'Lookup Query' with behavior of simple Lookup.
    any suggestions, it is possible?

    I'm positive there's a great way to do it with SQL, but you'll need to look at 4 tables:
    1) OBJ (Objects) - Here you are looking in OBJ_NAME for 'OID User', once found get the OBJ_KEY value for the row.
    2) OST (Object Status) - In this table, you can find all the statuses for the OID User resource based on the OBJ_KEY value. Look for the applicable ones and get the OST_KEY value for each row.
    3) OIU (Object Instance for Users) - Now you can query this table for all results where OST_KEY equals the desired values as found in step 2.
    4) USR (Users) - Here you can get the User ID's (usr_login), User Key (usr_key) or any other value for users to help with the query.

  • OIM 11g R1 - Modifying a Resource Erases Custom Process Task ???

    I've created a Generic Resource in OIM that uses the Database Applications Table connector 9.1.0.5.0.
    Then I add my own process tasks through Design Console under "Process Management -> Process Definitions". On each custom process task I've attached my own custom adapters, which I created through "Development Tools -> Adapter Factory" in Design Console. These custom adapters use methods from my Java code. My Java jar file is located in "Oracle_IDM1/server/JavaTasks".
    Now here is the issue:
    Whenever I modify this resource in OIM under "Configuration -> Manage Generic Connector" (E.g Changing reconciliation type from Full to Incremental), all my custom process tasks get deleted.
    What is the reason for this? Is there a solution for this problem?

    This is indeed a major flaw for GTC. Below I found this issue in a Oracle doc.
    Doc Link: http://docs.oracle.com/cd/E14571_01/doc.1111/e14309/aptrouble.htm
    Below is a description of this issue from the Oracle documentation
    Summary:
    Customization work done on objects of a generic technology connector would be overwritten if you perform a Manage Generic Technology Connector operation.
    Description:
    You can use the Design Console to customize connector objects that are automatically created during generic technology connector creation. However, after you customize connector objects, if you perform a Manage Generic Technology Connector operation, then all the customization done on the connector objects would be overwritten. Therefore, Oracle recommends that you to apply one of the following guidelines:
    Do not use the Design Console to modify generic technology connector objects.
    The exception to this guideline is the IT resource. You can modify the parameters of the IT resource by using the Design Console. However, if you have enabled the cache for the GenericConnector and GenericConnectorProviders categories, then you must purge the cache either before or after you modify IT resource parameters. See "Purging the Cache" in the Oracle Fusion Middleware System Administrator's Guide for Oracle Identity Manager for information about running the PurgeCache utility.
    If you use the Design Console to modify generic technology connector objects, then do not use the Manage Generic Technology Connector feature to modify the generic technology connector.
    Connector objects that are automatically created are not deleted even if the generic technology connector creation process fails.

  • Hirarchical profiler query

    Dear experts,
    After going through the oracle documentation on hirarchical profilar i have executed the procude myself.
    After that process i have some data in following three tables
    1> dbmshp_runs;
    2> DBMSHP_FUNCTION_INFO;
    3> DBMSHP_PARENT_CHILD_INFO;
    I am not able to understand how they are going to help me to understand where my query is taking more than expected time to execute.
    i had also ran the command plshprof . Some html generated but still i have no idea about the utility of those html files.
    Could you please help me.
    Regards
    Rajat

    Rajat wrote:
    Dear experts,
    1> dbmshp_runs;
    2> DBMSHP_FUNCTION_INFO;
    3> DBMSHP_PARENT_CHILD_INFO;
    I am not able to understand how they are going to help me
    RajatMaybe you could recognize those tables as helpful after reading the
    info from the official documentation,
    Table 8-3 PL/SQL Hierarchical Profiler Database Tables

Maybe you are looking for

  • How to clone database from backup without access to original DB

    I want to create a new database from existing backup files and rolling forward some of the archivelogs (preferably with a new name and with different directory layout). How can I achieve the task on a separate test server (without access to the origi

  • Where doe PXWWorx get "transaction server"

    We are trying to reconfigure our network so that ZenWorks boot clients get their initial DHCP information from the local router rather than using DHCP relay.. When I try to boot a client, I can successfully load dinic.sys via TFTP on the "distant" Ze

  • How do i only sync checked music?

    I am trying to sync only the music that I want on my phone instead of mine and my husbands music. Our music together is taking up too much space on my phone! Can someone please help me?!

  • Incorrect Batch Determination

    Hi All, I'm having a problem in Production with batch determination. We have a scenerio where for a product with multiple batches, all the quantity has to go from one single batch, so if the first batch batch doesn't have enough quantity the system a

  • Button, onRollIn, OnRollOut

    Hi, i am creating a button in flash for a dreamweaver site, and i want it animated hence why im using flash. This is what i have done; on the stage, i created some text, then converted that to a movie clip. In the movie clip, i converted that to a bu