OIM : End user should be able to edit his resource data

Hi,
When the end user logs in and requests for AD resource, he does not see the AD resource form. All the data for the form is prepopulated according to some predefined rules. What i want to do is to allow the End-user to modify his AD form data.
How can i do the above?????
What privilages do i have to grant to End Users???/
Kindly Help.
null

Hi,
So here are my thoughts...
1) The only fields that should go into the resource form are those fields that you want a requester (or approver) to modify or see during a request workflow. If it is provisioning related, for example, the uSNCreated of an AD User, it should not go on the Resource Object form (let's call it the object form from here on out). Also, you can have fields on the object form that don't ever need to go on the process form (provisioning process)... and these would be request related fields, not provisioning.
2) This is where we need to be specific about terminology.. Resource Administrators are those people that can modify the resource... typically they have access to the design console... for some reason, I don't think you mean these people, right? You mean the people who will approve the requests, right? If that is the case, you can have them just see one form or the other, and you can also give them rights to modify one form or the other. This is done at the group level through Permissions and Menu Items (a combination).
3) Resource Object Data Flow trumps pre-populate. (I am like 99% sure on this.. I would have to test it to be sure.. I believe it is the same as Access Policies, which does trump pre-populate adapters)
4) I have NO clue :) I would love some improvements in the forum... especially separating out the products in the IDM stack into their own forums.
Good luck,
Deborah

Similar Messages

End users are not able to save interactive pdf form created with designer

I am new to using LiveCycle Designer and have created a pdf form but my end users are not able to save edited form. Does this have something to do with whether the form is static or dynamic. If so, I am not exactly sure how to use the restorestate option to convert it back to static. I also tried to enable the "user rights access in adobe reader" under the advance menu and had no luck.
My end users have acrobat reader 9 - do I need them to download anything else, maybe professional.

Thanks Paul for your reponse
In my Adobe Pro I don't see the option Reader Extend rather I enabled "Enabled Usage Rights in Adobe Reader" amd I figured this was somewhat the same. So if I enabled this option in Adobe Pro already and they are still not able to edit the fillable text slots or save it what other option do I have in figuring this out.

Hi All, We are in to Release 11.5.10.2.There is a specific requirement to Prevent users from creating Manual Sales Orders in oracle and yet users should be able to book the Sales Orders Imported from CRM system into Orcale.Please advise.

Hi All, We are in to Release 11.5.10.2.There is a specific requirement to Prevent users from creating Manual Sales Orders in Oracle and yet users should be able to book the Sales Orders Imported from CRM system into Orcale.Please advise.

Thanks for your advise.
However, I missed to mention that we have two set of users One is for Finished Goods and another for Spares.
Only Spares users need to be prevented from creating Direct/Manual Sales Orders in Oracle.
As you suggested, if this will be done at Form level, that may Disallow FG users also to create Manula Sales Orders which should not be the case.
Further, I tried to test one scenario through Processing Constraints but it did not work.
Application
OM
Validation Type
Entity
Temp
Short Name
TBL
Validation Semantics
Created By
Equal To
User(Myself)
Processing Cosntraint
Application
OM
Entity
Order Header
Constraint
Operation
User Action
Create
Not Allowed
Conditions
Group
Scope
Validation Entity
Record Set
Validation Template
101
Any
Order Header
Order
Above Created
Please advise.

SSRS 2012 some users are not able to edit reports in the server

Hello All,
I am install reporting services SharePoint native mode but some users are not able to edit reports on server error is "Application cannot be started contact your application vendor" but this users edit reports on their client machine
using report builder 3.0.
Please help me

Hi harshad_mule,
Because Report Builder in the Report Manager is a ClickOnce application, the error message means that one or more of the files listed in the application manifest cannot be found on the server, so the application cannot be started. Based on my research, frequently
this means that the application is somehow corrupted, or that the ClickOnce store is corrupted.
To fix this issue, we can try to refer to the following steps:
If Report Builder is corrupted, we can update the Reporting Services to repair this.
Check that the Report Builder application is existing
Open the Report Server folder. By default, the folder is located in: C:\Program Files\Microsoft SQL Server\MSSQL.<X>\Reporting Services\ReportServer\ReportBuilder
Make sure the file "ReportBuilder.application" is existing in the folder mentioned above.
If it is existing, please use the following URL to access the Report Builder directly:
http://<server>/ReportServer/ReportBuilder/ReportBuilder.application
And this issue can also be caused by browser. Because not all report functionality is supported by all browsers in Reporting Services. So please use IE browser to start Report Builder to try it again.
Hope this helps.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

I should be able to edit the specific event caldendar of a persons Birthday :)

I should be able to edit the specific event caldendar of a persons Birthday :)

The birthdays calendar is taken from the birthday field of a contacts info in the Contacts app. Edit the birthdate there and it will update the birthdays calendar automatically.

Users are not able to edit projects even with right permissions

Hello,
We have a weird issue. Your help or inputs is appreciated.
A user is not able to edit projects in SAP PPM 50 unless 1)the project is created by the user and 2)user has access to ACO_SUPER auth object. For the projects, the user is trying to edit, we made sure user has write ACL access in the administration tab of the project.
Obviously, we can't give all users ACO_SUPER access. Please advise how to proceed.
Thanks in advance

Hi Pranith,
You are right..ACO_SUPER is not recommended for all users, it's an super user access.
In PPM-Project management, there are two authorizations
1) General Authorizations
2) Project Specific authorizations
General authorizations:
This is provided to user using a backend PFCG roles like 'SAP_CPR_USER' which contains business partner view access and other similar roles are assigned for project creation, template creation etc.,
Project Specific authorizations:
This authorizations are provided using ACL 'Authorizations' tab within the project and here you have different authorisation activities like admin, write, read & none.
As you said, the user who creates the project will get 'Admin' authorization and after that if you want give access to other users, then you need to add manually users in the project definition-authorisation tab or you can provide default authorization through project role type.
Have you added the users manually in authorisation tab?
Regards,
Ravi

Should be able to edit all fields in Vk12

Hi All gurus,
i have a problem when i go to VK12 and give a condition type and goes inside it, the system lets me change only a few fields for ex: rate, validity dates, but it does not allow me to change some other fields like GEP number and rate. I want to be able to edit these gields also, is there a way i can do it.

Hi Anmol
Provide some more details on what condition type and access sequence u r using .
By the way with validity date change ,u actually dont need to change old record details such as material number ,Rate ,currency etc.
For e.g. in Pr00.
As We should always maintain old condition records for purpose of information tracking.
when we change validity period the new condition record can be made valid from any past date which we want. it will update on triggering carry out new pricing.
Also if u have maintained condition record deletable in v/06. condition type definition u can delete old condition records.
I hope things are clear to u now.
Regards
Mandar

SRM 7 - employee should be able to edit the Cart

Hi all,
In SRM 7.0,if a user should be allowed to change the cart after it is ordered,is the settings done via BBP_WFL_SECURITY paramater in the personalization tab for the employee role as in SRM 5 or is there any different setting in SRM 7?

Hi,
In SRM70 you cannot change shopping cart after it is ordered. Changing a shopping cart is now depends on approval level and not on user attributes. With BRF technology SRM redesigned the approval workflows and now every shopping cart needs to be completed before approval process started. So you need to define the completion event within the workflow that allows the person (ex. Purchasers, managers, etc) to change the document before it is approved.
Thanks,
Jagadish

User is not able to change his own password... Only DBA can change users password ??

Hi,
I have this problem today.I am using Oracle 8.1.7 on Solaris 2.8
A Oracle user say " SCOTT" trying to change his password but could not.. he gets the followling message
SQL> alter user scott identified by abc123;
alter user scott identified by abc123
ERROR at line 1:
ORA-28003: password verification for the specified password failed
Scott's profile has password_verfiy function. Hence i thought abc123 password was not matching with the password verify condition. Surprisingly, what ever password SCOTT tries with, he could get the same error message and could not change his password.. Ultimatly SCOTT could never change his password. How is it possible ??
It is noteworthy to mention that if i give DBA role to SOCTT then he can change his password with abc123 or any thing that satisfies with password verification function.
Now Only a user who has DBA role or a DBA could change passwords..
Can somebody through some light on it and explain what corrective action to be taken so that Users can change their password without DBA's interreption.
Thanks in advance
Regards
Srini

<PRE>
This is the description of the error message:
=============================================================================
ORA-28003 password verification for the specified password failed
Cause: The new password did not meet the necessary complexity specifications
and the PASSWORD_VERIFY_FUNCTION failed.
Action: Enter a different password. Contact the database administrator to find
out the rules for choosing the new password.
=============================================================================
it clearly says that password has to match the complexity specifications. You will not be able
to change password without meeting the complexity requirements.
DBA's can make the change to the password because if DBA's can not change the password, it could lock
you out of the database (all users including the DBA's) and you will not be able to access the
database.
Try removing the password verify function and see if you can then change the password succssfully.
</PRE>
hi Prakash,
The verify password function is standard oracle function and I do not think the current problem is any way related to the rules that were framed in verify password function. The key point here is a user could not change his own password. But a DBA or a user who has ALTER USER system privs.. can do so..
Regards
Srini

User should not able to delete group in sharepoint

Hi,
I have a requirement like,
user added a document in CRM2011 and clicked on open sharepoint then he is redirecting to sharepoint.There if he clicks on manage permissions then all the groups inside the document he can see and delete also but perticular group he should not delete how
can i restrict user to delete the perticular group.
Thanks in advance.

Hi,
According to your post, my understanding is that you wanted to control particular user not to delete particular groups.
There is no out of the box way to accomplish this with SharePoint.
If you wanted to achieve this function, you should create some custom codes, there are some suggestions for your reference.
You can create a list to store the users and the matched groups with the users.
Then you should edit the user.aspx page with some custom code, invoke the list, make some conditions to determine whether the user has permission to remove the groups.
2. Another workaround is that you can create a time job for the particular groups, if the groups have been removed , then use the time job to recreate them.
Thanks & Regards,
Jason
Jason Guo
TechNet Community Support

We should be able to edit our comments for the weblogs

Is there any way we can go back and edit our comments for the weblogs. I am not a very good typer ( i am always thinking ahead of my typing) and i would love to go back get rid of typos from my comments.

Hi Prakash,
We actually would love to have the forum functionality used at the end of the Weblogs. Per Weblog one forum thread.
Unfortunately we don't have the bandwidth right now to do that
Sorry, Mark.

End users not beeing able to install the JRE ..?

I've developed a "sales/demo"-type application for a company, convincing them that Java was the best way to do it. However, as it turns out, they've found that 50% of their customers doesn't have the rights needed to install the JRE (does this seem strange to you?)
Now they are talking about that they should've done it in Director, etc.
I'm trying to find a solution to this, but I seem pretty stuck. They will need to download and install the JRE, that part is clear.
Anyone got any suggestions? I mean - who doesn't have rights to install the JRE anyway? It has to be a pretty crippled computer! ;)

look into installanywhere, they have a free version on their site. it'll let you package the jre with the install, it will NOT install the jre but simple copy the files into the pc and then use the jre to lanuch the java app., this way there is no need to install a jre and if they already have one installed it won't conflict with it. or you could just include the jre yourself and make a bat file to launch your app using the jre you included.

Should be able to enter both Japanese data and English data into the database without

Scenario 1:
Database Char Set: UTF 8
National CharSet :UTF8
String Type:Varchar2
Problem :Unable to enter more than 1/3rd of the field length specified when entering Kanji(Japanese) Data
Scenario 2:
Database Char Set: JA16EUC/JA16SJIS
National CharSet :JA16EUCFixed/JA16SJISFixed
String Type:NVarchar2
Problem :Unable to enter/retrieve English data written into the database but works fine with Japanese
Scenario 3:
Database Char Set: UTF8
National CharSet :JA16EUCFixed
String Type:NVarchar2
Problem :Unable to enter/retrieve English data written into the database but works fine with Japanese
null

You will not be able to display the process form, or edit those values from the view profile screen.
You would need to create custom fields that are mapped from the process form to the user's profile. Then you would need to create user form update triggers from the User Defined Fields that when the user changes them, they get pushed to the target process form by adding those task names into the provisioning process definition. This would then trigger the updates to the target resource.
-Kevin

Dimension administration by end-users

Dear colleagues,
I am designing BPC solution for Headcount planning. End users should be able to change properties for employee dimension. This would be done by approx. 40 users (Fund Centre managers). Is this possible to be done within BPC admininstation, what are the challenges and risks? Has anyone done it with so many users? As far as I know it is not possible to customize or limit dimensions, which can be changed by a user. So it would be very risky that someone changes property, which he should not.
Thank you!
Kind regards
Ivan

Hi Ivan,
If the user activity will be limited to member property change (not creating of new members) then the risk is moderate. It can be done by modified code of Master Data on the Fly http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/2020b522-cdb9-2e10-a1b1-873309454fce?QuickLink=index&…
Using this badi you can add required restrictions. You will need to change code to allow update of properties only.
Vadim

Can No Longer Edit Song Meta Data In Latest iTunes 11.1???

I just discovered that since the update to version 11.1 I can no longer manually edit the meta data by using the Show info function, all options are greyed out. For instance I can no longer adjust the volume level on a song nor can I edit the fields for song title and artist tec. There is also no longer any tab for album art when using the Show Info function on a song that has no album cover art. On songs that already have an album cover there will be an album art tab but the options there are all greyed out so I can not change the album cover art if I wanted too. This really *****, I can no longer edit album cover art for songs that have another cover already and I can not add any cover picture at all for songs that have no cover art (unless I manage to get the cover from the iTunes store but that is very often not successfull).
Another bug I found is that I can no longer add any video file to my playlists.
So this new update really ***** for me and have ruined my itunes experience.
Do anyone else in here have the same problem?
I really hope Apple will fix these bugs as soon as possible!

I think I finally found a solution to this problem. It appears that for some reason, some songs you download will maintain write protection that the original owner had set on his/hers computer. In my case for this Ellie Goulding album that I had problem with, it turned out my friend who gave it to me had some of the songs stored on his iPad and that caused the files to become write protected it seems, and this write protection was transfered over to my PC. To solve this issue, everytime you encounter a song in iTunes that you can not edit just right click it and select Show/View In Explorer, that will take you to the storage location of the file in question. Now right click the song and select Properties and see if it is write protected, if it is then just uncheck that option and click ok. Now you should be able to edit the meta data for that song again. So it appears this is not a bug in iTunes but rather a write protection issue.

OIM : End user should be able to edit his resource data

Similar Messages

Maybe you are looking for