OIM Process Form System Administrator Permissions Disappeared

Hi,
We have OIM 9.1.0.2 in our environment. Since past few days we are noticing that 'System Administrator' permission from process form gets removed completely. We cant even add the permission for System Admin as it gives as error that 'You do not have permission'.
Finally we have to import our back up xml (thank God that we took backup) to import the permission back.
Anybody has seen this issue before. Please help as this is becoming a major problem for us.
Regards
Rahul

Similar Messages

Who can delete user in OIM apart from System Administrator.

Hi All,
In OIM 9.1.x apart from System Administrator who else can delete user? Can we configure something so that only particular User/Group can delete user?
Thanks.

Hi AGIAM,
Sorry I can't recall the exact way to configure it (dont have a 9.1 instance running), but you can try adding the user to the OIM Groups with privileges to manage/delete the users.
"An OIM Account can be granted additional permissions including delegated administration of various entities, such as users, organizations, and roles, and the ability to define workflows"
Creating and Managing Users
Hope it helps.
Thanks.

OIM Bulk Load utility(Process Form Updates)

Hi All,
I am wondering whether OIM bulk laod Utitly is capable of Updating the Accounts(Targer Recon) in OIM(Updates in Process form)?... I was checking the oracle doucment and it doe not say anything about Updating the records in OIM it says of creating the accounts. Please guide me.
Thanks in advance
Saravani
Edited by: 918661 on Mar 4, 2012 7:47 PM

Don't worry. Utility support both feature
1. Trusted recon - reconcile from trusted source(csv, databse.etc.) to OIM user profile
2. Target recon - reconcile target account to OIM Process Form . for this you must have their coressponding user exist in OIM.
For further details go through below doc.
http://docs.oracle.com/cd/E14899_01/doc.9102/e14763/bulkload.htm#CHDCGGDA
Section "15.5 Loading Account Data" will clarify your doubt
--nayan

Lookup Field with a Lookup Query on Process Form in OIM 11gR2

Does anyone know how to render a field on a process form so that when modifying the field for the resource a "Search and Select" window appears and allows the user to search for the value based on the lookup query defined for the field in Design Console? The lookup field has been defined as a lookup query through Design Console and tested by previewing the form in DC. When creating the Form through OIM System Administration the field is created as a Text Field, not a Lookup. Creating a new Field through OIM System Administration only allows you to create the field using a lookup code not using a lookup query. I've tried to remove / add the field in the UI (create sandbox, customize, etc.) and add it back as a Input LOV but it doesn't get added and the error in the logs say java.lang.RuntimeException: Input LOV is not supported for this attribute, please make this attribute searchable in order to drop this as an input LOV. The field is defined as searchable in the Form Designer in OIM System Administration. In fact I can't even add it back as an ADF Input Text Field w/ Label, I suspect I'll have to "Regenerate" the form to even get it back on the form. Any help is appreciated. Next step is to try to export the sandbox, massage and import.
Thanks,
Ryan

Finally got an answer out of Oracle after trying to figure this out as well. Apparently Lookup Queries are not supported at all by the R2 Web UI. They indicate that according to product management this will not be fixed.

Iplanet process form issue in OIM 11g

Hi,
When I try to provision a user to iPlanet. It throws below error in OIM Admin console itself in OIM 11g
This resource is not configured correctly. Contact your System Administrator.
Form does not have any fields defined.
I'm not able to see my process form when I try to provision, eventhough I have fields over there. I'm assumption is there is some problem with Process Definition and Process form linkage for iPlanet resource. I don't think OIM will allow to attach new process form in current process defiintion. Correct me If I'm worng.
Is there any way to check this linkage from backend. any queries available to check from OIM DB?
Pls help me to fix this?

Hi,
When I try to provision a user to iPlanet. It throws below error in OIM Admin console itself in OIM 11g
This resource is not configured correctly. Contact your System Administrator.
Form does not have any fields defined.
I'm not able to see my process form when I try to provision, eventhough I have fields over there. I'm assumption is there is some problem with Process Definition and Process form linkage for iPlanet resource. I don't think OIM will allow to attach new process form in current process defiintion. Correct me If I'm worng.
Is there any way to check this linkage from backend. any queries available to check from OIM DB?
Pls help me to fix this?

OIM 11gR2 - unable to suppress display of iPlanet process form

OIM 11gR2 or 11.1.2
SJSDS Connector 9.0.4
I have configured the SJSDS connector, it resource, etc and am able to manually/directly provision iPlanet User to an OIM user through the identity interface.
I have configured the process form to pre-populate all necessary fields.
I have checked the Auto Save Form checkbox within the iPlanet User Process Definition.
It is my expectation that when an administrator directly assigns the resource to a user they will not be presented with the process form. However, when we directly assign the resource, the process form is displayed causing the administrator to submit the form.
I have double checked the documentation regarding Auto Save Form within the Developer's Guide for Oracle Identity Manager 11g Release 2 (11.1.2) - E27150-03 and the Oracle® Identity Manager Connector Guide for Sun Java System Directory Release 9.0.4 - E10446-12 and I believe my expectations are correct.
1) Has anyone successfully suppressed the process form while direct or manually provisioning SJSDS through the identity interface?
2) Could the Auto Save Form be only related to request-based provisioning?
Thank you in advance.

These are also good questions but I'll give details :-)
1) Does that make the "Auto Save Form" checkbox useless? -
NO, If you don't do this then your Provisioning will stuck into System Validation.
2) Can you "Auto Save" the Application Instance form?
NO, as per Oracle either hide these attributes or delete these attributes but there's no clean way to delete such things.
Question For You:
If you don't want to Auto Save your Application Instance Form then why did you create that.
Workaround:
If you don't want Application Instance then create one more Application Instance without any form

Failed to process request. Please contact your system administrator.

500   Internal Server Error
Web Dynpro Container/SAP J2EE Engine/6.40
Failed to process request. Please contact your system administrator.
[Hide]
Error Summary
While processing the current request, an exception occured which could not be handled by the application or the framework.
If the information contained on this page doesn't help you to find and correct the cause of the problem, please contact your system administrator. To facilitate analysis of the problem, keep a copy of this error page. Hint: Most browsers allow to select all content, copy it and then paste it into an empty document (e.g. email or simple text file).
Root Cause
The initial exception that caused the request to fail, was:
   com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (404) Not Found.
    at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.MimeHttpBinding.handleResponseMessage(MimeHttpBinding.java:834)
    at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.MimeHttpBinding.call(MimeHttpBinding.java:1238)
    at com.sap.tc.webdynpro.adsproxy.ConfigBindingStub.rpData(ConfigBindingStub.java:78)
    at com.sap.tc.webdynpro.adsproxy.ConfigBindingStub.rpData(ConfigBindingStub.java:95)
    at com.sap.tc.webdynpro.pdfobject.core.PDFObject.doSoapCall(PDFObject.java:279)
    ... 27 more
See full exception chain for details.
System Environment
Client
Web Dynpro Client Type HTML Client
User agent Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Version
DOM version
Client Type msie6
Client Type Profile ie6
ActiveX enabled
Cookies enabled
Frames enabled
Java Applets enabled
JavaScript enabled
Tables enabled
VB Script enabled
Server
Web Dynpro Runtime Vendor: SAP, Build ID: 6.4014.00.0000.20050905165427.0000 (release=630_VAL_REL, buildtime=2005-09-20:20:24:49[UTC], changelist=366934, host=PWDFM026)
J2EE Engine 6.40 patchlevel 98256.313
Java VM Java HotSpot(TM) Server VM, version:1.4.2_08-b03, vendor: Sun Microsystems Inc.
Operating system Windows 2003, version: 5.2, architecture: x86
Other
Session Locale en_US
Time of Failure Sat Mar 18 15:01:39 IST 2006 (Java Time: 1142674299296)
Web Dynpro Code Generation Infos
local/TutWD_OnlineInteractiveForm
SapDictionaryGenerationCore 6.4014.00.0000.20050818151336.0000 (release=630_VAL_REL, buildtime=2005-09-09:20:08:16[UTC], changelist=363802, host=PWDFM026.wdf.sap.corp)
SapDictionaryGenerationTemplates (unknown)
SapGenerationFrameworkCore 6.4014.00.0000.20050818152155.0000 (release=630_VAL_REL, buildtime=2005-09-09:20:01:32[UTC], changelist=363812, host=PWDFM026.wdf.sap.corp)
SapIdeWebDynproCheckLayer 6.4014.00.0000.20050818152737.0000 (release=630_VAL_REL, buildtime=2005-09-09:20:15:40[UTC], changelist=363825, host=PWDFM026.wdf.sap.corp)
SapMetamodelCommon 6.4014.00.0000.20050818152303.0000 (release=630_VAL_REL, buildtime=2005-09-09:20:02:26[UTC], changelist=363816, host=PWDFM026.wdf.sap.corp)
SapMetamodelCore 6.4014.00.0000.20050818152303.0000 (release=630_VAL_REL, buildtime=2005-09-09:20:02:18[UTC], changelist=363816, host=PWDFM026.wdf.sap.corp)
SapMetamodelDictionary 6.4014.00.0000.20050606171352.0000 (release=630_VAL_REL, buildtime=2005-09-09:20:05:38[UTC], changelist=351719, host=PWDFM026.wdf.sap.corp)
SapMetamodelWebDynpro 6.4014.00.0000.20050818152356.0000 (release=630_VAL_REL, buildtime=2005-09-09:20:11:31[UTC], changelist=363818, host=PWDFM026.wdf.sap.corp)
SapWebDynproGenerationCTemplates 6.4014.00.0000.20050905165427.0000 (release=630_VAL_REL, buildtime=2005-09-09:20:26:46[UTC], changelist=366934, host=PWDFM026)
SapWebDynproGenerationCore 6.4014.00.0000.20050818152737.0000 (release=630_VAL_REL, buildtime=2005-09-09:20:16:08[UTC], changelist=363825, host=PWDFM026.wdf.sap.corp)
SapWebDynproGenerationTemplates 6.4014.00.0000.20050905165427.0000 (release=630_VAL_REL, buildtime=2005-09-09:20:26:46[UTC], changelist=366934, host=PWDFM026)
sap.com/tcwddispwda
No information available
sap.com/tcwdcorecomp
No information available
Detailed Error Information
Detailed Exception Chain
com.sap.tc.webdynpro.pdfobject.core.PDFObjectRuntimeException: Service call exception; nested exception is:
     com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (404) Not Found.
     at com.sap.tc.webdynpro.pdfobject.core.PDFObject.doSoapCall(PDFObject.java:282)
     at com.sap.tc.webdynpro.pdfobject.core.PDFObject.createPDF(PDFObject.java:224)
     at com.sap.tc.webdynpro.clientserver.adobe.AdobeFormHelper.createPDFDocumentForUIElement(AdobeFormHelper.java:483)
     at com.sap.tc.webdynpro.clientserver.uielib.adobe.impl.InteractiveForm.afterHandleActionEvent(InteractiveForm.java:185)
     at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.afterHandleActionEvent(ClientApplication.java:1154)
     at com.sap.tc.webdynpro.clientserver.task.WebDynproMainTask.handleActionEvent(WebDynproMainTask.java:402)
     at com.sap.tc.webdynpro.clientserver.task.WebDynproMainTask.execute(WebDynproMainTask.java:649)
     at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:59)
     at com.sap.tc.webdynpro.clientserver.cal.ClientManager.doProcessing(ClientManager.java:248)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doWebDynproProcessing(DispatcherServlet.java:154)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:116)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doGet(DispatcherServlet.java:48)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:390)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:95)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:160)
Caused by: java.rmi.RemoteException: Service call exception; nested exception is:
     com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (404) Not Found.
     at com.sap.tc.webdynpro.adsproxy.ConfigBindingStub.rpData(ConfigBindingStub.java:85)
     at com.sap.tc.webdynpro.adsproxy.ConfigBindingStub.rpData(ConfigBindingStub.java:95)
     at com.sap.tc.webdynpro.pdfobject.core.PDFObject.doSoapCall(PDFObject.java:279)
     ... 27 more
Caused by: com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (404) Not Found.
     at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.MimeHttpBinding.handleResponseMessage(MimeHttpBinding.java:834)
     at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.MimeHttpBinding.call(MimeHttpBinding.java:1238)
     at com.sap.tc.webdynpro.adsproxy.ConfigBindingStub.rpData(ConfigBindingStub.java:78)
     ... 29 more

I'm not sure what your question is, but it looks to me like you are trying to generate an Interactive Form, because the error in the detailed stack is an Adobe document services (ADS) error - this one usually due to an unconfigured or inceoorectly configured ADS. Check the ADS Configuration Guide in the Service Marketplace, and make sure that yuo have made all the settings.
Kind regards,
Markus Meisl
SAP NetWeaver Product Management

I get a message popup saying unable to update because I do not have system permissions required when trying to go to 3.6.13 on my IMac,but I am the system administrator.

I tried updating from 3.6.12 to 3.6.13 on my IMac and get a pop up window that says Unable to update because I do not have system permissions required to update. If I download the latest version and try to replace the existing version it says "The operation can’t be completed because you don’t have permission to access some of the items." I called Apple and made sure I was the system administrator and I am. I made sure that the two other users did not have FireFox open and it still fails the same way.
Note: This problem resolved itself for some reason but I still want to thank everyone for their suggestions.

* Download a new copy of the Firefox program: http://www.mozilla.com/firefox/all.html
* Trash the current Firefox application to do a clean (re)install.
* Install the new version that you have downloaded.
Your profile data is stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder], so you won't lose your bookmarks and other personal data.

OIM user defined field in process form

I am trying to create a user defined field (UDF) in a process form. The UDF would be a drop down list of values for the status field.
I've tried to do this by going to the Administration list, and double clicking on User Defined Field Definition. Then selecting the Form Designer. I can add a column but I cannot add values to the drop down. I know I'm probably doing this wrong.
How do I add a UDF drop down and its values to a process form?
Thanks!

1. Create lookup table for the drop down contents.
2.In the process form--->go to the properties tab-->select the User defined filed name-->add property--->property Name drop down list -->select lookup code-->in the property value-->provide the lookup table name-->save
Edited by: user13513300 on Feb 24, 2011 1:45 AM

How to make a process form field non updatable in OIM 11G PS1

Hello all - I have a filed in process form, which once filled should be not be updated. Could you please let me know how to achieve this?
Should we create a process task, where in we can say 'updating this filed is not possible' ?
I tried this. But OIM shows the filed with updated value but 'Resource History' shows status as Rejected.
Please help. Thanks
Manju

The only way i would see this possible would be through an event handler if you can make it work for this form. On your pre-update, you would need to make sure to always return the original value back to the form so even if changed, it would change it back.
-Kevin

Problem in setting user end date from oim to account expiry date in AD process form

Hi all,
i am updating the user end date from oim to user account expiry date in ad process form using oim api.
i am able to get the end date value from oim but when i am setting it using api it through exception but all other attribute i am able to update in process form.
i am facing the problem only with end date field because of different date format in OIM and AD .
so please suggest me what are date format in Active Directory and how can i change the oim date format to Active directory time format in in my java code.

Thanks for the reply.
But all iplanet users need not contain end date attribute, and its an update on existing user.
Can you please ellaborate more on Transformation class..?? example should be helpful.

Enable Process Form in HR Administrator 1.0

HR Process Form is not enabled in HR Administrator 1.0, which will be replaced by WebDynpro ABAP in ERP Enhancement Package 1 and 2. However according to notes 1024326, we still have option to continue use Webdynpro Java version Process Form. See below:
If you have not yet implemented SAP ERP Enhancement Package 2005.1 or SAP
Note 1024326 - Corrected UI for role HR administrator available
ERP Enhancement Package 2005.2, you have the option of continuing to use WD
Java applications. For this purpose, as of Support Package 09, set the
application parameter isEnabled of the relevant applications in the portal
configuration of the previously used Business Packages HR Administrator 1.0
to 'X'
I looked through the iview (sap.com/paasrformstep) parameter and did not find any parameter to enable the application.   Please advice.
Thanks,
Rose

Hi,
SAP recommends you to upgrade to EHP2 to use services provided by HCM
forms and processes and apply HR Administrator Business package 1.11.
Only if you want to use HCM forms and process services without upgrade
this parameter can be set as parameter.
This will allow you to use old WD JAVA solution.
This parameter needs to be set in all the iViews that points to WD Java
applications. Go to iView and in property Application paramter add one more parameter like isEnabled=X after existing parameters and save the changes.
Retest the scenario. This should work.
Hope this helps
Regards,
Ruchi

Update OIM field with process form fields

Hi,
I have configured AD as a target resource to my OIM. Now i have a requirement to update few fields of OIM , on the basis of change in the fields of process form when target recon will run. For this, as per my understanding i can use the post insert/post update adapter. I wrote the adapter code as well. But when now i am running the recon against my resource, and updating the field, it couldn't even run the adapter as nothing has been written in logs (not even the println statements mentioned in adapter code :( ). Could anyone please tell me where i am missing.

Hi,
I did create a task and assign it on "Event Processed" (Response) under reconciliation insert recieved and reconciliation update recieved. Now when i tried to run recon it is giving me error while processing the recon event. Error is "An error occured while processing the off lined reconciliation event. [xellerate.jms] processing reconciliation message with id <recon event id> failed" . Am i missing something.... Please help
TIA

Need information-BW System administration-process chains

Hi gurus,
I need information about BW System administration-process chains
can anyone send me the docs related to
1)process chain modellin aspects
2)process chain monitoring &error handling
3)BW statistics and query tuning with aggregates
Thanks in advance..
regards
s ram

Hi,
Check these links:
http://help.sap.com/saphelp_nw04/helpdata/en/67/13843b74f7be0fe10000000a114084/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/8f/c08b3baaa59649e10000000a11402f/content.htm
http://help.sap.com/saphelp_nw04/helpdata/en/ce/dc87c1d711f846b34e0e42ede5ebb7/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/d5/e80d3dbd82f72ce10000000a114084/frameset.htm
Process Chain
process chain
BW STATISTICS
If you are asking abt the flags that you see in RSA1 -> Tools -> BW Stats...you can check BW Stats for each and every infoprovider. Whenever you create an infopprovider you should always decide whether you want to turn on the BW Stats for this infoprovider. This is a manual step and can be done in each and every box individually or can be transported across the systems. Coming to your question...BW Stats are of two kinds...
1) OLAP -
If you check this flag for an infoprovider...all the statistical data for the queries built on this infoprovider gets updated into the corresponding infocubes (0BWTC_C02 and 0BWTC_C03). An example would be like number of users that ran the report in a given time, the average run time of the query and so on. This data is of immense value in deciding the steps for performance tuning techniques like aggregates!
2) WHM (Warehouse Management) -
If you turn this flag on for an infoprovider, all the statistical data like how often the cubes are loaded, when are the requests deleted from the infocubes, data abt condensing of cubes and so on is loaded into the corresponding cubes like 0BWTC_C04, 0BWTC_C05, 0BWTC_C09 and 0BWTC_C11.
You have to activate the infopackages to load into these cubes and schedule them through process chain to run once in a while so that your statistical data is uptodate.
Production support for maintaining the process chains primarily involves monitoring activities of all the chains that are running in the background...
Errors in monitoring of process chains can be categorized into 4 different sections...
Master data - Full Update
Master data - Delta Update
Transaction data - Full Update
Transaction data - Delta Update.. in terms of loading of data which can be due to server shut down or system maintenance... errors due to incorrect entries in the OLTP system in which case you'll have to fix the errors in the PSA and manually load the data...
Otherwise it can have errors on Attribute change run being locked by some other job... Aggregate Roll up failing because of attribute change run being run at the same time... Problem with hierarchies and save hierarchies...
There can be problems with the data store activation if the ODS object contains any incorrect request sitting inside it... then, you need to delete the incorrect request and reload the data again...
In case of Transaction Delta failure, you'll have to request for a repeat either manually in the infopackage or using the repeat option if available on right clicking the load event...
For Master Data Delta failures, you need to do an Re-init by deleteing the previous initalization condition in the "initalization option for source systems" in the menu scheduler or reschedule the enitre chain... because, master data generally do not support repeat of last delta ...
Majority of the issues will be based on these things only..
****Assign Points If Helpful****
Regards,
Ravikanth
Message was edited by:
RK.PNV

Revoking permissions for Few of the worksets in System Administration role.

Hi Experts,
I would like to revoke the permissions for some of the worksets in the role of System Administration. How can i remove the permissions like that ? Is it posible like that ?
Thanks
Suresh.

Hi Priyanshu,
"Object manager is not activated" simply means, that the SLD server is not started. So, please, first of all navigate to the SLD URL http://<host>:<httpport>/sld, login with an administrative SLD user -> Admininstration and push the star button.
Regards,
Blanca

OIM Process Form System Administrator Permissions Disappeared

Similar Messages

Maybe you are looking for