Ordering Resource Provisioning Issues

Hello Kind IDM Folks,
We are having a small issue with some of the automatic provisioning IDM handles through roles. We have a role that will provision two resources. One resource is our definitive LDAP resource, and the other resource calls to our LDAP resource to get user attributes from. What we are starting to notice, is that the resource that requires LDAP is being called to provision first, then the LDAP provision is happening. So the first resource provisioning errors out. Then the account is loaded into LDAP fine. The next time the account is updated / saved, a provisioning event is fired off and it works fine.
Is there any way to control the order that the resources are provisioned to when they are assigned by a role?
Thanks!
Jim

Yes! Order the resources in the order desired and then check the "Update resources in order" checkbox (below the Resources multi-select).
That setting manifests itself as
<Role ... ordered='true' ...>
[etc etc etc]
</Role>Hope this helps.
Jason

Similar Messages

Ordering resource provisioning

I would very much appreciate if someone could shed some light on how to set the ordering of resource to be provisioned to a user.
I would like for AD to be provisioned to a user only after my 'extensible data' RO has been provisioned to the user as it has data that I need to leverage in the AD provisioning process - via rule generators.
My extensible data RO is reconciled in from my authoritative source post OIM user creates and updates reconciliation events. I tried making the AD RO depend on the extensible data RO, however when I do this AD resource is stuck in an object status of 'waiting'. If I provision another AD resource via the admin console the AD resource is provisioned with all the required data.
If I remove the depends on clause in the AD RO, the AD resource is provisioned, however without all the required info... specifically the data in extensible data RO. When I examine the debug statements in my rule generator, at the time of provisioning the AD resource, the getObjects api does not return my extensible data RO as a provisioned object - hence no data to add to the AD resource.
I hope this makes sense.
Any and all insight is greatly appreciated.

The easiest way to implement your requirements is to add a new non conditional task to the AD provisioning process and set the current non conditional task as conditional. Kick off the current non conditional when the new task gives a c.
This new task checks if the 'extensible data' RO is provisioned, if so throw a c and the AD provisioning process can start for real. If not just wait.
Write a scheduled task that harvest AD intial tasks that are waiting. Check 'extensible data' RO status, if good set positive result from task, if not continue waiting.
Hope this helps
-Martin

Error while performing OSB Resource Provisioning in OEM12c

Hi ,
I tried the following, but faced the below errors mentioned.
1.Log on to Oracle Enterprise Manager Cloud Control 12c Workspace using "sysman" userid
2. Navigate to Enterprise-> Provisioning and Patching-> Middleware Provisioning.
3. From the List of Deployment Procedure Names section, Select the Oracle Service Bus Resource Provisioning procedure from the list and click Launch.
4. In ‘Select Source’ page, Select ‘Oracle Service Bus Domain’ radio button
5. Click Browse icon and Select the specific Domain and also specify the BEA Home Directory and Click Next.
6. In ‘Select Projects’ page, in the Resource Summary section, Select the projects to export and deploy to the target OSB domain.
7. In ‘Select Target’ page, Select ‘Domain’ and’ BEA Home Directory’ in the ‘Target’ section
8. In ‘Set Credentials’ page, specify the login credentials of the source and target domains, hosts and Click Next
9. In ‘Schedule’ page, Specify a Deployment Instance name and Click Next.
10. In Review page, review the details you have provided for the Deployment Procedure
11. Click Submit to run the Deployment Procedure according to the schedule set.
12. In ‘Procedure Activity’ page, Click Status and view the details of the execution of each step.
The procedure activity is created successfully, but its completed with the following error in Transfer Jar File
Step: Create archive file from contents of directory (Failed)
Created /tmp/job_ft_D534213D48EC4E46E04333B6360AA560
Executing command /opt/em/core/12.1.0.2.0/bin/zip -rv /tmp/job_ft_D534213D48EC4E46E04333B6360AA560/src_archive_D534213D48EC4E46E04333B6360AA560.zip .
zip error: Nothing to do! (try: zip -rv /tmp/job_ft_D534213D48EC4E46E04333B6360AA560/src_archive_D534213D48EC4E46E04333B6360AA560.zip . -i .)
Process returned : 12. Illegal seek
Step: Create or prepare destination directory for commencing file transfer (Succeeded)
Step: Transfer archive file to destination (Error)
File does not exist or not accessible.sink operation skipped due to source operation failure
Kindly help here
Thanks

Hi,
I have resolved the issue with the help of cluster admin
Regards
Mitesh

Sales orders with credit issues taking availability stock

Hi,
I am doing confirmation using Global ATP in APO. The confirmation is well done, but the confirmed quantity for sales orders with clients that have credit issues is taken the available sotck for other sales orders with ok clients that I want to confirm the quantity they ordered.
For example:
Stock: 10 PC
Client A order 15 PC and 10 are confirmed, but the ordered is retained becuse of credit issues with client A.
Then client B order 3 PC, but nothing is confirmed because the ordered for client A is reserving the stock (note: this would be ok if client A had not credit issues).
So, I want that the 3 PC for client B are confirmed and the 10 PC not reserved for the cient A while client A has credit issues.
How could I configured, so that the orders with credit issues do not reserve stock for the incoming orders?
Thanks a lot.

Hi DB49,
thanks for the quick answer.
I checked the configuration in the R3 and seems to be fine. To prove it, I disconnect APO and did the availability check in the R3 system and it is working fine; the orders quantities that are blocked because of credit issues, do not reserve stock for incoming orders.........son new incoming orders are well confirmed.
But after connecting APO the problem continues. I checked the next points.
In R3 transaction CO09: takes to the APO screen and you see the ATP available quantity OK (do not consider the quantities of the credit issues orders). But at the moment that you make the order (VA01) it does not confirm any stock and if you select the line and go to the ATP screen (the same you get from the CO09) the quantities of credit issues orders are taken into account..the ATP availability quantity changes from the first going directly from the CO09.
What could it be?
Note: it was working fine with APO, I started to have the issue after implementing note 1262475 in APO. This note was becuase the BAPI_APOATP_CHECK was not brigning any value for the ATPQTY_***.
Thanks a lot!!!

How to restrict the GR for Production Order when Goods Issue is not done

Hi Gurus
How to restrict the GR for Production Order when all the required components for production order are not issued with all required quantity. Even for partial issue system should not allow GR with 101. The user status with RMWA, RMWF & CGFB is not working.
Pls suggest best solution.
Abhijit.

Hi,
You can club together the GI nad GR at the time of confirmation..
I.e Backflush for the components and auto GR for the Product.
So that you can stream line the Process.
The best Option would be to use the User Exit:
Enhancement - MBCF0002
Functional Module - EXIT_SAPMM07M_001
Include - ZXMBCU02
Refer below link for further details..
How to stop the goods receipt before issueing the goods for production orde
Regards,
Siva

Can't open appleworks file / resource fork issue

Hi,
I've just readt the post "Can't open old appleworks/clarisworks files".
My problem was that I got a "I/O error" when trying to open some appleworks files with appleworks 6.2.9.
I realize that I copy those file from my previous disk to a PC formated CD. Hence, some resource fork files should miss.
BUT, I don't have anymore the original files since I re-install my Mac...
If there a way to recover my files despite of this resource fork issue ? Is it possible to create again the resource fork file ?
Christophe

It's not a resource fork problem. If it were, adding the .cwk extension to the file name would likely fix it. AppleWorks 6.2.9 (the current version) can't open all ClarisWorks 4 or earlier files. It gives an I/O error. There doesn't appear to be a way to predict which files will cause problems. I've had it happen & not happen with all AppleWorks file types. These files can be opened by any other version of AppleWorks 6, including the OS 8/9 component 6.2.8. If you have the retail version of AppleWorks 6.2.9 or your “consumer” Mac came with an earlier version of AppleWorks 6 that you have updated to 6.2.9 & have Classic installed, you can "Force" AppleWorks 6 to open in Classic to open the files, save them as AW 6 files & then open them in the OS X version. Also, if you have Classic installed & have AppleWorks 5, this can be used to open the ClarisWorks files & save them as AppleWorks 5 which AppleWorks 6.2.9 can open.

Query: Not Update the resource provisioned AD

Someone can help me with this case, I configured the connector for the supply of Active Directory, up here all goes well, when trying to enter the domain with the user supplied I do not take into consideration the assigned password and other details to update any data, this is the password I fearlessness the following error in the log.
ERROR [XL_INTG.ACTIVEDIRECTORY] Problem modifying object: javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 0000001F: SvcErr: DSID-031A0FBC, problem 5003 (WILL_NOT_PERFORM), data 0
]; Remaining name 'cn = JLK SENSI'
Thank
Message was edited by:
JLK

Friend: Kunwar.nitesh
No custom attribute, the only set default,
The second comment mentioned that could be another BUG, I infer that that version of the connector that use the 9.04 is not as good
Friend: Martin_Sendren
To you mean with this message that gives me the connector: WILL_NOT_PERFORM
The fact that I was the administrator's default Identity Manager (xelsysadm).
As for the password of the resource provision in the active directory will disable the complexity of passwords in the political choices of security.
What do I recommend to solve this problem?
Thank

AE 5.1 - User provisioning issue - new user provisioned at end of request

Hi All,
re: AE 5.1 - User provisioning issue - new user provisioned at end of request when AE Config is set to NO
We have an interesting issue. An Access Enforcer Change Request was initiated with the incorrect userID (the userID did not yet exist in the system) and that Change Request flowed through and made it to the end of the path. At the end of the path, it created a new userID (since the incorrect one was entered). However, we have the following AE Config:
Auto Provisioning - Status: Auto Provsioning Type: "Auto Provision At End of Each Path"
Auto Provisioning - Change Request: Create if user does not exist: "NO"
Any ideas as to why the new userID was provisioned even though we have it set to "NO"?
We are on AE v5.1, SP4.
Thanks in advance!

Gary,
Similar kind of issue.,
The Change User BAPI works differently than we normally think.
It wipes off everything and reassign the modification.
This I figured it in one of my implementation. You try add some roles to the user it wipes off all the roles and reassign the roles along with the new requested one's.
The client is also in SP4 still they have issue.
Will that not be good, AE checks for the ID before it actually submits the request.
Thanks.
Note : The issue mentioned by you doesnt exist in AE5.2
Regards,
Muthu Kumaran KG
Edited by: Muthukumaran Krishnan Govindan on Mar 13, 2008 2:38 PM

Can I use the customer requirement number as sales order in 'Goods issue MB

Can I use the customer requirement number as sales order in 'Goods issue MB1A'?
Thanks,
Tiger

Why I used the customer requirement in MB1A as the sales order, Update was terminated.
Thanks,
Tiger

Query to retrieve list of users who do not have a resource provisioned

I am trying to get a list of user who do not have a particular resource provisioned. I cannot seem to find a table that links the resource object information and User information. I need to generate a CSV file. Has anyone done this before or have any ideas. If so any information would be very helpful.
Thanks

select * from usr where usr.usr_key not in (
select usr.usr_key from oiu, usr, obi, obj, ost
where oiu.usr_key=usr.usr_key
and oiu.obi_key=obi.obi_key
and obi.obj_key=obj.obj_key
and obj.obj_name = :obj_name
and oiu.ost_key=ost.ost_key
and ost.ost_status not in ('Revoked'))
-Kevin

How can one change the order of the issues (folios) in a custom viewer?

Hi,
I am trying to find how one can determine the order that the issues (folios) will appear in a custom viewer (multi-folio with subscriptions).
I tried to rearrange the order by changing the publication date in the Folio Producer Oorganizer, but it has no effect in the iPad custom viewer.
Thanks

The publication date settings determine the order of the folios in the library, so that should work. Did you update the folios?

How to block order confirmation, before issue of raw materials?

Dear Frndz,
My client would like to block order confirmation, before issue of raw materials.Also, they do not want to use backflush concept.Pls help me out with the step by step process.
Regards,
Srini

Srinivasan,
You can think of using available user exits which are listed below,
CONFPP01            PP order conf.: Determine customer specific default values
CONFPP02            PP order conf.: Customer specific input checks 1
CONFPP03            PP order conf.: Cust. specific check after op. selection
CONFPP04            PP order conf.: Customer specific input checks 2
CONFPP05            PP order conf.: Customer specific enhancements when saving
CONFPP06            PP Order Confirmations: Actual Data Transfer
CONFPP07            Single Screen Entry: Inclusion of User-Defined Subscreens
Please take help from your ABAP consultant.
Hope this helps you.
SmanS

Multiple resource objects provision issue in OIM10g

Hi Team,
We're facing an issue regarding multiple access policy trigger for a specific resource object in OIM.
The scenario is whenever we try to process the enablement or creation of users through flat file recon, users are created / enabled with multiple resource objects in their resource profiles.
When we checked in User Resource Access History report, we observe that the access policy has been triggering multiple times for these users resulting in users with multiple resource objects. Amongst these one shows provisioned/Enabled and the other shows provisioning/in some cases Provisioned/Enabled.
Please advise as this has become an ongoing issue and also has led into data mess-up.
Appreciate your help on this one..
Regards,
Sagar

The terminology sounds a little confusing to me:
If you mean you wanna create multiple IT Resources for a single IT Resource Instance so that the user can select the appropriate IT Resource during request creation -> All good upto here. But then since the Object/Request Form attached to a resource would be the same, so any user would always see the same form fields for creationg request.
Example: Users creating request for Oracle Database Accounts but different server locations
If it means you just need to create multiple Resource Objects then its a straighaway standard requirement and could be handled with normal Connector Development methodology.
Example: Users creating requests for different resources like Oracle Database Accounts & Active Directory Accounts

Changing Resource Order in Provisioned Resource Page

Hi,
Is is possible to change the order of the Resources which are getting displayed in Provisioned Resource Page.Let us say I have 2 resources A and B .I always wanted to A first and then B ,in the Provisioned resource page of that user.Any clue on how to achieve this?.Thanks in Advance.

I think Oracle has already provided this. Just click on Resource Name there it will sorted first A and then B.
If you want to sort in some other way then you'll have to write your custom code to do that.

OID Provisioning issue on OIM 11g

Hi,
I have ran the target user recon for OID and noticed from the events that users are not linked. I tried assigning OID User resource from the provisioning workflow on the admin console but I am seeing the following the issue:
DOBJ.ORC_NO_ORDER
An error occurred while retrieving process information null : null
Please help.

Hi
Can you verify On your OID resource object in desing console 'Order For User' is chosen.
Regards
user12841694

Ordering Resource Provisioning Issues

Similar Messages

Maybe you are looking for