Organizational Unit in DC directory

If you are maintaining the Organizational Unit (OU) information in DC directory, does this information replicate over with CCM database? If so, does it map to "department" field in CCM or any other field? CCM version in this case is 4.1.3.

getUser (as well as addUser/updateUser) actually accesses the DC directory.
Direct ldap access is also possible though. There's just one consideration when choosing the technology: with CCM 5.0 and above there's no DC directory anymore so (although then you can send a sql request via AXL which is more efficient than getting users via AXL though).
So I guess unless you need seamless upgrade (only changing the URL and http to https) when upgrading CCMs, you're better off using ldap.
Keep in mind though, you will need a link between phones and users to make this work.. or if you use extension mobility, you need to look up the user device profiles associated with each user then look up the lines on those profiles (using an sql query via axl.. this translates almost 1:1 to versions 5.0+) to get the line numbers.

Similar Messages

Add OU(Organizational Unit) to active directory plugin

Hi Guys,
i am using Ad plugin with BOE 3.1 to authenticate Active directory users, i am able to map AD Groups while configuring the ad plugin.
my question is, is it possible to map OU instead of the AD Groups ? in my production active directry i have all OU's, how should i map them?

Only security groups are supported in the plugin, no distribution groups, and no ou's. We follow the rules based on Microsoft Architecture. You cannot assign access permissions to an OU or DL in AD, therefore these have not been tested with our product.
Regards,
Tim

DirectorySearcher for an Organizational unit

&(objectClass=user)(memberOf=cn=MyGroup,ou=West,dc=MyDomain,dc=com) work great for a group.What syntax do I use for an Organizational unit?
Certified Geek

Hello Arne,
>>What syntax do I use for an Organizational unit?
If you mean you want to do a query against a OU, you could check this link:
https://technet.microsoft.com/en-us/library/cc755655(v=ws.10).aspx#BKMK_4
Search for “dsquery ou”, it shows how to
find organizational units in the directory that match the specified search criteria.
Regards.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Create admin folders based on OU organizational unit active directory

We have thousands of users to import from our active directory. In my proof of concepts, the active directory integration service 6.3 running on ALUI 6.1 MP1 imports all the users to the same folder - the folder where my remote authentication source object is.<br>
Can the active directory integration service create folders based on the many OU's (organizational units) we have? We'd like our portal admin folder structure to mirror our active directory organizational unit structure, but we don't want to have to recreate it manually for the obvious deployment and ongoing maintenance reasons. Is that possible?

You asked: Can the active directory integration service create folders based on the many OU's (organizational units) we have?
As far as I understand there is not a way to dynamically generate Admin Hierarchy folders based upon this job.
Obviously where there is a will there is a way, and if you have a crew of strong developers you could probably write something custom that would do this for you (maybe), but here are 2 other approaches to consider:
1) use 1 AD Auth source and split the users into multiple folders based upon group association in the "Default Profiles" section under main settings. The problem with this is that if users change groups in AD they will not be resorted in your admin hierarchy.
2) use multiple AD Auth sources, each with an appropriate query filter. I could be wrong, but the downfall to this approach is that the users that change OU's would be entirely deleted and recreated.
Edited by geoffgarcia at 04/24/2008 8:11 AM

How to get Personnel Numbers from Organizational Unit ?

Hello All,
I have a requirement in the HR module to get a list of all the personnel numbers maintained for a Organizational Unit.
Is there any Function Module to find out the Personnel Numbers assigned to a Organizational Unit for HR module ?
Thanks,
Ketan.

Hi Ketan,
    I'm not sure that there is any Function Module available for finding the Personnel Numbers. I have listed some Tables in HR Module try whether this will help you in finding Personnel Numbers for Organizational Unit.
DD01L Domains
DD02L SAP tables
DD03L Table Fields
DD03T DD: Texts for fields (language dependent)
DD04L Data elements
DD04T R/3 DD: Data element texts
DD05S Foreign key fields
DD06L Pool/cluster structures
DD20L Matchcode Ids
DD24S Fields of a matchcode ID
T000    Clients
T001    Company Codes
T001E Company code-dependent address data
T001P Personnel Areas/Subareas
T012    House banks
T012K House bank accounts
T012T House bank account names
T500L Personnel Country Grouping
T500P Personnel Areas
T500T Personnel Country Groupings
T501    Employee Group
T501T Employee Group Names
T502T Marital Status Designators
T503    Employee Groups / Subgroups
T503K Employee subgroup
T503T Employee Subgroup Names
T504A Benefits - Default Values (NA)
T504B Benefit Option Texts (North America)
T504C Benefit Type (NA)
T504D Benefit Credit Group Amount
T504E Benefit Amount
T504F Benefit Costs
T508A Work Schedule Rules
T508T Texts for Employee Subgroup Groupings for Work Schedules
T510   Pay Scale Groups
T510A Pay Scale Types
T510F Assign Pay Scale > Time Unit, Currency
T510G Pay Scale Areas
T510H Payroll Constants with Regard to Time Unit
T510I Standard Working Hours
T510J Constant Valuations
T510L Levels
T510M Valuation of pay scale groups acc. to hiring date
T510N Pay Scales for Annual Salaries (NA)
T510S Time Wage Type Selection Rule
T510U Pay Scale Groups
T510Y Special Rules for Wage Type Generation
T511    Wage Types
T512R Cumulation Wage Types in Forms
T512S Texts for Cumulation Wage Types in Forms
T512T Wage Type Texts
T512W Wage Type Valuation
T512Z   Permissibility of Wage Types per Infotype
T513    Jobs
T514S Table Name Texts
T514T Field Name Texts
T51D2 Wage Type Classes
T51D3 Reduction Rules
T51D4 Cumulation Rules
T527X Organizational Units
T528B Positions - Work Centers
T528C Wage Type Catalog
T528T Position Texts
T529A Personnel Event
T529F Fast Data Entry for Events
T529T Personnel Event Texts
T52BT Texts For HR Objects
T52C0 Payroll Schemas
T52C1 Payroll Schemas
T52C2 Texts for Personnel Calculation Schemas
T52C3 Texts for Personnel Calculation Schemas
T52C5 Personnel Calculation Rules
T52CC Schema Directory
T52CD Schema Directory
T52CE Directory of Personnel Calculation Rules
T52CT Text Elements
T52CX Cross References via Generated Schemas
T52D1 Valid Processing Classes
T52D2 Valid Values for Processing Classes
T52D3 Valid Evaluation Classes
T52D4 Permitted Values for Evaluation Classes
T52D5 Wage Type Groups
T52D6 Wage Type Group Texts
T52D7 Assign Wage Types to Wage Type Groups
T52D8 Valid Processing Classes - Texts
T52D9 Valid Values for Processing Classes - Texts
T530 Reasons for Events
T530E Reasons for Changes
T530F Reasons for Changes
T530L Wage Types for Special Payments
T530T Event Reason Texts
T531 Deadline Types
T531S Deadline Type Texts
T533 Leave Types
T533T Leave Type Texts
T539A Default Wage Types for Basic Pay
T539J Base Wage Type Valuation
T539R Events for Standard Wage Maintenance
T539S Wage Types for Standard Wage Maintenance
T548 Date Types
T548S Date Conversion
T548T Date Types
T548Y Date Types
T549A Payroll Areas
T549B Company Features
T549C Decision Trees for Features (Customers)
T549D Feature Directory
T549L Date modifiers
T549M Monthly Assignment: Payroll Period
T549N Period Modifiers
T549O Text for date modifier
T549P Valid Time Units for Payroll Accounting
T549Q Payroll Periods
T549R Period Parameters
T549S Payroll date types
T549T Payroll Areas
T549M Monthly Assignment: Payroll Period
T549N Period Modifiers
T549O Text for date modifier
T549P Valid Time Units for Payroll Accounting
T549Q Payroll Periods
T549R Period Parameters
T549S Payroll date types
T549T Payroll Areas
T554S Absence and Attendance Types
T554T Absence and Attendance Texts
T554V Defaults for Absence Types
T554Y Time Constraints in HR TIME
T555A Time Types
T555B Time Type Designations
T559A Working Weeks
T559B Name of Working Week
T572F Event Texts
T572G Allowed Values for Events
T572H Event Value Texts
T582A Infotypes
T582B Infotypes Which Are Created Automatically
T582S Infotype Texts
T582V Assignment of Infotypes to Views
T582W Assigns Infotype View to Primary Infotype
T582Z Control Table for PA Time Management
T584A Checking Procedures - Infotype Assignment
T588A Transaction Codes
T588B Infotype Menus
T588C Infotype Menus/Info Groups
T588D Infogroups for Events
T588J Screen Header Definition
T588M Infotype Screen Control
T588N Screen Modification for Account Assignment Block
T588O Screen Modification for Assignment Data
T588Q Screen types for fast entry
T588R Selection Reports for Fast Data Entry
T588S Screen Types for Fast Entry
T588T Menu and Infogroup Designations
T588V Business object type
T588W Event types for infotype operations
T588X Cust. composite definition of event types for IT operations
T588Z Dynamic Events
T591A Subtype Characteristics
T591B Time Constraints for Wage Types
T591S Subtype Texts
T596F HR Subroutines
T596G Cumulation wage types
T596H _Cumulation wage type texts
T596I Calculation rule for cumulation wage types
T596U Conversion Table
T599B Report Classes
T599C Report Classes
T599D Report Categories
T599F Report Classes - Select Options
T777A Building Addresses
T777T Infotypes
T777Z Infotype Time Constraints
T778T Infotypes
T778U Subtypes
Error Messages tables
T100 Messages
T100A Message IDs for T100
T100C Control of messages by the user
T100O Assignment of message to object
T100S Configurable system messages
T100T Table T100A text
T100V Assignment of messages to tables/views
T100W Assign Messages to Workflow
T100X Error Messages: Supplements

Organizational Unit Synchronization & User Movement with Active Direct

Hi All,
Can anybody put some light on (Organizational Unit Synchronization) or can ref some doc links.
Anticipating Help from you folks.
Thanks
Randhir Singh

I'm assuming you want to synchronize Active Directory with either another LDAP directory or another repoisitory such as a relational database or a flat file.
If you just want to export or import objects from Active Directory using an industry standard interchange format, you may want to investigate the use of LDAP Data Interchange Format (LDIF). The tool included with Active Directory to import and export LDIF files is called LDIFDE.EXE
You may want to investigate directory synchronization products such as Microsoft Identity Lifecycle Manager. (refer to http://www.microsoft.com/windowsserver2008/en/us/ida-identity-lifecycle-management.aspx)

AD Organization Unit Prepopulation

Hi All,
I am working on AD Organization Unit Prepopulation.Below is the Procedure I am following
I want to Prepopulate ADITResource~OU=Engineering,DC=Personal,DC=com .For this, I have created 3 Prepopulate adapters.
Adapter 1 holds static value ADITResource~OU=
Adapter 2 holds dynamic value Department
Adapter 3 holds static value *,DC=Personal,DC=com*.
I want to concat these 3 adapters to form complete Active Directory OU and I need your help regarding this.
Plz provide your valuable guide lines and correct me If I am doing any wrong.
Thanks & Regards,
Madhu

Hi Rajiv,
I have tried with single adapter.I have created ADOUPrepop adapter, in which i created 2 variables
str1= ADITResource~OU=
str2= Department is an dynamic value which will be populated by department attribute of OIM
and then in AdapterTasks I have created utility task called step1 which will concat str1 & str2 and then I created another utility task called step2 which will concat utiility task step1 with a literal *,DC=sso,DC=com*.
But utility task step2 is executing before execution of step1.Below is the trace from server.log
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
ERROR,10 Dec 2010 16:12:44,342,[XELLERATE.ADAPTERS],Class/Method: tcAdpUtils/mapAdapterTask encounter some problems: Task "STEP2", method parameter 1: Task
"step1" is unreachable or may not be populated
Regards,
Madhu

Capital letter in name of organizational unit readed by AD connector

Hello,
I have problem with capital letter in list of available organizational unit in AD.
I use following code for get list of OU in AD in form:
<Field name='slctOrganizationalUnitUzivatele2'>
                <Display class='Select' action='true'>
                    <Property name='title' value='Nastavte organizacni jednotku:'/>
                    <Property name='allowedValues'>
                        <block>
                            <invoke name='listResourceObjects' class='com.waveset.ui.FormUtil'>
                                <invoke class='com.waveset.session.SessionFactory' name='getServerInternalContext' />
                                <s>OrganizationalUnit</s>
                                <s>AD</s>
                                <null/>
                                <s>false</s>
                             </invoke>
                        </block>
                    </Property>
                    <Property name='sorted'>
                        <Boolean>true</Boolean>
                    </Property>
                </Display>
            </Field>If AD is connected via Resource adapter list of OU is in normal letter. E.g.:
<List>
<String>OU=Obchodní oddělení,OU=Zaměstnanci,DC=test,DC=local</String>
<String>OU=Ekonomické oddělení,OU=Zaměstnanci,DC=test,DC=local</String>
</List>If AD is connected via Resource connector (connector server) list of OU is in capital letter.
<List>
<String>OU=OBCHODNÍ ODDĚLENÍ,OU=ZAMĚSTNANCI,DC=TEST,DC=LOCAL</String>
<String>OU=EKONOMICKÉ ODDĚLENÍ,OU=ZAMĚSTNANCI,DC=TEST,DC=LOCAL</String>
</List>I need to use connector server with normal letter.
Version of Active Directory Connector is 1.0.0.4521.
Any ideas?
Petr

So,
my solution was use AD resource adapter. This adapter solve some another problems that I have with AD connetor.
Petr

Organizational Units and Delegated Admin (again)

Hi,
In fact I've read that Domain Organizations can only be created thru LDAP but I'm a newbie in all this stuff, the paper says that I must create some LDIFs records to create a Domain Organization my question is where should be these files (LDIFs) be placed?
Rgds.

Hi
Once you have created the ldif file with information about the Organizational Unit , you then import that ldif file into directory server (ldap).
You can import through directory console or through command line ldif2db.
Regards

Sharepoint audience targeted items no longer showing for specific people due to Organizational Unit was renamed,

we found one day that audience targeted items were no longer showing for specific people.
After a bit of troubleshooting, we discovered that one of the active directory domain groups that we were using was in an Organizational Unit (OU) that had been renamed.
After a bit more research, it appears that whenever a profile import occurs in SharePoint and the corresponding membership import occurs, SharePoint stores all the domain group membership in
a database table in the SSP database called MemberGroup. This table stores all the groups with a corresponding count and the group's canonical name.
When the group's canonical name changes in active directory SharePoint finds the new group and adds it as a duplicate entry into the table, and orphans the old record.
However, the audience rules still point to the old record, which is no longer valid and the audience compiles without any members.
http://vspug.com/mcotw/2008/07/28/do-you-use-sharepoint-audiences-beware-of-ad-changes/#comment-83
looking for solution for this problem ?

Hi,
There is a way to restore Membership information synchronization between content database and profile database for all site collections. How to do this is described in a microsoft support case:
http://www.google.no/url?sa=t&rct=j&q=&esrc=s&frm=1&source=web&cd=1&cad=rja&uact=8&ved=0CCcQFjAA&url=http%3A%2F%2Fsupport.microsoft.com%2Fkb%2F2703630&ei=4QFNU9yLGKfS4QSbvoDoBw&usg=AFQjCNFPI949Iehb8nObcQlkMf5BdfixDA&sig2=JiNfXlHX4Tf8VCS_sxvBog
Hope this can be helpful.
Heidi Lillebuen

Line count per organizational unit

We maintain information about the user, phone association and organizational unit (OU) in DC directory. We need to know total line count per OU, i.e 200 phones for division 1, 500 for div 2, etc.
I can get the phone list from AXL/SOAP or decicelistx (it is CCM 4.1). Both of them give me phone desc, MAC, extension, IP, etc., but I can't get the OU associated with that user. Is there a way to retrieve user's OU as well or do I need to pull it via LDAP against DC directory?

getUser (as well as addUser/updateUser) actually accesses the DC directory.
Direct ldap access is also possible though. There's just one consideration when choosing the technology: with CCM 5.0 and above there's no DC directory anymore so (although then you can send a sql request via AXL which is more efficient than getting users via AXL though).
So I guess unless you need seamless upgrade (only changing the URL and http to https) when upgrading CCMs, you're better off using ldap.
Keep in mind though, you will need a link between phones and users to make this work.. or if you use extension mobility, you need to look up the user device profiles associated with each user then look up the lines on those profiles (using an sql query via axl.. this translates almost 1:1 to versions 5.0+) to get the line numbers.

Retrieve Organizational Unit ID from ECC Purchase organization ID

hello Experts!
I am facing an issue. In SRM - given the ID of the Purchase Organization downloaded from ECC, I need to retreieve the related SRM Organizational Unit ID.
I have found a FM (BBP_CTR_UI_BE_PORG_DETERMINE) that is doing exactly the other way around, but coudln't find a function module / alternative way to satisfy my requirement.
Doesn anybody have an idea?
Thanks!

Hi
You can retrieve it using table HRV5500A to get the Org. unit ID for the corresponding backend pur org. If you want description of the Org unit then you can use table HRP1000.
Regards,
Sanjeev

Organizational unit transfers ,how to deal with the person in it ?

Hi,All,I need your help!
if an organizational unit has been transfered to another upper organizational unit ,and there are already persons assigned to different positions of it,so how to deal with this problem?are those person's IT 0000,0001should be changed too?and how to maintain this kind of change?is a personnel action necessary?or there is some other more efficient way for it?

Hi
In IT0001 You have a Position which is linked to a Org unit. If you want to change the org units reporting relationship then you have to change it in OM by creating a new relationship with the upper org unit.
All the person are assigned to position so nothing needs to be done in PA.
Reward points if useful.
Regards

Function module for automating creation of organizational unit

Experts,
I am using SRM 4.0. In my system R/3 is acting as backend.
For creation of new organisational unit in SRM, which is not present in SRM but present in R/3 side i have to do the manual activity every time.
Is there any function module? Which can automate this process. If there is any function module which i can use please let me know. and how can i use that also please let me know.
By this automation every time through the program the new organization unit should created in SRM side.
Please let me know..
Thanks in advance. I will appriciate through rewards points.

Hi,
Thanks for your input. But i am planning to send one file for HR records and then from that file through program i will upload the file. IF for some user the orgaisation unit will not be found then there itself it would create the OU through Function module(If Any)... I am doing like this as the HR system is some legacy system not the R/3 system.
So Please help me to find out function module.
i will appeciate for you help.
Thanks

Business partner of organizational unit is not consistent

Hi,
Client is on SRM 4.0. When we are trying to search a user in the org structure, and when clicking on "Check" for this user, it was showing fine. But when we are searching any BP in the org strucutre, then immediately the BP name is vanishing against the BP of the user and when doing the "Check" it is showing the below two messages:
Business Partner of organizational unit XXXXXXX is not consistent
User cannot be repaired becasue the organizational unit contains errors
When checking in BBP_CHECK_USRES, the user is not showing as defective. It is green.
Similarly, the the organizational unit check is also showing as green.
System is advising to run BBP_BP_OM_INTEGRATE. When we run this for the org units, these are coming as green.
Users are able to create the shopping carts and also are able to create confirmations. But the problem is happening for some of the users where the system is not allowing to create shopping basket / confirmation.
Strange thing is that, when we are searching the user by user id in the org structure, then the check is showing no messages. But if we search the same user using the BP number, then in the check, the messages are coming. And once the messages appear, it is appearing for all the users in the org strucutre even at the root node level.
Any help is highly appreciated.
Thanks & Regards,
Aswini

Hi Aswini,
There are some possibilities to raise these kind of errors messages:
1) User with inconsistent data.
Please, check the instructions described in the following notes:
597475 - Repair users with inconsistent address data
-> use the report B_REPAIR_EBP_USER_2 to make the user consistent.
419423 - Repairing incorrect EBP users
350129 - Creating business partner for organizational unit
When you create the Org Units have you fully completed the address
data, e.g post coe, telephone/fax number etc..
If not, please enter a full address, save the data and see if this
generates the Business Partner.
Remember, that you can delete this user and create a new user.
2) Error in the positions after HR replication
Please, implement the following notes and retest the scenario:
1056873 - Incorrect SRM users after HR distribution
1016450 - Replication of persons deletes positions in SRM
After implementing these notes you should send the employee
corresponsing to the user in error with his position (using
transaction PFAL or report RHALEINI in UPDATE mode for all periods.
3) the user was deleted and a new was created and during these two
actions the user opened documents. So, in this case, the new user
becomes inconsistent
If the user is deleted from SU01 still the BP and S which is related to
that user will be retained (we can see this in PPOMA_BBP) transaction.
In this case we can create the user again using SU01 and can be attached
with the old 'S' and 'BP'.
2. If the user is completed deleted ie., all relations BP and S.
The new user has created.
In this case if the new user is corrupted we can delete this
user (since the new user doesn't create any documents so far). But the
old documents should refer to the new BP related to the new user.
========================
Also, another option would be to follow the below instructions
After applying the notes 1056873 & 1016450, send the employees
corresponding to the users in errors with their positions (using
transaction PFAL or report RHALEINI in UPDATE mode for all periods,
using evaluation path A008) ? If not, please do this and it must repair
the SRM users. Please test and give me the feedback.
Hope this helps,
Kind Regards,
Matthew

Organizational Unit in DC directory

Similar Messages

Maybe you are looking for