Parametric role and organization

Hi,
I´ve read BPM Studio helps and some threads in this forum and I still can't figure out this dynamic role thing.
As I understand a participant can not normally particapate to process instance which have been started by a participant from different organisational Unit even if role is valid.
Is it possible to change in which organization Unit's Role is doing the task, I am very sceptic that parametric role will solve this ?
Is there some where a good presentation of this dynamic role and organization thing ?
thanks

You get it perfectly.
1.- Yes it is different Studio and Enterprise in this thing, in Studio the deployment is equivalent to "the root OU" in Enterprise.
2.- In Studio you do not manage the OUs.
3.- In enterprise the OUs are managed in the deployment.
Things that deals to the directory are usually in the Enterprise side, participants are not exported from studio and the rest of things (OUs, roles, groups...) usually are mapped when you publish. And of course when you publish in Enterprise yo have more options that when you deploy in Studio (for example deploy to specific OUs, you can select the engine qhere you deploy (in studio you only have one engine), and so on...
Hope it helps
Edited by: ruben.vidaurre on 03-abr-2009 12:24
Edited by: ruben.vidaurre on 03-abr-2009 12:25
Edited by: ruben.vidaurre on 03-abr-2009 12:26

Similar Messages

Displaying business role and organization unit info in context area

Hi gurus,
I want to bring the business role and organizational unit details with which the user has loogged in the web UI in context area.
Other idea may me next to the logo. Below is the example how it should look like
Logged on as: Business role/Organization unit details
Can anybody please help.
Regards
Yogesh

Hi
The following link provides required solution.
https://wiki.sdn.sap.com/wiki/display/CRM/WelcomeUserMessageinWeb+UI
Paparao

How to hide users' (and roles and organization) list from a user in OIM

Hi,
Admin (xelsysadm) has created a user in OIM. Now if that user is logged in to OIM Self Service (http://<url>/identity), he can see other user in his organization, along with list of roles, role categories, organizations etc. I have requirement to hide all the administration links from end user. Right now, he only has "All Users" role, and doesn't have any admin role, but can see all these administration links. What do I need to do to hide these links from end user? Do need to remove "All Users" role, or assign any other role, or do something in entitlement or in access policy ??
Thanks.

Thanks Karthik for you reply. It helped a lot.
Steps, just for reference...
1). Create SandBox
2). Activate
3). Customze and view by source
4). Select your link which you want to hide
5). Edit Visible properties and use #{oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null}
6). Save
7). Publish
8). Test
Edited by: 966405 on Feb 20, 2013 3:50 PM

Difference between roles and rules

Hi,
I like to know the difference between the roles and rules from basic..
Pls do the needful.

Rules tells the object identification of the standard task.Many workflow systems allow for escalation rules to be built into the process, ie when a manager does not action a task it gets escalated via the workflow to another manager. If the escalation time frame is set to 5 days, you need to ensure your tests take this into account and the result might be longer test cycles.
Tasks can be assigned to an organizational unit but the strength of the workflow system is to enable business rules which select users <b>according to the data being processed</b>. For example, you might have one group of users associated with one quality notification type. The workflow can be configured to query the QM module directly to determine the users. You can define fallbacks using the default role associated with a task and allow agents to be specified on the fly by a supervisor.
Using workflow, one can manage various tasks or steps to be executed by different users (based on users or roles).An action can be assigned to user or to a role.The routing mechanism for work items uses roles and organizational assignments to determine who receives which work item.roles can be assigned to users while creating organization structure in ppoce.
hope this information helps
Neerja

How to setup the security based on roles in Organization.

Hi,
How to setup the security based on roles in Organization.
For example:Few users are Manager and a few user are Non Manager .Manager should have access to all work data including Non Manager and Non Manager should access based role.How to setup this? How OBI server identify the user role?
kindly let me know.
Regards.,
CHR

Hi,
You need to have Back End support to achieve this. In Back End you need to create two groups . You need to know what joins has to be made for which group (which is more important) and also make session variable for the userrole (with SQL supporting it). In the BMM layer, we need to put the security join conditions in the 'where clause'.
And make a common report. User loggin in with the respective userid will have userrole and joins assigned in the Back end. And they will be viewing the report according to their access.
Hope this will solve your problem.
Regards
MuRam

OIM 11g R2 - AD provisioning based on Role and Access Policy

Hi, for Active Direcotry integration i used some prepopulation plugin for populationg resource form (based on http://fusionsecurity.blogspot.sk/2013/01/populating-request-attributes-in-oim.html).
It's work fine - requested account was fully provisioned.
Can i use this plugins for Role based provisioning?
I try to create access policy and associated role but when attached the role to the user and run Evaluate User Policies Job, account can't be provisioned.
In diagnostic.log i found.....
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Immediate consequences are returned with event - InitiatePolicyEvaluationAndProvisioning
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Next Waiting child process is ..........6380 sync = false
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] First Waiting child process is ..........6380
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Kernel executing default validation with process id, event id, entity and operation 6,380.0.Resource.ACCESS_POLICY_BASED_PROVISION
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Kernel completed the child orchestration - 6380.6379
[oracle.iam.platform.kernel.dao] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Inserting records for orchestration cleanup
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Completed orchestration with action result - 113

Hi, all
I try to fill Access policy Process Form. Account request was created and provisioned when field AD Server and Organization Name was filled in, but pre-population plugin doesn't fired
The question is.... How can i use pre-population plugin for populating request dataset used with request generated by access policy....
Is it possible to use plugins for requests generated based on access policy?
a.

Problems when creating a new parameter for a parametric role

I'm trying to create a new parameter for a parametric role, but it seems that it is never updated, because the BPM engine does not return any error.
The scenario is: I have a process that has the role "Brands_Admin", the brands are populated by Web Service dynamically, then the parameters of the role would be those brands. In this case, if a new brand is registered (WS returns a new brand), I simply create a new parameter for the role through the "process administrator" of the BPM Enterprise.
I'm trying to create the new parameter as follows:
dirSession                 = DirectorySession.currentEngineSession;
dirOrganizationalRole       = DirOrganizationalRole.fetch(session : dirSession, id : "Brands_Admin");
String[] parametricRoles       = dirOrganizationalRole.parametricValues;
parametricRolesCount      = parametricRoles.length();
parametricRoles[parametricRolesCount]      = "NEW_BRAND";
dirOrganizationalRole.parametricValues      = parametricRoles;
dirOrganizationalRole.update();
dirOrganizationalRole.refresh();
for (int i=0; i<dirOrganizationalRole.parametricValues.length(); i++) {
     logMessage(dirOrganizationalRole.parametricValues);
In the code above, the BPM Studio will print the new parameter correctly, but in next activity (like a Screenflow) when I try to get the parameters of that role again, there are only the parameters that were registered using the BPM Studio, the parameters that are created programmatically not appear.
Anyone know the reason?
An user with the same problem: http://forums.tangosol.com/forums/thread.jspa?threadID=839253&tstart=1

When a project that contains this logic to create a new parameter for a parametric role programmatically is deployed in BPM Enterprise, some strange behaviours occurs.
The first is that I cannot see through the process administrator the new parameter that was created for the parametric role.
The second is that if I create this new parameter through process administrator and associate an user to the role that contains the new parameter I cannot access the deployment process. In workspace (authenticated with user that is associated with the role that contains the new parameter) I cannot see anything about the process.

Grab In A Parametric Role

Hi All
I'm using BPM to run a business flow using Oracle BPM Studio.
One of the roles I'm using in the process is a Parametric Role.
I need to use a Grab activity in this parametric role, but I got an error that I can't use a Grab activity in a parametric role.
Does anyone familiar with this problem?
I need to give some permissions to that role, and I don't want to use the Grab's API.
Thanks
Arik

Guessing I'm just confirming what you already know, but there are a couple activities that cannot be placed in a parametric role. Grab is one and a Global Interactive is the other.
It's not a bug, but I've never quite understood the rationale for not allowing a Grab in a parametric role either.
Describe your use case and perhaps we can all brainstorm another design pattern that will work.
Dan

How to use Parametric Roles in BPM 11g ?

Hi Experts,
How do I use the "parametric roles" in the Oracle BPM 11g?
I want to use this concept of subroles but could not do this in the BPM 11g.
Has anyone used and can help me or pass me an example?
Thanks.
Leo.
Edited by: user13269730 on 07/06/2010 13:21

Ditto here too... looking for an example of how to set this up.
Here is a scenario:
I have multiple application roles setup:
PM - city a (bunch of users)
PM - city b (bunch of users)
PM - city c (bunch of users)
PM - all (has all 3 PM roles and is used as the security to the swimlane).
I have a business requirement where the PMs (Project managers) should only be able to see and do work ONLY for their city. I have a metadata of 'city' but don't know how to setup an assignment based on this in the human task.
How does one setup a complex task?

Parametric roles in Oracle BPM 11g

Hi all!,
For all of us that was asking how to do the parametric roles in Oracle BPM 11g, here´s how to do it, hope it helps.
Regards!!
Z3uV4k
https://docs.google.com/file/d/0B7YrnfO7h717M2U1MTlmMmEtZjI3Mi00ZTNhLWFhNTQtYzkyZjc5OGI5Y2I4/edit?pli=1

Might also want to look at a blog post I wrote based on an idea Arun Pareek came up with. (click here)
The differences are (1) that this lets you assign parametric roles to groups or application roles instead of individual users making them simpler to maintain and (2) IMO it's a lot easier to do using this technique.
Dan

So Can I determine the business partners linked to user based on the assigned role and org. structure?

Hello, I am working on a SAP CRM 7 Sales implementation and we are implementing leads and opportunity scenarios. The current business organization model is that there multiple vertical and horizontal departments. This is typical matrix structure. This organization has done the segregation of its clients based on the verticals so every clients belongs to at least one or more Vertical department but Horizontal departments can contact all the clients. In the same way sales executives are also either belonging to one or more Verticals or Horizontal departments? Horizontal sales executive can create leads for any clients available in the system but a Vertical sales executive can only create lead only for the client belongs to his vertical and assigned to him. This can be achieved by creating organization structure and business partner relationship.
Now the problem statement is that few sales executives need work for both some Verticals and Horizontals at the same time. But requirement is that they should be able to do the both roles with single user id but multiple roles. So when sales executive is creating leads his vertical department, he should only be able to select clients assigned to his Vertical only but when he is creating lead for Horizontal department, he should be able to select any clients.
So Can I determine the business partners linked to user based on the assigned role and org. structure?
Please let me know if this is not clear also note we are only using CRM WebUI no SAP ePortal.
Thanks a lot your help in advance.
Regards
Sudesh Sharma

Thanks, Tahir
my problem has solved
Kind Regards,
Faisal

Multiple business roles and org data determination

Hello together,
we are having an issue with the organizational data determination. Some users have multiple business roles in different sales organizsations. This means, they are assigned to several units in our org modell.
This users can select the business role after the login screen. But this selection doesn't affect the org data determination (rule: ORGMAN_12).
For example. My user is assigned to 4 different org units. After the login i select a role. In debugging i can see this role, but the system selects only the first role and not the role i've selected after the login.
Is there any other rule which follows the select business role? Or can i assign one user only to one unit?
Best regards
Sascha

Thanks for your reply!
The problem is, that i need exactly the org unit according to the selected business role at the beginning. Because we have in one company different distribution channel (e.g. 10, 20, 30). And depending on this the user can create an business partner in 10, 20 or 30. So, in our case we have some users assigned to 10 AND 20 AND 30. For each channel we have one role.
Our org modell looks like this:
company XYZ
--channel 10 ( role 'salespro10')
mustermann-m
--channel 20 ( role 'salespro20')
mustermann-m
--channel 30 ( role 'salespro30')
mustermann-m
If the user mustermann-m select salespro10 he should be able to create a business partner in channel 10. And if the user select the salespro20 he should be able to create the bp in channel20.
But if you use the RH_STRUC_GET i get ALL assigment.
Best regards,
Sascha

Modelling Individuals and Organizations

I'm developing an application where a user can either act as an individual, or as a member of an organization, and I'm having some trouble modelling this so support the various systems.
To explain the rules, users log in and peform actions, but these actions may be in their own name, or performed on behalf of their organization. An individual can only peform the former, while a member of an organization can act on their own behalf or on behalf of their organization. A user can only be a member of a single organization.
And to clarify, an organization is a different beast than an individual. Primarily because it isn't a different type of individual, but instead a collection of individuals that operates as an independent identity in the system. It also supports a range of member-management functionality (payroll, for example) because of that. While it doesn't do anything itself, since it's members perform actions for it, it is the organization that is considered to have performed the action when the dust settles.
So now much of the objects within the system can have a parent that is either an individual or an organization, and several UI screens apply to both scenarios equally, with very minor differences (sometimes with no difference at all).
This leads to a host of implementation details. Let's say both individuals and organizations can buy widgets as one of many actions they both share. Now we must support the concept of widgets belonging to either an individual or an organization. Business logic must be able to handle both scenarios, ideally with minimal duplication, and persistence has to take into account that the parent relationship of widgets isn't bound to a single type, but one of two (individuals or orgs). Most of the systems in the application must deal with this issue.
I know this is a very abstract question, but I'm at an abstract phase of the design. Has anyone dealt with this type of model, and what techniques have been used to architect it?
Thanks to everyone in advance!

I think you'll need some others. There's a
many-to-many relationship between
Individuals and Organizations. True enough. I already have an object representing the relationship and attributes related to it (date, role, etc).
Can be complex. I've seen it done badly.
I don't think Party is necessarily trivial, even
if the idea is simple.Certainly isn't trivial. All sorts of new issues arrise. For example, with the proposed table layout, Parties, Individuals, and Organizations all have different ID's, and that needs to be reconciled.
Situations arise where your working with a system that references Parties, but you want to access more detailed information about the Person or Organization, perhaps for display purposes. Now you have to figure out how to get the derived type with just a Party ID. Doable, but I'd prefer to avoid a blind search through the Person and Organization tables.
What if the Party table referenced the sub-type? Perhaps a column that maps to an enum in code such as PartyType.Person and PartyType.Organization. Mappers like Hibernate could use this information to automatically create an object of the derived type when you load a Party.
Anyone know of any open-source Java or .NET projects that solve these problems? I'd love to see code.

Did I kept worthy roles and responsibilities in my resume?

I am trying jobs on SAP BASIS. My resume is not getting shortlisted by the companies. Here I am keeping my roles and responsibilites whcih I kept in my resume. Can u please check them once and suggest me regarding this?
Support Project: Roles and Responsibilites; Kept 1 year experience in this
     Resolving the tickets, which were raised by the end users
     Defining STMS, supporting and managing transport process
     Transported programs, Tables, authorizations and User Master Records across clients and systems
     Monitoring the work processes
     Performed Client Transports between Development and Production Servers.
     Performing user administration for 40,400 users, Created authorization Profiles, Activity Groups/Roles and Users and Managing security authorizations within SAP.
     Processing, controlling and trouble shooting the issues related to the background jobs
     Daily analyzing of ABAP dumps, Systems logs, Systems Trace, Lock Entries
     Setting up operation modes.
     Performing health checkup for system and database on daily basis
     Database Backup, Restoration, Recovery & BRARCHIVEs, Tablespace administration.
     Maintaining Spool system.
Implementation *** upgradation project: Roles and Responsibilites;
Kept 2.2 years experience in this.
     Creating Users and Maintaining User Master Record
     Creating Roles using Profile Generator tool
     Troubleshooting Authorizations Profile issues of the users
     Performing Local Remote, Client Export and Import
     Configuring RFC for Remote Client Copies
     Performing Creation of new Clients, Client copies from Development, Quality and Production systems
     Working with the Transport organizer and workbench organizer, releasing tasks and requests, checking Transport results
     Free space and adding data file & table spaces as necessary
     Applying SPAM update, Support package, technical/informative note fixes to       program
     Knowledge of Kernel upgrade process
     Knowledge of Installation of SAP R/3 4.X on Windows 2000/2003 servers and on UNIX.
Can anyone suggest me regarding this...

Try a different forum and a little less resume inflation
Cheers
Mikie

Oracle Production Support Roles and Responsibilities

Hi,
I am currently working in Application Support from past 4 years and I have applied for a opening in Oracle Production Support environment and it is different from DBA.
So far i have never worked in Oracle Production Support so i am curious to know what exactly the roles and Responsibilities for this position.
What kind of issues comes and how to troubleshoot them?
I actually need to understand the nature of this job in detail and few interview questions that can be asked for this position.
Any kind of help will be appreciated.
Thanks in Advance,
Regards.

Deadlock10 wrote:
Hi,
I am currently working in Application Support from past 4 years and I have applied for a opening in Oracle Production Support environment and it is different from DBA.
So far i have never worked in Oracle Production Support so i am curious to know what exactly the roles and Responsibilities for this position.
What kind of issues comes and how to troubleshoot them?
I actually need to understand the nature of this job in detail and few interview questions that can be asked for this position.
Any kind of help will be appreciated.
Thanks in Advance,
Regards.
In addition to Joe's questions regarding if you don't know the answer, then how do you know you want the job .......
Regarding job titles:
"When I use a word," Humpty Dumpty said in rather a scornful tone, "it means just what I choose it to mean -- neither more nor less."
(Lewis Carroll - Through the Looking Glass)
And so it is with job titles. Any given job title means only and exactly what the organization chooses it to mean -- "neither more nor less".
Even though we work in a technical industry, not every term you see has a universal, fixed, immutable, technical meaning. Not even close.
My first two jobs in IT were in shops that had exactly the same set of job titles for Programmers --
- Programmer/Analyst I
- Programmer/Analyst II
- Programmer/Analyst III
In one shop, the Programmer/Analyst III was the most junior of the three.
In the other, the Programmer/Analyst III was the most senior of the three.
So, you tell me, what is a "Programmer/Analyst III"? What is a "development DBA"? What is a "production support DBA"?

Parametric role and organization

Similar Messages

Maybe you are looking for