Provisioning of User Group to BI systems

Hello there,
I am struggling a bit to find any documentation of how the User Group (BAPILOGOND-CLASS) can be provisioned to a BI system. We are already provisioning Valid From (BAPILOGOND-GLTGV) and Valid To (BAPILOGOND-GLTGB) so was imagining that it would be straight forward to provision the User Group as well. Any ideas?
Best regards,
Anders

Can't have any more open questions

Similar Messages

No provisioning of User Group for authorization field in user master

We are implementing CUP 5.3 workflows. Both in manual proviosing and automated provisioning based on User Defaults the user group gets only provisioned to the Groups tab in SU01. The field User Group for authorization on the Logon data tab remains empty (field CLASS from system table USLOGOND, filling CLASS field in table USR02).
In User defaults both under user default as on the user group tab the user groups have been defined. In manual provisioning the correct list of user groups get displayed for selection.
Under field mapping in the Application field I only find User Group in user master maintenance, but not User group for authorization. However I would assume I do not need to use field mapping, as I want to automate this provisioning based on user defaults.
Am I missing a configuration setting here? If so, where can I set it?
I would assume the provisioning of this field is possible. RAR reports the user group also based on the User group for auhtorization and not from the Groups tab.

S.Pados,
I can assure you that what I said in my last response does provision the User Group For Authorization Check on the Logon Data tab; in fact, I was having the opposite issue where the Group tab was not being provisioned; however, I am ruunning AE 5.2 and you said you are running 5.3; maybe something did change or got lost in the releases; it probably is good to see what SAP has to say about this; I would hate to lose this capapbility when I upgrade to AE 5.3
As far as using the custom field for multiple applications, would that field not be usable for any of the applications you would select in the request form?; if you are using the same table names in the different SAP systems (selectable by the application field on the request) would the drop down selections be whatever the table has defined for that system? I may not be understanding something here so I am just asking;
It would be great to have a Group field automatically filled in by another selection to avoid the user involvement; I agree with you there; because of our concerns on users entering the AE request, our shop has decided to continue with the users submitting the request through normal email and the security administrators perform the AE entering; this way we have a better idea on something like the GROUP field; we have an option to include the original email as an attachment for justification of the request
Sorry I could not be of more help
Jerry
Ryerson,Inc.

Provisioning different User Type to different systems

Dear Experts,
Is there a way by which we can provision different user types to defferent systems via CUP?
We have the following requirement:
1. User created in ECC should be dialog user
2. User created in BW should be service user
3. User always selects ECC and BW at the same time in one request
Thanks for your attention.

Hi Tang,
You can try this with creating 2 different custom field or 2 unused field in end user form like employee type and some other field. Then you need to define provisioning field mapping for both of these system differently.
Like you created 2 fields EEC_USER_TYPE & BW_User_TYPE then while making provisioning field mapping you need to create 2 different group. EEC_Mapping and BW MApping and map the respective custom field with Provisioning field mapping group.
I hope this will help you.
Regards.
Hemant

To use the "Users & Groups" preferences pane, System Preferences must quit and reopen.

When I try to access some of the system preferences in Mavericks I get an error pane that states "To use the “Users & Groups” preferences pane, System Preferences must quit and reopen."
Has anybody had this problem and if so what is the fix?

Usually happens if you opened one that was 32-bit. Then, you need to revert back to 64-bit.

Planner provisioning for user groups lost in Shared services

Hi All,
Everything was fine. All of a sudden, no users were able to login in to planning.
On investigation it was found that all the planner/planning provision to the groups is lost in the shared services.
Digged into log for a while and couldnt find out any issues.
What could be the reason we lost user group security provisioning only to planning?
Could anyone please help on this?
Regards,
GG

I used to have same experience every time migration happens from dev to UAT or prod etc.
After migration, registering with shared service will be successful. When i try to sync, migrate user identities (provisionusers.cmd) from shared service all user group info vanishes in planning (Add/Edit access page). i.e hsp_access_control table is truncated or all rows are dropped.
Then i have to set it up correctly. Guess this happens because usergroups have different id between different environments. When sync'g planning at target, it will not be able to recognize the wrong usergroup id of source system.
My assumption:
When provisionusers.cmd is run, planning fetches the usergroup provisioning information from shared services in to hsp_access_control planning repository table. could someone confirm the same?
Is there any other way to overcome this issue recurring on every time migration happens?
But the problem today was different: the provisioning is lost in the shared services itself which i havent witnessed so far. We didnt migrate recently, everything was file till 8 AM, but screwed around 8.10 AM. everything was up and running.
Cheers,
GG

Error when provisioning the user in SAP system.

Hi,
I am trying to provision a user for a SAP system from SAP IDM Netweaver.
I am geeting error message as below.
boldputNextEntry failed storingB19253
Exception from Add operation:com.sap.idm.ic.ToPassException: Password is not long enough (minimum length: 7 characters)
Exception from Modify operation:com.sap.idm.ic.ToPassException: User B19253 does not exist Internal error: FM SUSR_USER_READ, exception: 1 Inconsistency with addressbold.
This is happening only with this user. All other users are getting provisioned properly.
Some one please tell why this is happening and let me know if more information is needed.

Hi
Can you post some more info
What is your password policy on the identity store?
Do you have a minimum length of 7?
How long is this users password?
Thanks
Roy Tronstad

New user creation in AE- user group not getting assigned

Hi All,
Here is a typical case, wherein when we create a new user with AE for the production system, the user gets created and the roles are also assigned but the user group is not getting assigned. The user group is being fetched from a table from the backend and all that is working fine. Infact in order to test the configurations we even created a new user in the production instance of AE giving the development system as the target system for user creation and in this case the user was successfully created and the user group is also assigned. The problem is arising only when the target system is production system.
Connectors are all working fine, but we are unable to think of a reason. Can somebody help us on this?

Hi Vani,
If you are provisioning the user group using user defaults, check that production system is selected in the user defaults configured. Configuration -> user defaults. You can define any user default system, but for perticuticular user defaults that is applicable define all the systems, in which you want user defaults to be provisioned.
Kind Regards,
Srinivasan

How do I delete a User that does not appear in Users & Groups?

A leftover user (former employee account) that won't go away. Phantom User account becomes the default login account regardless of the new employee's login attempts. The phantom account Home folder appears in the Users folder at the root level, but not in the Users & Groups panel in System Preferences. I have logged in as tech admin and deleted the phantom User folder (while it is not the Home folder), but it comes right back again as soon as the new employee logs in as himself. ***???
I'd just updated this iMac to Yosemite, but this issue predates any specific OS update. Has persisted from 10.5 - 10.10. but is becoming an issue with permissions.
Any thoughts other than having to reinstall the OS from scratch? I was about to, but thought I'd see if anyone else has ever heard of this.....

Back up all data.
Triple-click anywhere in the line of text below on this page to select it:
/System/Library/CoreServices/Directory Utility.app
Right-click or control-click the selected text and select
Services ▹ Open
from the contextual menu.* The Directory Utility application will launch.
In the application window, click the lock icon and authenticate. Select the Directory Editor tool in the toolbar. Select Users from the Viewing menu in the toolbar, if not already selected. Locate the user you want to delete in the list and click the minus-sign icon at the bottom. Select Groups from the Viewing menu, and look for a group in the list with the same name as the user you just deleted. If found, delete. Quit Directory Utility.
Be very careful when editing the directory. Many hidden users and groups are present by default, and are needed for the normal operation of OS X. Never delete or modify a directory entry unless you’re sure you know what you’re doing. If in doubt, leave it alone.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens (command-V). You won't see what you pasted because a line break is included. Press return.

Users&groups preferences pane wants to open in 32-bit mode

Crazy isn't it? The users&groups preferences pane says: "To use the "Users & Groups" preferences pane, System Preferences must quit and reopen (like with 32-bit pps). when I click ok, it says: "Preferences Error, Could not load Users & Groups preferences pane."

I had to reinstall Lion, just running the installer again, not a clean install and the problem was gone. Just give it a try (hopefully) nothing to lose...

Where is the User Group stored

Hi all
I have a question about the User Groups.
I want to know where are the User Groups and their information stored in Business Objects.
Is there a system table from where I can access/pull this information.
Thanks.

Hello,
You can use the Query Builder (on the BusinessObjects Administration Launchpad under Administrative Tools) to query the CMS database.
The following query would return some details of all user groups in your system:
SELECT
SI_NAME, SI_DESCRIPTION, SI_ID, SI_ALIASES, SI_GROUP_MEMBERS
FROM
CI_SYSTEMOBJECTS
WHERE
SI_KIND = 'usergroup'
You can find documentation on querying the CMS in the Developer Library:
http://devlibrary.businessobjects.com/BusinessObjectsXIR2/en/devsuite.htm#en/BOE_SDK/boesdk_java_dg_doc/doc/boesdk_java_dg/SDKFundamentals34.html#1033059
[Dev Library Home|http://devlibrary.businessobjects.com/BusinessObjectsXIR2/en/devsuite.htm] > Enterprise SDK > Java Developer Guide > SDK Fundamentals > How do I use the query language to retrieve classes from the CMS repository?
Cheers,
Fritz

AE 5.2: Using user groups as a dropdown function

Hi All
We would like to use the user group functionality on CUP but the client does not have the same user groups across all systems.
Our suggestion is that they have all user groups defined across all the systems.
Is there a way that we could accomodate the client as per the current set-up where not all user groups are defined on all systems?
Any assistance on this matter will be appreciated.

Hi,
I'm not sure of all the complexities around this but we had a similar problem where the user respository we used could not be connected using LDAP.
The solution that was implemented was to create an ADAM (Active Directory Application Mode) directory, which is connected to the user repository - ADAM is then connected the UME for AE as the LDAP server.
Probably not the most elegant solution, but we have been using this in PRD environment for a couple of months now without any performance issues.
Unfortunately I don't have all the details to guide you through all the config that was required, but perhaps you could investigate this as an alternative solution.
Regards

Creating user group

Hi team
I had a few queries can u suggest.
1. creating user group in one system?
2. How to transport this user group to different clients in the same system?
3. How to transport this user group to different clients to other system in the same SLD?
4. How to transport this user group to different clients to other systems in othe SLD?
SLD(System Landscape)
Feebacks are greatly appreciated.
Regards
Bhaskar

Hi Bhaskar,
You can created the user groups by using tcode SUGR. However there is no need to transport the user groups. You can create the same user group in DEV,QA and Prod systems and add the user on logon data.
There is also one another way to assign user group :-
You can assign the user to user group on groups tab in SU01 tcode. Assignments that you make on the Groups tab page are not used for authorization checks that are specified on the Logon data tab page using the user group field.
Regards,
Sneha

Provisionusers.cmd and Migrate users/groups from Planningweb

Hi
Is the functionality of Provisionusers.cmd and migrateusers/groups from planning web similar?
I feel Provsionsuers.cmd is an alternative way to migrateusers/groups from planning web.
Please correct me if i am wrong.
Thanks and regards
krishnatilak

Hi,
The provisionusers utility basically syncs planning and essbase with the provisioning of users/groups in shared services.
If you run the utility and a user exists in shared services but has not been created in the planning database the user will be added.
If the user does not exist in the essbase security file then they are added.
If it is a user that exists and has security settings on members in planning then these filters are pushed down to essbase.
It should also remove users/groups from planning if they have been deprovisioned in shared services.
Cheers
John
http://john-goodwin.blogspot.com/

Mass deletion of user groups

Hi..
I wanted to delete a list of user groups in PRD system.
do we have any options to delete in mass, instead of deleting it one by one in SUGR. As we have SU10 for mass user changes.
Thanks...

>
Deepan Chakravarthy wrote:
> Hi..
>
> I wanted to delete a list of user groups in PRD system.
> do we have any options to delete in mass, instead of deleting it one by one in SUGR. As we have SU10 for mass user changes.
>
> Thanks...
Hi Deepan,
One way is
1. Go to SE16 -> USR02 table
2. Acquire the list of people belonging to the group you want to delete
3. Go to SU10 -> Click "Authorization Data" , Paste all the users copied in Step 2 and then execute and transfer the list to SU10 and delete all the users.
By the way, i don't recall the source, i read somewhere that it is not recommended to delete users in PRD.
Regards,
Zaheer

User Group Transport

Good Morning All - Is there any way to transport user groups from on system to other..Ex: DEV to TST and TST to PRD.
I dont see any option to transport these from one system to other, please correct me if I am wrong...as per my understanding..."user groups are client dependent and have to create in each client manually".
Thank you all...look forward your suggestion!

Provided you're using CUA, you can also resolve this problem by adding an entry in table PRGN_CUST as follows:
ID = CUA_USERGROUPS_CHECK, Path = "C". Then, transport the modified contents of PRGN_CUST to all your systems.
The result is that whenever a user is transported (via CUA) to a system where his/her user group is not previously created, the group will be automatically inserted into table USGRP.
Note that the corresponding text entry (USGRPT) will NOT be created, only the user group itself. However, this solution removes the cause of the annoying error messages in SCUL due to "user group not found"...
The above solution is probably the quickest and time-saving resolution in large environments, ie. CUA landscapes with 20+ systems and with large numbers of user groups. For small-scale CUA environments (up to 10 or so systems), you may consider transporting table contents as described above, at least initially.
Nonetheless, if your user groups continue to grow at a rapid pace, you may find yourself creating lots of transports, in which case the above parameter in PRGN_CUST may help.
Regards,
Trond

Provisioning of User Group to BI systems

Similar Messages

Maybe you are looking for