RA Simulation on Profiles with "Include Users" Option

Hi ,
We have SAP RAR 5.3 SP8 P1.
When running the Risk Analysis simulation for profiles/roles, we are presented with an option to set Yes/No for "Include Users" .
Can somebody explain how this flag setting affects the simulation and what we can expect in the report?
With "Include Users" set to Yes, are we expected to see the users with the combination / one of the profiles???.
We are trying to simulate permission level risk analysis for profiles. So the simulation Values are set to check another profile with:
Exclude Values - No
Risk From Simulation Only - No
Include Users - Yes
Include Composite Roles - No
Once we set "Include Users"  to Yes, we can only run the simulation as a background job. But unable to see any user info in the results. Hope somebody can explain what the report is expected to display.
Thanks,
Anil

I am not logged on, but from memory this was an option to include "Reference Users" in the analysis. This means, authorizations (not profiles or roles!) are assigned indirectly via another user whos access I can inherit.
If it makes no difference and is refering to the reference user concept, then obviously you do not have any reference users...
> We are trying to simulate permission level risk analysis for profiles.
Are you sure about this? You are building manual profiles?
Cheers,
Julius

Similar Messages

  • Two profile two thunderbird at the same time with same user account

    Dear,
    I would use two Thunderbird at the same time for two different profiles with the same user accounts.
    I using linux OS.
    I was thinking of using:
    # thunderbird -P profile1 &
    # thunderbird -P profile2 &
    But when launching the second command nothing happens.
    Only brings in the foreground thundirbird already started.
    If possible use this configuration now or in the nex future?

    As a rule thunderbird only runs one instance of a profile.
    However, there are a couple of options you could try.
    You could use an addon to esily switch profiles:
    * https://addons.mozilla.org/en-US/thunderbird/addon/profileswitcher/
    there is more help here:
    * http://kb.mozillazine.org/Run_multiple_copies_of_Thunderbird_at_the_same_time
    It does say: 'Multiple instances is intended for debugging, so use it at your own risk'.
    One method would be to use: Start > Run
    "C:\Program Files\Mozilla Thunderbird\thunderbird.exe" -no-remote -P profilename
    there is a space before '-no'
    and also before '-P'
    followed by a space and the profile name
    You could create a shortcut/icon to run each separate profile.

  • Use old domain controller AD user profile with new domain (profile changed)

    Dear All,
    I have built Win Server 2012 for Domain migration from Windows Server 2003 to Windows Server 2012. I have tested all thing on VMware including user creation and tested Domain join using power shell for Win 7 and .VBs batch file for Win XP computers all thing
    are working fine.
    Let 1st I introduce my current environment. I have existing Win Server 2003 domain controller (abc.com) with 130 client computers and 200 users I am going to plan migrate my current environment to Win server 2012 Domain (xyz.com) Keep in mind that Domain
    name is changed but Domain Controller (Server) names are same i.e MY-PDC . I have tested domain join on multiple computers using existing clone of client computers and create all existing users using .csv file and power shell with required
    credentials and OU.I am facing the user profile issue when I join domain and login with existing user which was previously the user of same computer the required profile does not login and computer creates new user profile in Document and Settings section
    of Win XP.
    I need your expert opinions because copy old profile data and create new outlook profile for each user is a big headache for any one. Hope you people can understand and help me in this issue.
    Please provide best answer and result on priority I will be thankful to all of you.
    Regards,
    Arsalan

    Hi Arsalan,
    Please check if USMT can help you to achieve this target.
    User State Migration Tool 4.0 User's
    Guide
    Meanwhile, please also refer to following articles and check if can help you.
    How
    to Migrate Windows User Profile to New Account
    Keeping user old domain profile
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
    does not guarantee the accuracy of this information.
    If anything I misunderstand or any update, please don’t hesitate to let us know.
    Hope this helps.
    Best regards,
    Justin Gu

  • I recently changed wireless providers and now have new e-mail address.  changed profiles everywhere including Apple ID.  On my iphone, old email address still appears when I try to access itunes or update apps. How do I get new apple id to sync with phone

    I updated profiles everywhere including Apple ID.  However on my iphone,. when I need to update apps or do antyhing through itunes store, my old email address appears.

    follow directions given in the link to change your Apple ID to the new email address.
    Change your Apple ID - Apple Support
    sign out of your Apple ID on the phone, then sign in with the new Apple ID and password.

  • Can I share my address book with other user profiles on my computer?

    My wife and I both logon to our iMac with different user accounts. However, we know all the same people and would like to share the contents of the Address Book. How do we go about this so that if I add a person to the address book, that my wife will see it when she gets on with her account?
    Thanks.

    I realize yours was a suggestion to investigate & not a recommendation, but I wanted to point out some of the method's potential problems in case it was taken as the latter.
    Should anyone decide to take the safer option of sharing vCards manually, they can make the procedure easier by creating a shared folder in Users/Shared & an alias of it in some convenient location like the desktop. Then, after creating new contacts they want to share, they need only drag them from the name list into the alias. The other account holder(s) then can drag them from that common folder into their own Address Book.
    A variation of this idea is to create individual folders in each ~/Public/ folder (changing permissions as appropriate), or to use the Drop Box folder to make the vCard available to other user(s). This would reduce the confusion between "incoming" & "outgoing" vCards. I haven't tried it, but it might also be possible to automate the importing or at least notification for the receiving user with folder action scripts.

  • Standard Text with ' include' option doesn't work with order created by FM

    Hi ABAPers,
    Standard text with 'Include' Option does not work with all the Order created via the Function Module SD_ORDER_CREATE_WWW. Where as Order created via VA01 display the Standard text with 'Include'.
    On my analysis I found that, Order created via FM use  the '*' 'Comment' instead of ':/' 'Command' in the script editor. So the Standard text inserted was considered as a Text instead of command.
    Hence issuing print or print preview, the Script display the INCLUDE statement instead of the text.
    Can you please let me know the reason and the way to rectify it.
    Thanks & Regards
    N.Suresh Kumar

    Hi.
    Make that * command as /: and try in ur program..
    It works..
    Hope it helps...
    Cheers,
    Simha.

  • Mac: With my user profile, it is not possible for me to announce me to the Creative Cloud, with a different user profile, it goes without problems.

    With my user profile, it is not possible for me to announce me to the Creative Cloud, with a different user profile, it goes without problems. Creative Cloud Desktop has been uninstalled and reinstalled. There is no error message.

    john beardsworth wrote:
    John Waller wrote:
    However, Adobe will soon introduce Cloud only features into Lightroom CC for which LR6 (perpetual license) owners will have to wait until LR7 (paid upgrade).
    That is possible, John, but it is only speculation on your part. Might, not will.
    kwdaves wrote:
    There is a "Lightroom 6" upgrade available for US $79 if you have a valid license for any of the earlier versions. From what I can tell, the only difference between Lightroom 6 Full, Lightroom 6 Upgrade and LightroomCC is in the license. The download file is the same.
    Other differences - with CC you get LrMobile/LrWeb and they throw in a free copy of Photoshop too.
    Yes, but when I bought my standalone license and clicked on the "Download" button it took me to the LightroomCC page. The downloaded file is named Lightroom 6, but in the CC app the installed program is LightroomCC (2015).

  • In Linux, my firefox uses the /etc/firefox profile for all users, now I need ONE user only to start with their own profile, I'm struggling to achieve this, please help!

    In Linux, my firefox uses the /etc/firefox profile for all users, now I need ONE user only to start with their own profile, I'm struggling to achieve this, please help!

    .Jake. wrote:
    I forgot to say that the hard drive has not been used yet...
    So you have no backup of your data at all?
    Pete

  • Remote Desktop Connection attempted with 2 users already connected no longer gets dialog showing who is connected and option to force user off

    On Windows 2008 Server R2, when the maximum number of users are connected via Remote Desktop (2) and another user attempts to connect via Remote Desktop, the user is prompted with a login dialog. Upon login, a dialog is shown with the User Id's of the
    users who are connected, their current state (active or idle for x minutes) and it gives you the option to request access from a user or to force a user off. Recently our server stopped displaying this message and now only gives an error message that it cannot
    connect. It does not show the login dialog, just an immediate connection error message. So now we don't know who is logged into the server. This presents a problem with many users who need to deploy software or manage server resources. What setting could have
    changed that would stop displaying the login and the current users dialog? Thanks!

    i can't seem to reproduce this, I played around with my server's NLA settings, looked at RDS GPOs, the options in the RDP listener, checked the user account in AD, just can't see what would be blocking this
    would it make a difference if one of the RDP spots is occupying the server's console or not?
    are the users trying to come in when the two sessions are already used up using the /admin or /console switch?
    in the meantime, you can try using tsadmin.msc to kick people off
    you may also want to try testing this with various different OS and RDP client versions to see if that's the issue. win7 with RDP 8.1 client doesn't seem to have any problems for me

  • User Profiles with roles & responsibilities.

    How do create the User Profiles with roles & responsibilities in sd

    Hi,
    This is done with T. Code PFCG. Here we select the userid and give the required roles with which tell what the users can or cannot do.
    <a href="http://help.sap.com/saphelp_nw04s/helpdata/en/9d/39d0401117dd50e10000000a1550b0/content.htm">PFCG info 1</a>
    <a href="http://help.sap.com/saphelp_sm40/helpdata/en/57/3fc0413f1b6524e10000000a1550b0/content.htm">PFCG info 2</a>
    Hope this helps. Please reward if useful.
    Thanks & Regards
    Sadhu Kishore

  • Powershell script to get all user profiles with specific email address

    Hello,
    Please help me. I need a powershell script which can do the following things.
    List of all sharepoint user profiles with email address
    [email protected]
    List of all FBA user profiles with email address  [email protected]
         List of all Pending Access Requests
    Any help is much appreciated. Thanks.
    chirag

    The script is not working for me. I changed the url according to my site. See the below error
    New-Object : Exception calling ".ctor" with "1" argument(s):
    "UserProfileApplicationNotAvailableException_Logging ::
    UserProfileApplicationProxy.ApplicationProperties ProfilePropertyCache does
    not have 3f3a5705-0691-4fe8-8643-cccd65363dc9"
    At C:\Scripts\userprofileemails.ps1:11 char:19
    + $profileManager = New-Object
    Microsoft.Office.Server.UserProfiles.UserProfileMan ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~
        + CategoryInfo          : InvalidOperation: (:) [New-Object], MethodInvoca
       tionException
        + FullyQualifiedErrorId : ConstructorInvokedThrowException,Microsoft.Power
       Shell.Commands.NewObjectCommand
    You cannot call a method on a null-valued expression.
    At C:\Scripts\userprofileemails.ps1:12 char:1
    + $profiles = $profileManager.GetEnumerator()
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : InvokeMethodOnNull
    Please guide me what to do on this.
    Thanks
    chirag

  • Push profile with profile manager to two users on one mac

    I have been testing profile manager today. Very interesting setup.
    Unfortunately I ran into one problem:
    I have a profile for a group setup as a push profile.
    Two users of the group use the same mac.
    So I logged in as the first user, browsed to .../mydevices and installed the trust profile. Then I clicked enroll to enroll the Mac.
    Then I did the same with the second user on the same Mac.
    So far so good.
    When I log in again as the first user, the Mac isn't enrolled anymore. Strange but I went on.
    I made a change to the profile with Profile Manager on the server. I saved the settings and checked Active Tasks to see wether it pushed the settings.
    Displayed: Push Settings 1 of 2 in progress; 1 succeeded. first user sending, second user succeeded.
    Then I enrolled the mac with the first user again. Then the task completes completely. But when I make a change to the profile again and push the new profile, the same problem occurs: the user last enrolled the mac gets the updated profile. The other user will not get the update.
    Hopefully this wil be fixed in a next update.
    Anyone got this working the right way / workaround?

    Do not use a network or local user to "enroll" a device. Create a Enrolment profile in profile manager I have found that the way you are doing this will work fine. However I am having the problem that now that I have a OD with 350+ users with 100+ devices profile manager cannot keep up and cannot push the settings fast enough or just hangs on user profiles but not device profiles......

  • Does the Guest User option work with 10.9.4 on Airport express?

    The reason I ask is that the guest user option doesn't with the Airport Time capsule I bought last week and the retailer is saying tough:)
    Thanks

    One idea that was suggested y-day was to turn off the cable router, while on the Help call, and see if the Guest  Network would work in Bridge mode.
    The modem/router would need to have an option to be configured to operate as a modem only.  Most don't. Whether or not that might be possible with your device would be question for your ISP.....who will probably not be very enthusiastic about this.
    Even if it might be possible to configure the modem/router as a modem, you would want to make sure that the ISP will offer support for you in the event of connection difficulties.  They may not support this type of configuration.
    If you have the make and model number of the modem/router handy, I will see if I can locate a setup guide for the device to learn more about it.

  • I want to share one user profile on one computer with two users

    I've been using 2 log-ins on my computer to avoid exposure on the web as administrator. I want to be connected to one user profile under a secondary log-in. How do I copy the user profile & where do I find it? Do I need to delete the profile I don't want? Is there a way to "meld the profiles"? Can I get access to edit so I can save some stuff from one & add it to the other?

    That doesn't exactly help. It tells you how to move a profile between machines, but not how to share a profile between two users, which is what Snarkle and I want to do.
    This seems to be a common application problem now that Microsoft have at last added proper user security to Windows - Mozilla isn't the only program set that's giving me problems. Methinks application designers have to bite the bullet and work out exactly what a "profile" is for the first time.

  • Velocity profiling with SoftMotion Module

    Hi Folk,
    I need to move a stepper motor following a velocity profile, i.e. I need to change continuously the velocity while motion is in progress.
    I intend to perform the move with a cRIO platform equipped with a NI 9512 module.
    By using the property & invoke nodes, introduced first in NI SoftMotion Module 2009 SP1, I have created a small test routine to perform my task.
    I have used the property & invoke nodes, instead of the function blocks, because I want to update the velocity profile as fast as possible.
    For the test routine I have used a simulated axis (a servo motor) and the routine is developed by using the scan interface.
    In the main loop, a sinusoidal wave (point by point) generates a sample velocity profile, the velocity is passed to the "velocity" Straigth-Line Move property node and it is applied to the axis by the "Start" Straigth-Line Move invoke node.
    The test routine runs circa correctly until the velocity profile cross the zero, at that time the routine stops with the following Error -77070.
    I have added an offset to the generated sinusoidal profile. The test routine runs correctly if the offset sets the sinusoidal profile all positive or all negative, i.e. the offset is greater than sinusoidal amplitude.
    Question (1)
    I beleave that this behavior is due to a bug in the Straigth-Line Move node. I am right?
    Question (2)
    I have written that the routine runs "circa" correctly because furthermore the previous bug there is a timing issue.
    I have set the Scan Period = 5 ms as it is requested for 951x modules.
    If the timed loop (Synchronize to Scan Engine) is set to 5 scans or more the timing of the timed loop seems to be correct (the sinusoidal wave shows the period that has been configured).
    If the timed loop is set to 4 scans or less the timing of the timed loop becomes longer  (the sinusoidal wave shows a longer period as that has been configured).
    Any idea about this timing issue?
    Question (3)
    Any suggestion how to write a faster velocity profiling with the SoftMotion Module?
    Thanks for your help,
    Asper
    P.S.
    Error -77070 occurred at Invoke Node in Axis_Velocity_profiling.vi
    Possible reason(s):
    NI SoftMotion:  A Start operation is pending. Please add a delay between consecutive preemptive Start Motion calls.
    Attachments:
    velocity_profile_exemple.zip ‏77 KB

    Hi Reid,
    I am developing a system for low-force tests of very thin tissues in tension and fatigue.
    The force is measured with a load cell and is applied by pulling the sample with a linear translation stage and the elongation is measured with a linear encoder.
    The linear stage is motorized with a 2-phase-stepper motor, and with two limit switches. The stepper is designed for applications with very limited space conditions and the motor is hollow.
    The linear encoder has a 20 nm resolution and a 1 um accuracy, and includes an electronic for signal conditioning that is compliant with the encoder input of the NI 9512 module.
    The load cell is a full bridge with an accuracy better than 0.01 %. For acquiring and conditioning the full bridge, the system uses a NI 9237.
    The system will provide tests that are controlled both in force and in elongation.
    For the tests controlled in force, the loop is closed with the signal measured by the load cell and the translation stage is driven in velocity.
    For the tests controlled in elongation, the loop is closed with the encoder signal and the translation stage is driven in position.
    For both type of tests, the user can select different test profiles, for example: a linear increasing, a sinusoidal profile for fatigue test, etc.
    The user can pause the test at any time, and the system must take the condition, until the next proceed command.
    My previous post: question (1)
    Your reply:
    I ran the code  Axis Override Test 1 on my machine on a simulated Axis and this was the performance I observed:
    Our versions maybe differing did you see the same behavior on a simulated axis?
    Concerning the velocity that is read from the Read (Data) function block, I observe the following:
    With a simulated axis (both in My computer and in cRIO-9073) the values are positive for forward move and they are negative for backward move (as you also have observed).
    With the real axis (NI 9512) the values are positive both for forward move and backward move.
    Please see the next images.
    With simulated axis
     With real axis (NI 9512)
     My system is as follows:
       LabVIEW: 9.0f3
       SoftMotion: 9.0.1
       NI-Motion: 8.1.0.3037
       NI-RIO: 3.3.1
       NI-RT: 9.0.0
    I want to point out that the simulated-axis is a servo drive while the real axis is a stepper drive (NI 9512).
    With my software release, I believe that this behavior is due to a bug, probably in the stepper drive interface. I am right?
    I suggest that you try on a real stepper axis (NI 9512).
    My previous post: question (2)
    Your reply:
    These two questions I feel share the same root cause. It takes a little bit longer to calculate the a preemptive move in the opposite direction.
    Considering the observation on the Read (Data) function block issue, now I note that my second question arises from the sum of two different behaviors. In case the Read (Data) function block issue is solved, as for simulated axis, the sentence can be rewritten as:
    The velocity plot shows some computation troubles as the velocity is approaching the zero, with the derivative both positive and negative.
    Furthermore I have discovered that this computation troubles gives a blocking error if the velocity is approaching the zero with a zero derivative.
    Once the velocity reaches the zero with a zero derivative, the "Velocity Override" Write is no any more able to change the velocity!
    No errors or warnings comes out in this situation!
    This behavior is true with an axis both real and simulated, and is still true both with an all function blocks code and a mixed function blocks/invoke nodes code.
    From this point of view, the velocity troubles with the approaching to zero are very very bad!
    Please consider that in the previous posted example you can find an all function blocks code, Axis Velocity Override_test_0.vi, and a mixed function blocks/invoke nodes code,  Axis Velocity Override_test_1.vi.
    You can easily test the velocity blocking error by putting the parameter offset = amplitude in the previous posted example.
    My previous post: question (3)
    Your reply:
    I am curious if you are observing that around zero % the override function performs poorly, was this present on the function block example? I think the problem here is the preemptive move being called from the straightline move function.  Basically, the trajectory generator is still calculating points when send the command to it. Since we are updating the velocity at a  very fast interval we notice some of this breakup due to the longer latancy times. Even with this
    Error -70216 occurred at an unidentified location
    Possible reason(s):
    Motion:  A required resource is busy and unable to accept further commands at this time.
    To get around this error you will need to call into the trajectory generator at a slower period of time to allow it to finish the operation in progress. Keep in mind the control loop we are calling into in RT is the command loop to the trajectory generator and the position control loop is performed on the FPGA of the module itself.
    I want to underline that the computation troubles as the velocity is approaching the zero has not apparent connection with the Error -70216.
    I have tested the posted routines with Scan Period = 5 ms and the Number of  Scans = 5 or more (25 ms for cycle or more) and the computation trouble is still there every time that the velocity is approaching the zero.
    The Error -70216 come out randomly and increases as the cycle time decreases.
    I did not observe any decay in the time to perform the Velocity Override around zero %, but you have to consider that I did not make any test to investigate this issue.
    I agree with you, the Error -70216 can arise from some commands that try to access the same resource a the same time.
    In my opinion the Velocity Override has to be predominant, i.e. no matter what the routine is actually doing, the routine should start immediately to correct the actual velocity to reach the new value.
    Suggestion: for the future release of the Velocity Override, please consider to leave the opportunity to select from percentage velocity (as it is now) an absolute velocity.
    Regards,
    Asper

Maybe you are looking for

  • Problems creating a new folder when using webmail

    Hi, has anyone else out there encountered problems when trying to create a new folder when using webmail ? It just seems to create a new folder called 'New Folder' and misses out the step that would normally allow you to rename it to a title of your

  • CS3 Adobe Media Encoder: HDV to PSP 720x480 ?

    Using the factory setting 'Sony PSP Widescreen High Quality' I am able to encode this material at 368x208 29.97fps, but I am losing way too much quality at this setting. I cannot seem to encode to a playable Sony PSP (3000) video at 720x480. I have t

  • How do I move an iMovie 10.0.7 project from one computer to another to continue editing?

    I am using iMovie version 10.0.9 and created a project that I need to somehow move to another computer and continue editing in iMovie. How can I get a file that I can drop onto a drive and open up on another computer to continue editing? Exporting th

  • Can BIP excel output calculate result automatically?

    I have generated the output file with XML format. but i had one question: the cell doesn't calculate automatically, it still show excel formula format "=H7 / ( 1 + .17)", not the result of calculation 109.90. BIP version:10.1.3.4.1. Is there any solu

  • Lightroom and SyncToy question

    Hi, I use LR 2.2 and Synctoy 2.0 for syncing my Photo folder to external backup drive. Those that use Synctoy should know I use Echo mode = all new files are copied to backup drive, all renames in Photo folder are repeated on backup drive and all del