Reconciliation - Roles Field

Hello Experts,
     I would like to know, how can I verify or see the updated roles in OIM Admin Console after doing reconciliation?
     I mean, suppose I have assigned few roles to a user existing in both target system (SAP EP) as well as in OIM.
     After doing recon, how can and where should I cross check the updated roles?
     I am not getting mapping details of roles related fields neither in Process Definition nor in Reconciliation Manager.
     Can anybody tell me what mapping nedds to be done at OIM side so that I can see the roles mapped to the user?
Thanks

I have never used this specific connector but if you can trust the connector docs (which you often can't in OIM but perhaps the SAP connector docs are better than average) you need to do the following. I am also assuming that you are running the connector in non trusted mode:
1. Check that the Lookup.SAP.EP.Roles is populated with the correct values. It seems like the scheduled task SAPEP LookupRecon does this for you.
2. Run the main recon (SAPEP UserRecon) correctly configured (see section 3)
Assuming that you configured everything correctly you should now see the roles of the users in the child table for roles that is attached to the process form.
Good luck
/M

Similar Messages

  • BP Role field in UI

    Hi
    In UI i need to create BP with roles Prospect and SP. But i am not able to find BP Role field in UI .
    Please let me know how to over come from  this problem.
    Thanks In Advance 
    Regards
    Ahmed

    Hi Ahmed,
    You would need to add this assignment block to the UI.
    To do this, click on the 'Personalize' button ( you can see this as a small square on the right side of the screen - beside the Print and Help buttons ).
    On clicing the personalize button, a pop up opens that show you all the available assignment blocks and displayed assignment blocks. Just select the 'Roles' block, and then transfer it to the right side column using the 'Move to right' button.
    Then press Save / Apply .
    This will add the Roles assigment block to the UI.
    Best Regards,
    Rishu.

  • Internal Reconciliation - which field stores date of Reconciliation

    Hi Experts,
    I am looking to produce a rerport with shows payment on account and invoices and the date that they were Internally Reconciled against each other.  Is this date stored in any table?
    I have checked the ORCT table and on Internally Reconciling a Payment On Account to and Invoice the following fields are updated:
    OpenBal
    OpenBalSc
    However, I cannot see that the date of the reconciliation is stored.  Is it marked elsewhere, perhaps in another table?
    Thanks
    Greig

    Hi Rohan,
    Thanks for the information.  However, I'm still struggling to create a query which shows what date an invoice was internally reconciled.
    If I take the OINV table, the invoice number is stored in DocEntry and DocNum.
    OITR is the Internal Reconciliation header table which is linked to the ITR1 detail table as follows:
    OITR.ReconNum = ITR1.ReconNum
    The ITR1 detail does not seem to link to the OINV table... there is a ITR1.TransId field but this does not link to OINV.
    In summary, my question is: how can I link ITR1 to OINV?
    Thanks
    Greig

  • Change Reconciliation Account - Field Gray

    Hello Gurus,
    I tried to change a customer's rec. acct, but I couldn't do it as the field is gray out.
    Why it is not possible to change it? and how can I make this field able to be changed?
    Also when I use the mass transaction to do the change I have this message: Field KNB1-AKONT is not an input field.
    Thanks very much.
    Best regards,
    Catherine

    Hi,
    Please check Tcode OB20 - Change customer centrally, there the field Recon account may be checked as display only change that.
    Or try this:
    IMG-Financial Accounting-Accounts Receivable and Accounts Payable-Customer Accounts-Master Data-Preparations for Creating Customer Master Data-Define Screen Layout per Activity (Customers)
    Here highlight Change customer (Accounting) and click on details at the top and go to company code data, then account management and make sure that recon account is optional or required field not display
    I hope this helps .
    Regards,
    Abhee.

  • LEAD PARTY ROLE MISSING FIELD

    Hi everyone
                   I have entered involved party in Marketing work center >> Lead menu  and from this involved party with also i have entered party role
    but when i am going to make report on this involved parties in lead menu  i got issue inside business object .
         I got all parties which i have entered in lead menu but i have not got it party role into the report .
    I have also checked  Test shell for business object menu, but there also not any party role field  found in Business object .
         Where party role has stored in which field at Lead business object .please guide us.
    I have entered party role in lead screen shot
    Please guide us.

    hi ,
    thanks a lot
    I tried all the  solutions given by you ,but its not working.
    I will state the problem I am facing clearly:
    I chose a  'person '  or 'organisation' and created a BP.After that I wanted to give him Sold-to-Party role.
    When I choose sold-to-party role I should get 'sales area data' button next 'general data' button.That button is missing for me.

  • Exception while reconciliation with child table attributes

    I developed scheduler task that take information about users and create reconciliation event with multi valued field "Roles" that consist of "Role" field and "App" fields. Primary reconciliation work fine and resource added to user, but when i update user in target system and run my scheduler task - exception occured:
    oracle.iam.reconciliation.exception.ModifyAccountException: java.lang.Exception: Error occurred in XL_SP_RECONCHILDMATCH While processing Event No 3523 One or more input parameter passed as null at oracle.iam.reconciliation.impl.AccountHandler.modify(AccountHandler.java:361) at oracle.iam.reconciliation.impl.AccountHandler.applyRule(AccountHandler.java:243) at oracle.iam.reconciliation.impl.AccountHandler.process(AccountHandler.java:205) at oracle.iam.reconciliation.impl.ActionEngine.processEvent(ActionEngine.java:197) at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.processReconciliationEvent(ReconOperationsServiceImpl.java:982) at oracle.iam.reconciliation.api.ReconOperationsServiceEJB.processReconciliationEventx(Unknown Source) at sun.reflect.GeneratedMethodAccessor707.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310) at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182) at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149) at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131) at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119) at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171) at
    Here is code from scheduler task:
    try{ if(!reconOperations.ignoreEvent(objectName, attrs))
    long eventId = reconOperations.createReconciliationEvent(objectName, attrs, eventAttributes);
    List<HashMapWrapper> childList = port.getRolesForUser((String)attrs.get("Identity"),resourceProperties.get(LOGIN_RESOURCE_PROPERTY),
    resourceProperties.get(PASSWORD_RESOURCE_PROPERTY));
    if(childList!=null && !childList.isEmpty())
    for(int k=0;k<childList.size();k++)
    HashMap<String,String> child = new HashMap<String, String>();
    HashMapWrapper childWrapper = childList.get(k);
    HashMapWrapper.Map childMap = childWrapper.getMap();
    List<HashMapWrapper.Map.Entry> childEntry = childMap.getEntry();
    for(int f=0;f<childEntry.size();f++)
    HashMapWrapper.Map.Entry childParam = childEntry.get(f);
    child.put(childParam.getKey(),childParam.getValue());
    reconOperations.addMultiAttributeData(eventId,"Roles",child);
    reconOperations.providingAllMultiAttributeData(eventId,"Roles",true);
    reconOperations.finishReconciliationEvent(eventId);
    reconOperations.processReconciliationEvent(eventId);
    LOG.fine("created : " + eventId);
    Help to solve this issue!

    First make one of the child form fields as Key Field!!!
    List<HashMapWrapper> childList = port.getRolesForUser((String) attrs.get("Identity"), resourceProperties.get(LOGIN_RESOURCE_PROPERTY),
    resourceProperties.get(PASSWORD_RESOURCE_PROPERTY));
    HashMap[] childs = null;
    if (childList != null && !childList.isEmpty()) {
    childs = new HashMap[childList.size()];
    for (int k = 0; k < childList.size(); k++) {
    HashMap<String, String> child = new HashMap<String, String>();
    HashMapWrapper childWrapper = childList.get(k);
    HashMapWrapper.Map childMap = childWrapper.getMap();
    List<HashMapWrapper.Map.Entry> childEntry = childMap.getEntry();
    for (int f = 0; f < childEntry.size(); f++) {
    HashMapWrapper.Map.Entry childParam = childEntry.get(f);
    child.put(childParam.getKey(), childParam.getValue());
    childs[k] = child;
    if (!reconOperations.ignoreEventAttributeData(objectName, attrs, "Roles", childs)) {
    long eventId = reconOperations.createReconciliationEvent(objectName, attrs, eventAttributes);
    if (childs != null && childs.length != 0) {
    for (int f = 0; f < childs.length; f++) {
    reconOperations.providingAllMultiAttributeData(eventId, "Roles", true);
    reconOperations.addDirectMultiAttributeData(eventId, "Roles", childs[f]);
    reconOperations.finishReconciliationEvent(eventId);
    LOG.debug("created: " + eventId);
    } else {
    LOG.debug("ignored: " + attrs.get("LoginName"));
    }

  • AET error while creating a new field

    Hi Experts,
    We have a requirement to create a check box/newfield on Account Details screen in Web UI. I am trying to create a new field using AET but am getting the following error message. Please help.
    1. Error during generation of object CI_EEW_BUT000
    2. Customizable CSOL conflict for objects changed in other TR.
    We have a config TR involving the role field on account details component (BP_HEAD/ACCOUNTDETAILS). Do we need to release the transport before creating any new fields.
    The generation of the field fails when I select the extension and click on 'SAVE and GENERATE'.
    Please help.
    Thanks,
    Rohit

    Hello Rohit,
    Please  apply note 1707978 to solve the issue.
    thanks
    Willie

  • Reconciliation Account missing for vendor

    Hi All,
    When i am running the MRKO transaction for Settlement for a particular vendor and posting date of December 2009, i am getting a message that Recon. acct missing for account VENDOR. Enter a recon. acct in master record. Can anyone let me know how to get this resolved?
    Thanks:
    Siddharth

    Transaction FK02, select Accounting info. under Company Code data for your Company Code.
    Make an entry in the reconciliation account field.
    Nick

  • Error occuring on a lookup field in profile page

    Hi All,
    I have a lookup field on the OIM 11.1.1.5.0 create user page. The create user form was working fine and I was able to create users properly. However since today morning, suddenly I am getting a strange error whenever I click on the lookup field to select any value. The query for lookup has not been changed. Its the same as before. But this error keeps popping up on UI directly and then am not able to do anything unless I restart the browser.
    The error is as follows:
    ADF_FACES-60096:Server Exception during PPR, #8[[javax.el.ELException: java.lang.AbstractMethodError: prepareWhereClause
    Caused by: java.lang.AbstractMethodError: prepareWhereClause
    Can some one please help me out with this? The only change that I remember was I had changed OIMServer.jar file with another version but I have re-stored the original file which I had a backup of. But it still throws this error.Thanks,$id                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

    Hi,
    I increased the log level of the oracle.adfinternal to TRACE-32. I can see the following additional things in the logs after the 60096 exception that arises when I click on the Search button in the user role field:
    [2013-01-01T11:16:16.585+01:00] [wls_oim1] [TRACE] [] [oracle.adfinternal.view.faces.lifecycle.LifecycleImpl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 004oZTf^PWj1baXh1tnJ8j0002mn000WN_,0:1] [SRC_CLASS: oracle.adfinternal.view.faces.lifecycle.LifecycleImpl] [APP: oim#11.1.1.3.0] [SRC_METHOD: _executePhase] [URI: /admin/faces/pages/Admin.jspx] Executing phase RESTORE_VIEW 1
    *[2013-01-01T11:16:16.609+01:00] [wls_oim1] [TRACE] [] [oracle.iam.identitytaskflow.logging] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 004oZTf^PWj1baXh1tnJ8j0002mn000WN_,0:1] [SRC_CLASS: oracle.iam.taskflows.utils.CommonUtils] [APP: oim#11.1.1.3.0] [SRC_METHOD: getCustomProperty] [URI: /admin/faces/pages/Admin.jspx] Cannot find the resource global.Lookup.UserRole in the bundle.*
    [2013-01-01T11:16:16.609+01:00] [wls_oim1] [WARNING] [] [org.apache.myfaces.trinidad.component.TreeState] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 004oZTf^PWj1baXh1tnJ8j0002mn000WN_,0:1] [APP: oim#11.1.1.3.0] [URI: /admin/faces/pages/Admin.jspx] Saved child count does not match current count (was 2, now 4)
    [2013-01-01T11:16:16.610+01:00] [wls_oim1] [TRACE] [] [oracle.adfinternal.view.faces.context.ApplicationContextManagerImpl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 004oZTf^PWj1baXh1tnJ8j0002mn000WN_,0:1] [SRC_CLASS: oracle.adfinternal.view.faces.context.ApplicationContextManagerImpl] [APP: oim#11.1.1.3.0] [SRC_METHOD: pushContextChange] [URI: /admin/faces/pages/Admin.jspx] Context change about to be pushed. Current stack size: 0
    [2013-01-01T11:16:16.610+01:00] [wls_oim1] [TRACE] [] [oracle.adfinternal.view.faces.context.ApplicationContextManagerImpl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 004oZTf^PWj1baXh1tnJ8j0002mn000WN_,0:1] [SRC_CLASS: oracle.adfinternal.view.faces.context.ApplicationContextManagerImpl] [APP: oim#11.1.1.3.0] [SRC_METHOD: pushContextChange] [URI: /admin/faces/pages/Admin.jspx] Context change about to be pushed. Current stack size: 1
    [2013-01-01T11:16:16.610+01:00] [wls_oim1] [TRACE] [] [oracle.adfinternal.controller.application.AdfcPageResolver] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 004oZTf^PWj1baXh1tnJ8j0002mn000WN_,0:1] [SRC_CLASS: oracle.adfinternal.controller.application.AdfcPageResolver] [APP: oim#11.1.1.3.0] [SRC_METHOD: getPhysicalURI] [URI: /admin/faces/pages/Admin.jspx] ADFc: viewId [LookupByQueryPopup-TF/LookupByQueryPopup] resolved to [taskflows/lookupbyquery/LookupByQueryView.jsff]
    [2013-01-01T11:16:16.610+01:00] [wls_oim1] [TRACE] [] [oracle.adfinternal.view.faces.context.ApplicationContextManagerImpl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 004oZTf^PWj1baXh1tnJ8j0002mn000WN_,0:1] [SRC_CLASS: oracle.adfinternal.view.faces.context.ApplicationContextManagerImpl] [APP: oim#11.1.1.3.0] [SRC_METHOD: pushContextChange] [URI: /admin/faces/pages/Admin.jspx] Context change about to be pushed. Current stack size: 2
    [2013-01-01T11:16:16.610+01:00] [wls_oim1] [TRACE] [] [oracle.adfinternal.view.faces.context.ApplicationContextManagerImpl] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 004oZTf^PWj1baXh1tnJ8j0002mn000WN_,0:1] [SRC_CLASS: oracle.adfinternal.view.faces.context.ApplicationContextManagerImpl] [APP: oim#11.1.1.3.0] [SRC_METHOD: popContextChange] [URI: /admin/faces/pages/Admin.jspx] Context change about to be be popped. Current stack size: 3
    [2013-01-01T11:16:16.611+01:00] [wls_oim1] [NOTIFICATION:16] [] [oracle.adfinternal.controller.util.LogUtils] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 004oZTf^PWj1baXh1tnJ8j0002mn000WN_,0:1] [APP: oim#11.1.1.3.0] [URI: /admin/faces/pages/Admin.jspx] Key mismatch: expected Process Region but got JSF Phase %s
    [2013-01-01T11:16:16.611+01:00] [wls_oim1] [NOTIFICATION:16] [] [oracle.adfinternal.controller.beans.ManagedBeanFactory] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 004oZTf^PWj1baXh1tnJ8j0002mn000WN_,0:1] [APP: oim#11.1.1.3.0] [ADF_MESSAGE_CONTEXT_DATA: Bean Name=shellRequestContext;#;Bean Class=oracle.idm.shell.context.ShellRequestContext;#;Bean Scope=request;#;Taskflow Id=null] [ADF_MESSAGE_STATUS: begin] [ADF_MESSAGE_ACTION_DESC: ] [URI: /admin/faces/pages/Admin.jspx] [ADF_MESSAGE_ACTION_NAME: Instantiate Bean] Instantiate Bean
    I am not sure if the line in bold saying cannot find resource global.Lookup.UserRole is the root cause or not. But if it is, then any idea what might be causing it? Can it be related to the OIMServer.jar replacement I had done earlier?
    Thanks,
    $id

  • Possible values of an account role are missing

    Dear SAP Collegues, I'm working with CRM 7 and I have a problem updating some fields of the account.
    In GUI we can change the role of the BP, now in UI at the ROLE assignment block I can't see the possible values to assign to the bp as a valid role.  The configuration in SPRO is ok and I can see the values in the GUI but no in the UI. The role field doesn't show a match code.
    Thanks in advance by your help.

    Thanks for your answer Christophe. I read the note but the same does not apply since I'm not using the functionality of the life cycle of the account. There are currently no set group exclusion. The problem appear when I'm trying to assign a new role. In Accounts at the assignment block named ROLE  I can see the current role but I can't  add a new one since the values ​​are not showed  and the match code is not visible too.
    In SAP GUI BP transaction the behavior is the expected. 
    I am working on CRM 7.0
    Edited by: Jorge Anzola on Sep 2, 2011 2:39 PM

  • How to make a field un editable in one screen

    Dear Experts,
    I want to know how to make one field as un editable in one screen.I will explain in detail. I want to make "Reconciliation account" field as un editable in XD02 t-code.
    Regards,
    Surendra babu.

    Hi Surendra,
    Use this path in spro:
    Financial Accounting-> A/P&A/R-> CustomerAccounts->MasterData->Preparatons for CreatingCustomerMasterData
    use the transactions & u can update for creation of customer master or hange of customer master.
    Hope this helps you
    Award points if helpful
    chaitanya

  • Reconciliation for the deleted user accounts on Target Resource

    Hi,
    I am trying to run reconciliation on a DB Table as the target resource. It is linking the user accounts that are present in the target resource.
    But for the user accounts that are deleted on the target resource Reconciliation is not showing any action on the IdM user accounts under resource profile. The resource object link still shows the status "Provisioned".
    Ideally when the users are deleted on the target resource User's profile, Does it require any customizations to make the resource assignment status to "revoked" instead of "Provisioned".
    Any response would be of great help.
    Thanks in advance.

    See there could be two possibilities only:
    *1) User Status Recovery via trusted Reconciliation*
    Associated field in OIM responsible for it - Status field of OIM User Profile -> Check Process Definition for Xellerate User or any Trusted resource in "Reconciliation Field Mappings" section
    Valid values are : Active, Disabled and Deleted
    *2) Account Status Recovery via target Reconciliation*
    Associated field in OIM responsible for it - OIM_OBJECT_STATUS field from Process Data Field -> Check Process Definition for Your custom resource of DB App Table in "Reconciliation Field Mappings" section
    Valid values are : Enabled, Disabled and Revoked
    So you are trying to achieve the second part.
    Hope its clear.
    Thanks
    Sunny

  • Display Reconciliation a/c

    hello,
    I have an issue like after creation of vendor master, reconciliation account in the change mode should be having display status.
    so at the time of creation of vendor master, reconciliation account should be able to input the field and at the time of change, it should be having only display status.
    what is the procedure for this?

    Hi,
    You can maintain the activity dependent field status for vendor master:-
    SPRO > Financial Accounting (New) > Accounts Receivable and Accounts Payable > Vendor Accounts > Master Data > Preparations for Creating Vendor Master Data > Define Screen Layout per Activity (Vendors)
    Here for the below activities, maintain the field status as "Display" Only for Reconciliation account field:-
    - Change Vendor (Accounting)
    - Change vendor (Purchasing)
    - Change vendor (centrally)
    Regards,
    Gaurav

  • How to find out if a query(report) has a role.

    I want to find out if a query(report) has a role and what the role name is.
    Do anybody know a function or a table?

    goto SU01 , give ur username , click on roles tab , and click F1 on role field , then goto technical attributes , and use where-used-list of that dataelement , u will lot of tables on Roles and its attributes
    You can look up AGR* tables in SE16
    Please give me reward points if it is useful.
    Thanks
    Murali Poli

  • MIRO and alternative reconciliation accounts?

    Hi all,
    The situation is following. Purchase order is made and when in MIRO we are processing this PO into a subsequent credit then it is not possible to change an reconciliation account for that vendor even if I did set it up in SPRO as an alternative rec. acc. and have set it to be ready for posting.
    One solution would be to define a different doc. type and then do a substitution (I guess) but I wonder why this doesn't work the same way as posting a vendor invoice from FI?!
    Thanks
    D.

    In MIRO, you will be able to change the vendor account but not the reconciliation account itself.  The reconciliation account field will be greyed out, unless you made it as optional.  This may cause issues, as the user can go in and change the account and your subledger will not tie back to your ledger.
    One of the other alternative solution, may not be a preferred solution, is that when you are doing subsequent credits, you choose a different vendor (assigned to the other GL Account that you want to post to) and then post the MIRO transaction.
    Thanks,
    Madhav Nanduri

Maybe you are looking for