Reporting on resource attributes

We have a system with a few resources such as AD, which we pull information from, and push them all into an LDAP resource which will become the central identity repository. However we want to run reports on identities, and we'd like to dump a report similar to the all users report, but with a bunch of LDAP attributes as well.
Is this possible? It seems like we can only access IdM attributes when generating the report?

Hi Tom,
I think this will not be possible, because time is read from query date - and there can be given only one date.
So in one query, you can read only one information about the atribute.
You could consider using an infoset instead of a multi provider - there are special topics about time dependencies there - please read SAP help about this.
regards
Cornelia

Similar Messages

File download uielement resource attribute

Hello,
I am following the blog [link|http://wiki.sdn.sap.com/wiki/display/Snippets/WebDynproforJava-+FileDownloadUIElement]
this works fine except for the fact that resource attribute is indeed needed for filedownload element coz it otherwise gives a dump
so how should I populate the resource ? if i just simple keep a resource type attribute then the dump is gone but there is no file.
thanks in advance
B

Hi,
If you are using 7.0 then you need to bind the file download ui to an attribute of type binary and if you are using CE 7.1 then ui must be binded to an attribute of type Resource.
The best way to set the binary attribute is
wdContext.currentContextElement().setBinary(str.getBytes());
And for CE 7.1, set the Resource attribute like
IWDResource resource = WDResourceFactory.createResource(str.getBytes(), "MyFile", WDWebResourceType.TXT);
wdContext.currentContextElement().setResource(resource);
Regards,
Amol

Resource Attributes not saving in Queriable User Extended Attributes

Howdy,
I added a few queriable user extended attributes to IDM. I originally added them in through the configure user attributes interface. I then edited the UserUIConfig to specify that they were queryable. I then edited the User Search Defaults form's getSearchableAttrs function to include these attributes. My added attributes now show up in the search user form, etc., just like I expected them to. Next I configured a new resource adapter for a database table that contained some values I wanted to use to populate these queriable attributes. I wrote a correlation rule, and ran reconciliation on the new resource. It matched up the account entries and automatically matched and linked the account information. So far so good. However, the user extended attributes I defined are not getting populated with the data from the new resource. The mapped resource attributes are treated as part of the user view, but only under the given resource, not as a queriable attribute. I really want to be able to use the find user interface with these datafields. Does anyone know why my data is ot making it into the queriable fields? Do I need to write another rule or workflow? Any advice would be most helpful.
Thanks!
Jim

Queryable attributes refer to attributes stored in the IDM user object, and so need to be referenced as such.
If you want attribute 'foo' in resource 'bar' to be stored as a Queryable attribute, you need to define it like so in your User Form :
<Field name='accounts[Lighthouse].foo'>
    <Expansion>
          <ref>accounts[bar].foo</ref>
    </Expansion>
</Field>This should pull the value from the resource attribute and put it in the IDM attribute. If you refer to it as a global.foo everywhere, that might work (but I find globals to be problematic).
Let me know if it works...
Jason

User View not showing the assigned resources attributes in idm 7.0

Hi,
In a Remediation Form I am using a text field
<Field name='user.accounts[SimAD].group'>
<Display class='Text'>
<Property name='title' value='Title'/>
</Display>
</Field>
but here i am not able to get the value of group. when i dumps the user view its shows only Lighthouse resource under accounts attribute.
<Attribute name='accounts'>
<List>
<Object name='Lighthouse'>
<Attribute name='firstname' value='Magnet'/>
<Attribute name='fullname' value='Magnet Mangentta'/>
<Attribute name='idmManager'/>
<Attribute name='lastname' value='Mangentta'/>
</Object>
</List>
</Attribute>
while the user has three resources.
when I use the getView method in form using following code
<invoke name='getView'>
<ref>:display.session</ref>
<concat><s>User:</s><ref>user.waveset.accountId</ref></concat>
<map>
<s>authorized</s>
<s>true</s>
<s>subject</s>
<s>configurator</s>
</map>
</invoke>
this time I m able to get the value resource attribute.
please give the solution how can I get the editable user view in Remediation Form so that I can change the attribute of resource.
Thanks,
Amit

i got the solution there was one attribute on workflow
<Argument name='NoFetch' value='true'/>
remove this to false it will fetch all the resource attributes

Ms Project 2013 report for resource name, tasks less than 100% complete within a date range I can set each time

I have seen I can create a report for a resource name with a specified date range, and one that can show me for a resource name any incomplete tasks, but I want to do the following and cant work out how to state it in the report constructor:
resource name equals - {I want to set a given resource in here}
% complete is less than 100%
start - date range is between [today -7 days] and [today +7 days]
Please can someone show me how this is possible, I know it will be and it is me that has been defeated!!

workspacedesign,
Oops, my bad. I missed the point that the Name field for assignment rows will be the task name and that's not what you want. There is also a glitch in the date range filter. So, here's how to fix that.
First, in the Resource Usage view, copy the Name field to Text1. Now select the resource line and do a fill down for all assignments under that resource. Do that for each resource. This could be automated with VBA, but for now, a manual setup should work
fine.
Second, instead of testing for the Name field in the filter, test for the Text1 field.
Third, change the Finish test to be "less than or equal to".
Now when you apply that filter, enter beginning date of your range and then the ending date of your range followed by the resource name. You should get the data you want.
Unfortunately formulas in custom fields are not as flexible in Project as they are in Excel. For example, in Project a formula can only operate on data for that row. Further, even if you use the formula Today() +7 for your filter criteria, the first time
the filter is used, Project will hard code today's date into the filter. The normal way around both of these shortcomings is to use VBA.
Hope this helps.
John

Dynamic Heading not translated in report template "Value Attribute Pairs"

Hello,
I created a report in which I use application item names in the column heading of the items.
When I use the report template "Value Attribute Pairs" the heading displays not the contents of the application item names but the exact contents of the headings.
for instance:
application item name "trm_label_1" has the value : "Naam".
I created a report based on the SQL: select x.name from persons x
The heading of column "name" is: "&TRM_LABEL_1.".
The report shows the text "&TRM_LABEL_1." instead of "Naam".
When I change the report template in "Standard" the substitution is done well.
Can anyone explain what (not) happens and how I can fix this problem?
Gr.
Rob

Hi Rob,
You can do this by choosing as Headings Type: PLSQL in the Column Attributes.
You would have something like Deptno:DName:Loc:&APP_ITEM.
Where the first columns are normal text and the last one is an application item.
Regards,
Dimitri
-- http://dgielis.blogspot.com/
-- http://apex-evangelists.com/
-- http://apexblogs.info/

CPH Reports for Status Attribute.

Using Central performance History (RZ23n), is it possible to create reports for Status attributes?
Eg: I want to create for number of abap dumps, dead locks for each day.
As per documentation it says we can create for performance values and we are able to create CPH reports for R3Dialog Response time...
http://help.sap.com/saphelp_nw70/helpdata/en/c2/49773dd1210968e10000000a114084/content.htm
Any help or ideas are appreciated.
Thanks,
Venkat.

Thank you Shyam for so prompt reply,
We are using the same report. But its bit uneasy to go to change document of each and every ticket. Also in this report we could not find how much days the notification lay in New status or in In-process status. We require somewhat in following format.
Ticket number     New           Customer action     In-process
000001          1Day          1.3 Days          1 Day
000002          1.3 Days                           2.3 Days           1 Day
000003          3 Days          3.4 Days          1 Day
We are not bothered about days, week or hours etc. The purpose is to indentify how much time every ticket took stage wise. May be through ABAP this possible but we are looking for standard reports.
Thanks
Anand Rao

Update IDM Account and Resource attribute

How can i update the resource attribute of users while updating their IDM account from file upload?

Hi
we have a similar requirement ?Were you able to solve it and how please let us know.
Thanks

Limit User View To Not Include Resource Attributes

Although I've created custom workflow and forms I'm still unclear on what exactly initiates the loading of views when starting for example the Tabbed User Form. Can you control what gets loaded into the view, specifically not load resource attributes?
We currently have approximately 700 resources and growing. This significantly lengthens the load time of the Tabbed User Form because Identity Manager connects to several hundred resources. We normally do not edit resource attributes directly but instead set them using globals or role attributes. This latency also has an affect throughout the tool, for example end-users requesting roles requires the Tabbed User Form to load.
Ideally the view would only load the waveset and globals values and only connect to the necessary resources upon saving the view.
Any ideas or further explanation on what controls the view attributes would be greatly appreciated.

Dynamic Tabbed User Form will not help here as the resource attributes are loaded anyway, regardless whether the form displays it or not.
The problem is the user view itself that checks every linked resource. I don't think you can limit the view by providing some arguments. You would have to create your own view along with the necessary handlers for checkout and checkin.

What is the name of Report Builder Resource File

Can Anybody knows what is the name of Report Builder Resource file and can it open in Oracle Terminal or not.
Regard's
Fahed

How to create a new one.http://download-uk.oracle.com/docs/cd/B14099_19/bi.1012/b14048/pbr_arch.htm#i1005582
http://download-uk.oracle.com/docs/cd/B14099_19/bi.1012/b14048/pbr_strt.htm#i1007097

Load from resource attributes.

Hello,
I want to do a Load from Reasource (IdM7). When I start it I specify my input resource (a db table) and a form which should process all the input records. The form, for each input record, creates a new user ad some accounts on assigned resources.
I am guessing how should I refer to the input resorce attributes inside the form: should they be referenced as accounts[INPUT-RESOURCE].attribute or something else?
TIA

I mapped accountID to CN. I changed it and mapped it back to uid
Thank you
Vivek Shashwat

Issue Setting Resource Attributes via Workflow Process

I'm currently trying to set resource attributes via a workflow process, but for whatever reason the attribute is not detected as "changed" and the update object has nothing about the attribute. I'm wondering if I'm just doing something wrong with the way I'm setting it, or if I'm missing a piece to apply the upate.
What I'm doing is...
1. Checking out the user view
2. updating the attribute via code something like this...
<set name='user.accounts[ldap].attributeIWantToChange'>
Logic in here
</set>
3. then I'm checking the view back in.
Anyone know why this isn't working(I can set other attributes like waveset.roles fine this way)?
Edited by: UNO-AD-HM on Jul 6, 2009 12:54 PM

Figured it out, have to load a different form in when I check the view out, the tabbed user's form will not update resource attributes.

Fetch a resource attribute using Last name

Hi All,
I need to fetch a resource attribute 'employeeID' from AD, all I know is only Last Name (I don't know the accountId). How can I acheive this?
Is it possible through EXPRESS or do I need to write a java program.
Please share your ideas.
Thanks in advance

It is possible (with XPRESS) but the search criteria of Last Name will result in lots of erroneous matches. If at all possible, find additional or alternative search criteria to narrow down the field.
Here's some example code for retrieving results from an Active Directory resource. It was written to be used in the Form context (changes would be required if you were executing from a Workflow context).
              <defvar name='results'>
                <invoke name='getResourceObjects' class='com.waveset.ui.FormUtil'>
                  <ref>:display.session</ref>
                  <s>person</s>
                  <s>Active Directory Resource Adapter</s>
                  <map>
                    <s>searchContext</s>
                    <ref>baseDN</ref>
                    <s>searchAttrsToGet</s>
                    <List>
                      <String>cn</String>
                    </List>
                    <s>searchFilter</s>
                    <concat>
                      <s>(sn=</s>
                      <ref>lastnameValue</ref>
                      <s>)</s>
                    </concat>
                    <s>searchScope</s>
                    <s>oneLevel</s>
                  </map>
                </invoke>
              </defvar>baseDN specifies where in the AD tree to start searching (e.g. "cn=Users,dc=Acme,dc=com")
lastnameValue is the lastname you're searching on (e.g. "Smith")
results will be a List of the cn attributes that came back from the search (specified in the List under searchAttrsToGet). You need to put logic around the results to handle the List appropriately.
Use standard LDAP-style search filters in the searchFilter section if you need to add additional qualifiers.
Jason

IDM8 resource attribute.

Dear Experts,
I am using IDM8 and created a AD resource with resource attribute like
"Exchange Server" . I want to create a select box for this resource
attribute. I know that i can create a field with "Display Class: Select"
in Tabbed User Form > MainTabs > FMATTRIBUTES.
However, this select box will be display in attribute tab when user creation, no matter AD roles assigned or not.
Question: How to make this resource attribute with select box available when user assigned AD role.?
Thanks,
Angus

Hi Angus,
Try the following
<Field....
<Disable>
    <and>
      <eq>
        <length>
          <ref>user.update.accounts[Lighthouse].changes[roles].new</ref>
        </length>
          <i>0</i>
      </eq>
      <eq>
        <length>
          <ref>user.update.accounts[Lighthouse].changes[roles].old</ref>
        </length>
          <i>0</i>
      </eq>
    </and>
</Disable>
</Field>

How to Merge Report of ManagedBy Attribute with Collection Membership

I would like to merge the query below:
SELECT
v_R_System.Name0
,v_R_System.managedBy0
,v_R_User.Full_User_Name0
,v_R_User.Distinguished_Name0
FROM
v_R_System
INNER JOIN v_R_User
    ON v_R_System.managedBy0 = v_R_User.Distinguished_Name0
With a query similar to that in the built-in "All Resources in a Specific Collection" report:
SELECT
    fcm.Name,
    CASE WHEN coll.CollectionType = 1 THEN fcm.SMSID ELSE fcm.Name END as Id,
CASE WHEN ResourceType = 3 THEN '*' ELSE '' END as C066,
CASE WHEN ResourceType = 4 THEN '*' ELSE '' END as C067,
CASE WHEN ResourceType = 5 THEN '*' ELSE '' END as C068,
SiteCode,
CASE IsDirect
  WHEN 1 THEN '*'
  WHEN 0 THEN ''
END AS C069,
        coll.CollectionType
FROM fn_rbac_FullCollectionMembership(@UserSIDs) fcm
INNER JOIN fn_rbac_Collection(@UserSIDs) coll on fcm.CollectionID = coll.CollectionID
WHERE fcm.CollectionID = @ID
The merged query would be used to build a table that has System_Name, Managed_By, Is_Member as its fields. The Is_Member field would contain a * if the system is a member of the designated collection, and be null if it is not.

Untested, because again, I don't have managedby attribute being pulled in via system disc in my lab. And yeah, you either never said it, or I never read your request that way, that you wanted to 2 collectionIDs.
;with CollMembers as
Select coll.Collectionid, fcm.resourceid, coll.name,
case when coll.collectiontype=1 then fcm.smsid else fcm.name end as ID,
case when fcm.resourcetype=3 then '*' else '' END as 'UserGroup',
case when fcm.resourcetype=4 then '*' else '' END as 'User',
case when fcm.resourcetype=5 then '*' else '' END as 'System',
fcm.SiteCode,
case fcm.isDirect
when 1 then '*'
when 0 then '*'
end as 'Is Direct Membership',
case coll.CollectionType
when 0 then 'Other'
when 1 then 'User'
when 2 then 'Device'
end as 'CollectionType'
from v_fullcollectionmembership fcm
join v_collection coll on fcm.collectionid=coll.collectionid
where coll.CollectionID=@CollectionIDWhereIWantaStar
Select s1.Name0 as 'ComputerName',
usr.Full_User_Name0 as 'Assignee',
case when CollMembers.Resourceid=s1.Resourceid then '*'
else '' end as 'Member of Collection'
from v_r_system s1
join v_r_user usr on s1.managedby0=usr.Distinguished_name0
left join Collmembers on CollMembers.resourceid=s1.resourceid
join v_fullcollectionship fcm on fcm.resourceid=s1.resourceid
where fcm.collectionid=@CollectionIDOfTheLargerCollection
order by 'Member of Collection' desc, s1.name0
Standardize. Simplify. Automate.
One final tweak and we've got it! Thanks Sherry!

Reporting on resource attributes

Similar Messages

Maybe you are looking for