Restrict permissions to use the groups/users/roles in User Administration

Hello gurus,
I want to find out if there is a way we can restrict permissions to use the GROUPS in User administration. We want to assign the user administration role to the users, but do not want the users to have permissions to DELETE groups from User administration page.
Please also let me know, if we can just have users use the NWA to do the user administration instead of from the Portal?
Thank you,
~~MK

Hi MariaKutty,
Koti is right, you need to create custom User administration role from standard role and restric the access in the custom role and assgined to the users.
>Please also let me know, if we can just have users use the NWA to do the user administration instead of from the Portal?
Then can to do from NWA also, if the user not required to have the portal access.
Hope it helps
Regards
Arun

Similar Messages

Get the groups name of a user in openldap authenticator

Hi,
I am using an openldap for user authentification. How can i retreive the groups name of a user ? I read that i must use the GroupManagerControl class.
What is the way to specify the openldap authenticator using the above class ?
Thanks for help.

If you are referring to a user's group membership in the Active Directory, then indeed JNDI & LDAP can be used to retrieve these values.
If you are referring to a user's local groups on their own workstation, then you may want to investigate either the JNDI NTLM provider or perhaps the Samba JCIFS stuff.

How to get the group name of a user

Hi,
I am using an openldap for user authentification. How can i retreive the groups name of a user ? I read that i must use the GroupManagerControl class.
What is the way to specify the openldap authenticator using the above class ?
Thanks for help.

Re,
Here is a screenshot of this functions...
If you really own LV DSC 8.2 the best thing to do is to reinstall it.
Regards,
Message Edité par Richard K. le 04-02-2007 04:00 AM
Richard Keromen
National Instruments France
#adMrkt{text-align: center;font-size:11px; font-weight: bold;} #adMrkt a {text-decoration: none;} #adMrkt a:hover{font-size: 9px;} #adMrkt a span{display: none;} #adMrkt a:hover span{display: block;}
>> Découvrez, en vidéo, les innovations technologiques réalisées en éco-conception
Attachments:
security.jpg ‏3841 KB

Is it possible to get into the IC using the SALESPRO business role?

Is it possible to get into the Interaction centre when using the SALESPRO business role?.
If so, how is this done.
I know using specific IC* business roles, like IC_AGENT, you are thrown straight into the IC, but I can't see how you can get into it via the SALESPRO business role, which I assume you should be able to do.
Jason

Please check
Using Kerberos Authentication on SAP NetWeaver AS Java - User Authentication and Single Sign-On - SAP Library (NW7.3)
Using Kerberos Authentication for Single Sign-On - User Authentication and Single Sign-On - SAP Library (NW7.0)

How do I use the same profile for two users on the same computer

I use my laptop both at home and at work. And in each venue I use a different user log on. But I wish to have firefox use the same profile for each user log on. How can I get firefox to point to the same profile for each user?

Note that only one user (Firefox instance) can use a profile folder at the time, so if you would switch the Windows user to another account then you would first have to close Firefox.
* http://kb.mozillazine.org/Creating_a_new_Firefox_profile_on_Windows
* http://kb.mozillazine.org/Shortcut_to_a_specific_profile
* http://kb.mozillazine.org/Using_multiple_profiles_-_Firefox
* http://kb.mozillazine.org/Bypassing_the_Profile_Manager

HT4314 I have tried to log into clash of clans on my iPad and it just keeps going to a new game rather than the one saved on my iPhone. I have been using the game centre and same user name and password ?

I have tried to log into clash of clans on my iPad and it just keeps going to a new game rather than the one saved on my iPhone. I have been using the game centre and same user name and password ?

I have the same problem.. EXACTLY. . When phoning Apple Support they had trouble understanding my problem and couldnt find any type of solution. No one seems to take responsibility for GameCenter issues. The assistant escalated the problem but no one could find an answer. .
The only idea was to set up a new apple id, hence a new GameCenter account. . But that would loose all the itunes data. Anyone got ideas ?

Adding the group SAP_J2EE_ADMIN to one user

Hi everybody. I have NW2004s Enterprise Portal and I have some users that need this group to manager some things. But when I try to add the group SAP_J2EE_ADMIN to one user, appears the message: User attributes successfully modified. You are not authorized to assign one or more entities. Perform a new assigned entities search to see the correct status. Everybody can help me? Thanks a lot.

Hi Marcos,
It is clear that your UME is on ABAP stack , if you have to assign any group to a user then it has to be done through ABAP
Refer to these threads
http://help.sap.com/saphelp_nw2004s/helpdata/en/38/116e424925c253e10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/42/e4f0dfe4cc3ee1e10000000a1553f6/frameset.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/50/50c43dac1bcf51e10000000a114084/frameset.htm
Thanx
Pankaj

How to see the group membership for a user in oidadmin

how to see the group membership for a user in oidadmin?
I see the memberships in oiddas, but I would like to know if its possible to see them in oidadmin? Thanks.

Hi,
For what I understand, you know the user and want to know the groups that the user is member of (am i wrong?)...
With this query you pass the user's DN to the ldapsearch and the search gives you back the list of groups the member is a member of, all you need to do is change the value "uniquemember=cn=orcladmin" in the query for your own user.
For example:
$ORACLE_HOME/bin/ldapsearch -h localhost -p 389 -D "cn=orcladmin" -w oracle10g -b "dc=acme,dc=com,dc=au" -s sub "uniquemember=cn=orcladmin" dn
will give you the list of groups that the user "cn=orcladmin" is a member of.
$ORACLE_HOME/bin/ldapsearch -h localhost -p 389 -D "cn=orcladmin" -w oracle10g -b "dc=acme,dc=com,dc=au" -s sub "uniquemember=cn=smithj,cn=Users,dc=acme,dc=com,dc=au" dn
will grive you all the groups that the user smithj is a member of.
if you don't want to get the DN of the group you can change the last parameter of the query like this
$ORACLE_HOME/bin/ldapsearch -h localhost -p 389 -D "cn=orcladmin" -w oracle10g -b "dc=acme,dc=com,dc=au" -s sub "uniquemember=cn=smithj,cn=Users,dc=acme,dc=com,dc=au" cn
will give you the CN of the groups the user is member of.
let me know if this is what you need.
Regards,
Juan

Using the Group option in PLD

Hi,
Please tell me how to use the Group option in PLD ? it always appears disabled.

Do you want to use SDK for PLD? I am afraid your question is better posted on SAP Business One Reporting & Printing forum.
Thanks,
Gordon

Frequently I send an email to multiple contacts.....I'm constantly changing my selection of multiple contacts so using the "group" function doesn't get the job done.......so how can I go through m

I guess I was not clear.....my fault....let me re-phrase: frequently I send an email to multiple contacts.....I'm constantly changing my selection of multiple contacts so using the "group" function doesn't get the job done.......so how can I go through my list of contacts and quickly select those contacts that I want to receive that particular email....thx

You need an app that allows group messaging. Enter group messenger in the search bar in the app store.

Using the SDK to check if user security role membership

Is there any way to check if a user is in a particular security role using the SDK?
I ask because I am considering adding a web based ticket search by ID/key word look-up web service since this function is not part of the Self-Service Portal. I am looking into what it takes to maintain the system's security model or at least limit
the information given to the users. I am thinking that affected users might get some ability to modify their tickets.
I've already built a web portal hosting complex forms for several of our teams where the Self-Service Portal was too limited to collect necessary information. The forms portal already uses the SDK to submit work items directly into Service Manager.
This would be a welcome extension of the web site's capabilities.

Hi,
You may try powershell, here are two PowerShell scripts that use
SMLets to reveal interesting information about user roles in SCSM, please refer to it:
https://gallery.technet.microsoft.com/Service-Manager-SCSM-User-ebcdfcd6
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

LabVIEW 8.0:: How to get the group name of a user logged to a NI Security Domain?

Hello all,
I am using LabVIEW 8.0 PDS.
I created a new local domain called "MyDomain" in the "NI Domain Account Manager" . I added a new User called "MyUser" and a new group called "Maintenance". I set "MyUser" to be a member of the "Maintenance" group. Then, I configured LabVIEW to invoke the login dialog at start-up in order to log "MyUser" with the correct password.
I would like to get the group name of the current user logged programmatically in a VI. I tried with the VI Server >> Application >> Security properties and methods and also with the properties and methods of the NI Security Class but it seems to be not so simple as I believed at start.
I do not find any informations or KB on this (all the documents I found deal with LV DSC or TestStand).
The final goal is to be able to manage a list of user for my application. Each user is a member of a group ("Administrator", "Operator", "Maintenance") and depending on the group, the user can or cannot access to some parts of the application.
Thanks for your help.
Matthieu
Eurilogic

Re,
Here is a screenshot of this functions...
If you really own LV DSC 8.2 the best thing to do is to reinstall it.
Regards,
Message Edité par Richard K. le 04-02-2007 04:00 AM
Richard Keromen
National Instruments France
#adMrkt{text-align: center;font-size:11px; font-weight: bold;} #adMrkt a {text-decoration: none;} #adMrkt a:hover{font-size: 9px;} #adMrkt a span{display: none;} #adMrkt a:hover span{display: block;}
>> Découvrez, en vidéo, les innovations technologiques réalisées en éco-conception
Attachments:
security.jpg ‏3841 KB

Unable to authorize user using AccessControlService and user.roles and user.privileges are not set properly

Hi,
I am trying to enable/disable a feature based on user.roles.
Added a constraint for that feature as below,
    <adfmf:constraints>
      <adfmf:constraint property="user.roles" operator="contains" value="manager" id="c1"/>
    </adfmf:constraints>
In this case, Users have manager role should be able to access this feature.
My AccessControlService response is
{"userId" : "sales_mgr","roles" : [ "manager","MOO_OPPORTUNITY_SALES_MANAGER_DUTY","ZBS_ENT_SALES_MANAGER_DUTY"],"privileges" : [ "managerPriv","ZSF_DEFINE_SALES_FORECAST_PRIV","MOO_MANAGE_OPPORTUNITY_GROUP_SPACE_PRIV"]}
Repsonse has "manager" as one such role.
After adding constraint to the feature, am unable to access it.
I tried many possibilities like operator="contains" or "not" or "equal", but no use.
I don't know what is going wrong. Appreciate you help.
Thanks.

If you are on 11.5.10 or greater or standalone 2.6.4 if you pass the responder value to wf_notification.respond API it should be updated in wf_notifications.responder column. The comments is now updated in wf_comments table against the notification id and not wf_notifications.user_comment column.
Thanks, Vijay

How can I use the same contacts for two users

MY wife and I are using the same account. I want to give her a seperate log in account (user). All is working fine excempt for "contacts". These are at the moment empty. How can I get our contacts also in her new contact list.
Are there any other things I should also look for, in executing this exercise

Hi Iemke Kuijper!
I have two articles for you that will help you achieve this goal. First, here is an article on exporting your contacts files and importing them:
Contacts: Export and import your contacts
http://support.apple.com/kb/PH11586
This next article will help you get the contacts file from your user account into your wife’s user account:
OS X Mountain Lion: Share files with others who use your computer
http://support.apple.com/kb/PH10636
Thanks for using the Apple Support Communities!
Cheers,
Braden

Using the Import utility from other users and going to a different schema

I has a user today with rights
Insert into XXXX.TABLE values(); Works just fine for another schema's table which has select,insert,update,delete.
We tried to utiile the import utility from OTHER USERS
Insert failed ORA-00942
Do you want ot ignore all errors
Even though we have rights to the schema under OTHER USERS.
When connected as the owner it works fine.

I've be trying to find a work-around to this issue & found this old post -- I'm having the same problem.
I'm using Oracle 11g and SD 2.1.1.64.
I have user A with a table that grants select,insert,update, and delete privs to user B. Logging into user B I, of course, can do inserts, deletes, etc. on the the table in user A's schema.
When I use the import data feature to load data from a CSV file I can't get it to work while logged into user B. It does work fine if logged into user A. It looks like the issue may be that it doesn't put the schema prefix of "A." on the insert statements.
Has anyone found a way to get around this issue yet?

Restrict permissions to use the groups/users/roles in User Administration

Similar Messages

Maybe you are looking for