Restricting Administrators from Changing Learner Groups

Our current practice is to have diffenrent OLM Administrators, but want to know if there is a way to restrict them from making changes to Learner Groups that are created by other OLM Administrators. Currently these Administrators can change any learner group within the overall organization. We want it limited to only theirs. Is there some functionality that can restrict them from doing so?

I appreciate your help with this. Perhaps we can at least attempt an enhancement request. :-0 The whole idea for the seperate admin groups was so that they couldn't manipulate the information input by the other admin groups.
Thanks Again....

Similar Messages

Restrict Local Administrators from change Network property

In my office Environment we are using Development machines on which every developer has Local Administrator rights on there system. We are using 2 Internet lines in which one line is fast speed and another one is slow one, due to slow internet speed on
second line some peoples manually change the Gateway IP and switch from slow to Fast one, to stop this we need to restrict those users from changing IP on windows 7. Only domain Administrator can able to change that Setting. we are using Window Server 2008
R2 as ADDS. is there any way to stop this using domain group Policy? or Local security policy?

Hi Siddheshrsawant,
Sorry, we can’t restrict local administrators from changing network property via Group Policy, and this is by design.
For confirmation, the following thread also focused on the similar issue and can be referred to for information.
Unable to lock down Network Connections settings with Group Policy
http://social.technet.microsoft.com/Forums/windowsserver/en-US/32045ab3-0496-4f5e-b2c2-71ba0f2ed073/unable-to-lock-down-network-connections-settings-with-group-policy?forum=winserverGP
Best regards,
Frank Shen

Restrict users from changing roles

Is there a way to restrict users from changing roles
themselves? If a user goes to My Connections and then clicks Edit,
they could, in theory, change to any group they want--except to the
administrator group because you have to enter a password. If the
admin isn't watching the site 24/7, the user can change their roll,
let's say from a writer to a publisher, and publish something
before the admin can notice.
Is there anything that can be done to restrict that?

You can use connection keys...this will only allow a user to
change their name and email address (I think...I can check on this
tomorrow). We use these at my work and it allows for a lot more
control over who is assigned to the proper groups.

Restricting user from changing price in me22n after goods receipt

i want to restrict the users from changing the price of the material in me22n after after goods receipt.
pls tell me the userexit for it with detail.

Okay, then let me play the role of the bad man.
Why would you need to restrict users from changing a price after GR ?
Do you think that users are changing prices just for fun or to mess up the system?
Have you talked to users why they want change the price after a GR?
do you have an alternative plan, for the case that the price really needs to be changed to be able to post the invoice? do you want to cancel always the GR in this case? Is is possible? What if the stock is already issued? do you then want to cancel the entire chain? what if a month end closure was already done?

Restrict users from changing password on first login?

Hi,
I am doing mass user upload into UME using script import. How should I use the below functionality to restrict the users from changing password on first login?
IUserAccount uacc =UMFactory.getUserAccountFactory().newUserAccount(uid,newUser.getUniqueID());
uacc.setPassword("saras");
uacc.setPasswordChangeRequired(false);
How to implement above functionality with mass upload from script import?
Thanks
Srinivas
Edited by: srinivas M on Jan 20, 2009 9:05 PM

hi srinivas,
try this api
http://help.sap.com/javadocs/NW04S/current/se/com/sap/security/api/IUserAccount.html#isPasswordChangeRequired()
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/40d562b7-1405-2a10-dfa3-b03148a9bd19
this document able to retrive the password.. same positon u can disable the field
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/10649c90-24af-2b10-1086-ea0667ec3655
thanks

How can we restrict users from changing the data in HFM.

Hi All,
We have requirement from users where, They don't want the base data being loaded from SAP to HFM via FDM through ERPi to get changed in HFM at <Entity Currency>. They want data to be read only and no body should be able to change neither Grid nor Forms and neither Smart View. If we restrict by Shared services access then again they can't change ownership management value.
Regards,
Sushil

Hi Thanos, Thanks for your reply.
Yes i am aware of the security class, so your suggestion is to use security classes to restrict users? And how can i use the phased submission for the same? I am new to HFM so please bear with me.
I have one more question that my Application is HFM EPMA application. So is it necessary to have Application Administrator to change hierarchy and Deploy the Application from EPMA?
Thanks,
Sushil

How to stop the users from changing the Decimal in SAP

How to stop the users from changing User Profile

Hai,
It is not possible to restrict SU3 to display, because it has only S_TCODE has the authorization object.
If you really want to restrict users from changing their profile you have to remove the SU3 access and give SU1 or SU2 which gives access only to Personnel details and Parameters.
Hope this helps.
Regards,
Yoganand.V

Restricting PO Price Change (ME22/ME22N)

Hi Guys,
Restrict Purchase Order Price Change:
We want to restrict buyers from changing the price on the purchase order/Contracts after it has been created. So basically restrict them from making any change to the PO price within transactions ME22/ME22N/ME32/ME32K. We would like to provide the buyer with flexibility to change the price within a given tolerance level, if possible.
Has anyone instituted this type of practice? If yes, what are all the different methods which could be used to achieve this? What are the Pro/Cons for each of the methods?
Any guidance would be appreciated.
Thanks.
Shobha.

Hi Charlie,
Thank you for such a quick response, but I need to clarify something you stated:
"you can make display in M/06 tcode but you can put the price change tolerance here" .
Did you intent to say that ""you can make display in M/06 tcode but you can NOT put the price change tolerance here"?
Additionally, I haven't found anywhere else where the price change within tolerance can be set, beside the user exit option. Do you agree?
Please respond...
Thanks..
Shobha.

Prevent local administrators from opting out of Microsoft Updates / accessing Windows Update "Change settings" page

Hello,
Is there a a group policy setting / dll file / registry setting that I can restrict access to that would either:
A) prevent local administrators from unchecking the "Give me updates for other Microsoft products when I update Windows" box?
or
B) prevent access to the "Change settings" option on the left side of Windows Update?
Thanks!

> referring to the "Remove access to use all Windows Update features"
Yes.
> enabling this group policy setting would disable Windows Update and
No. It removes access to windows update, not windows update itself. If
you enable it, you have to make sure that windows update is properly
configured:
http://gpsearch.azurewebsites.net/#2791
>
https://technet.microsoft.com/en-us/library/bb490846.aspx). This is not
This article is - hum - somewhat outdated :)
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:

HT201304 It would be tremendously helpful to be able to access, set restrictions, and make changes from the parents device to all devices under the same iTunes account, so that I could make changes to my kids devices without physical access.

Please help!
It would be tremendously helpful to be able to access, set restrictions, and make changes from the parents device, to all devices under the same iTunes account, so that I could make changes to my kids devices without physical access.
I understand that I can set up a different Apple ID for the kids devices, or take physical control of the device and make the changes myself. However, my teenage son is technically savvy enough to have a job in Silicon Valley, as are most young people these days. However, in order to access his devices the current way, I first have to bypass the four digit pass code. This starts a fight of why I need in the device and continues to escalate. The argument that I am the parent will gain access but the fight is simply exhausting, and quite frankly shouldn't have to happen at all. He is not yet an adult, he did not pay for his iPad or iPhone and I, as a parent, should have not only have the right to change options at will, and from anywhere, but look at history or current activity when I feel like it.
I currently have the settings where app and in-app purchases require my password to be put in, and he must come to me to type it in, but I need more control and would like, and should be able to access any of our six devices and make individual changes simply by logging in to my account, with my password.
If I can see all my devices on the "Lost My iPhone" app, this technology should be easy to make happen.
C'mon parents! I have a pretty good kid, given all things that they can get into, but I am not stupid. For everything I see has been done, there is much more I haven't seen. I want my children to be kept safe and be able to know what they are looking at or listening to. We parents are the only ones who know our beliefs and what our kids can handle and when.
Thanks for any support or information that I may be missing in order to fulfill my request.

There are mobile device management solutions that can do this, including in Apple's OS X Server system, but most parents generally find that setting this up is more work than it's worth. If you're interested, though, there are a couple that at least purport to be free (I don't know if there are any hidden "gotchas"):
http://www.unwireddevicelink.com/features/
https://meraki.cisco.com/products/systems-manager
and Apple's system:
http://www.apple.com/osx/server/features/#profile-manager
I don't think any, however, allow you to see current activity or browser history. iOS doesn't expose those to access from MDM solutions, to the best of my knowledge.
Regards.

Restrict A User From Changing A Payment Term While Adding A/R Invoice

Dear Experts,
We want to restrict our users from changing payment terms while adding A/R Invoice.
We use SAP B1 2007 b.
Thanking you
Pradnya

Hi,
try below code in transaction notification procedure:
if (@object_type = '13') and (@transaction_type IN ('A', 'U'))
BEGIN
IF exists (select T0.DocEntry FROM OINV T0 Inner Join OCRD T1 on T0.CardCode=T1.CardCode Where T0.GroupNum !=T1.GroupNum and T0.DocEntry =@list_of_cols_val_tab_del)
          Begin
               SET @error = 30
               SET @error_message =N'You are not authorized to change payment terms'
          end
END
for how the transaction notification works or how to use :
check How to use Transaction Notification
Thanks,
Neetu

Change of Company code from one Cons Group to another Cons Group.

Dear All,
Please advise on change of company code from one Cons Group to another Cons Group , we have Cons Structure - at present few companies are in one cons group and as a policy we have to move the companies to another cons group. So please advise me what will be the case if we move int he following senarios:
1. if till period 012 year 2008, company A is in Cons Group AA and we want the same to Cons Group BB. How it will move to Cons Group BB in a Company code with the opening balances?
2. if there is no data in SEM BCS total Cube - and we want to move the Company A from Cons Group AA to Cons Group BB.
What will be the effect in both the scenarios. How to do this? if you can specify some steps then I will try to analyze the situation.
Thanks in advance

The changes are not complicated but company A must be placed in cons group BB as of period 12 2008 and in the master data of the cons group it should be indicated that the first consolidation is at the end of the period (EOP). Likewise in cons group AA must continue to include company A but in the cons group master data it must be indicated that the period of divestiture is 12 2008 EOP.
The cons group changes tasks must be executed to move the balances in period 12 2008.
If there is not data for company A in the totals infocube you may simply drag-and-drop company A from cons group AA to cons group BB without any concerns.
The affect in each scenario is different because if there is data that is to be reported as part of cons group AA company A must be included in cons group AA.

How to change Redo group from archive to noarchive

Hi guys i am having a dummy database it's in noarchive mode.
but i have added one more redo group (earlier there were two).
now it shows that this group is in archive mode.
how to change it.

What is the query you use?Can I guess ?
SYS@db11 > select GROUP#, STATUS, ARCHIVED from v$log;
    GROUP# STATUS           ARC
         1 INACTIVE         NO
         2 INACTIVE         NO
         3 CURRENT          NO
SYS@db11 > alter database add logfile group 4
2 '/home/oracle/base/oradata/db11/redo04.log' size 5M;
Database altered.
SYS@db11 > select GROUP#, STATUS, ARCHIVED from v$log;
    GROUP# STATUS           ARC
         1 INACTIVE         NO
         2 INACTIVE         NO
         3 CURRENT          NO
         4 UNUSED           YES
SYS@db11 > alter system switch logfile;
System altered.
SYS@db11 > /
System altered.
SYS@db11 > select GROUP#, STATUS, ARCHIVED from v$log;
    GROUP# STATUS           ARC
         1 CURRENT          NO
         2 INACTIVE         NO
         3 ACTIVE           NO
         4 ACTIVE           NO
SYS@db11 >

How to change Syntax group and physical path in SARA from unix to windows.

Our customer migrate current current archiving server from Unix to windows
How to change Syntax group and physical path in SARA from unix to windows.

http://help.sap.com/saphelp_nw70/helpdata/EN/8d/3e4ec2462a11d189000000e8323d3a/frameset.htm
you have to change
Logical Path Names
Logical file Names
Note 35992 - File name/directory for application archiving
hope this will help you
cheers
dEE

Restricting GL master change at account group level

Hi Experts,
Requirement
To control GL MAster field layout per company code or per account group and per activity.
To restrict GL master change, for certain fields, at account group level.
Let us say, I have activated "Post Auto" in a GL Account during GL creation.
Now while changing the GL, the system should not allow me to change this particular field.
Analysis
This is possible through transaction OB26 (Define Screen Layout for Each Transaction).
However the limitation of the above transaction is that it is applicable for all the account groups for a particular activity (Create/Change/Display).
I do not want to use any development to make this happen.
Please help me in solving this through standard SAP.
Cheers,
Nitish

Hi,
You can make the account group specific field status setting in OBD4.
And you can make the activity specific setting in OB26.
Then SAP will take the field status out of the two above based on highest priority. The priorities are (starting with the highest):
- Hide
- Display
- Required entry
- Optional entry
Fields which are accessed with the transaction master record display are always either displayed or hidden, since you cannot make an entry in a "display" transaction.
If you do not want to use the transaction-specific control, set the field status for all fields to optional. Since this field status has the lowest priority, the account group-specific control is always used.
Regards,
Gaurav

Restricting Administrators from Changing Learner Groups

Similar Messages

Maybe you are looking for