Restricting an administrator to only adding or removing Business Roles

Hi:
Is there an out of the box rule or form in IDM that can restrict an administrator to only adding or removing business roles from accounts?
Thanks.

Hi Dwayne,
This BU ruling is somewhat of a newer function with OIA. For mass alteration, the old-school way would be to execute a SQL script directly towards the DB.
Simply change the last line on what correlation you wish (in this situation, it's looking at the BU Name and the GU office name)
delete from BU_GLOBALUSERS where businessunitkey > 0;
insert into BU_GLOBALUSERS(BusinessUnitKey,GlobalUserKey)
select BU.BusinessUnitKey, GU.GlobalUserKey from BUSINESSUNITS BU, GLOBALUSERS GU
where BU.BusinessUnitName = GU.officename;
Regards,
Daniel Redfern
Technicalconfessions.com

Similar Messages

  • Collect signatures workflow - Signatures can't be added or removed because this document was opened read-only

    Hi, I have configured a "Collect Signatures" workflow for test Word document(.docx), then uploaded it to sample SP 2010 doc library  (content type "Document").  This Word document has 2 empty Signature Lines in it.
    After that i'm starting the Collect Signatures workflow on it , which is assigned to me and other user from my Active Directory. 
    Workflow is started and after that i'm receiving mail about assigned task which also contains link to document.
    When i click on link it opens IE which contains SP library file path, after a while doc is opened in Word client in Read-only mode. When i want to sign the document info window pops up : "Signatures can't be added or removed because this document was opened
    read-only" and i'm not able to compete task/sign doc from Word.
    It is possible to sign the document when i go to SP library and opens this file directly from there (file drop-down menu-> open in MS Word).
    I saw that this behaviour is similar to this article:
    http://social.msdn.microsoft.com/Forums/sharepoint/en-US/31ba43ec-b04e-428d-9a66-0cc571934197/collect-signatures-workflow-using-firefox-not-showing-workflow-task-this-document-requires-your?forum=sharepointgeneralprevious
    but i'm using IE so it shouldn't be Active X issue.
    I have also checked this MS Fix:
    http://support.microsoft.com/kb/2661910
    but changing CA settings to Permissive didn't help
    Any ideas ?

    Hi bezcisnien,
    I could not reproduce this issue.
    When you open this file directly by clicking the document Name link from SharePoint library, is there a
    yellow message bar in Word document?
    Did this happen to all users on all PCs?
    Have you checked if it is a client side issue, test with different IE 8/9/10 versions for this issue (and IE compatibility mode, add-ons, trusted site zone etc)?
    Thanks,
    Daniel Yang
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Daniel Yang
    TechNet Community Support

  • The 10.4 upgrade smart playlist editing has removed the ellipse as the 3rd button option along side the adding or removing a parameter. Why? And can we get it back?

    I just did the iTunes update to 10.4 (80) from 10.3 on a MacPro OS X 10.6.8 . I am extremely nervous and saddened by a subtle change to the smart playlist editing features. I have 178.26gb of music, and a very extensive array of playlists and smart playlists taking full advantage of all the wonderful features and complexity someone has taken the time to develop. I have taken years of time developing my library, and this one little change will set me back substantially. The change? Removing the ellipse as the 3rd button option along side the adding or removing a parameter. The button allowed one to  create levels or groups of parameters within the dialogue window that could act independently within one smart playlist. For example, songs from artist "A" needs at least 2 stars to be included, while songs from artist "B" need three stars, and they both can be in the same smart playlist which has its first level of complexity. I have lists that go dozens of layers beyond. And dozens more that cross reference. Is there any way we can get the hierarchy back, ie. Reintroduce the ellipse button? Or is there something new I do not know about? Thanks!

    I would like to second this.
    This subtle yet life-changing removal is a total loss for advanced users that (used to) take full advantage of "logical and hierarchical" playlists. It tremendously impairs the "smartness" of the feature, effectively removing the possibility of mixing "and" & "if" parameters—which was the real beauty of the whole concept of "smart playlists" à la iTunes.
    Here's a simple example. I would like to create a playlist combining two genres (rock and electronic) with only songs that have a rating higher than 3. I cannot do that anymore. I need to create two playlists:
    a first playlist (A) that displays [Rock] OR [Electronic] (note that this playlist will never be played, it's an intermediary step required for B)
    then a second playlist (B) that displays [songs from playlist "A"] AND [with a rating higher than 3].
    It's a pain. And it clutters up browsing lists on my iPad/iPhone a lot.
    Smart playlists should get the ellipse button back!
    Moreover, the possibility of creating / editing smart playlists on iOS via a nice menu would be just… awesome. I would have thought Apple was going in that "smart" direction with iTunes. In hoping it's just a delay… until iOS 5 maybe?

  • Dynamically adding and removing managed servers

    Hi,
              I'm experimenting with adding and removing managed servers while applications are running on the cluster. I've written some scripts using weblogic.Admin to do the tasks. It seems that it's working. However, I'd like to confirm that this is supported. I also have the following questions:
              1. Applications running on a cluster are automatically deployed to the newly configured managed server once it is started using startManagedWebLogic.sh. Are there any non-error situations that applications are not started automatically?
              2. To remove a managed server from the cluster, I first shutdown the server gracefully and then delete the server from the domain using weblogic.Admin. Is this the recommended way to do it?
              3. Anything else I need to pay attention to before adding and removing servers?
              Thanks for any information and pointers.
              Ming

    1. only if the staging mode is external.
              2. yes, if the server should be permanently removed. If the server is down for short maintenance, you do not need to remove it from the cluster.
              3. yes, try to avoid doing this during deployment tasks. That can be nasty.
              - Anders M.

  • I have a MBP retina display, early 2013, 512GB SSD storage& I want to upgrade it into a 768GB SSD storage, would that be possible WITHOUT replacing my current storage disks with the new 768GB ?keeping the 512GB&only adding a 256 GB disk?! please advise (:

    I have a MBP retina display, early 2013, 512GB SSD storage& I want to upgrade it into a 768GB SSD storage, would that be possible WITHOUT replacing my current storage disks with the new 768GB ?keeping the 512GB&only adding a 256 GB disk?! please advise (:

    The main error in this position is thinking ANY sized SSD can be "storage"
    Any Macbook SSD should be idealized as a working platform computer system, containing all your applications, documents, and weekly-use necessary files; and all media files such as ‘big-data’ (music/PDF collections/video/pictures), unless directly needed in the near future, should be kept off the computer and on external storage USB or likewise bare hard drives.
    You cant do what you want without removing the internal SSD
    Officially, it is not possible for an end user to upgrade the storage in any Retina Display MacBook Pro model after purchase
    Get a nice 1TB USB external HD for $65 

  • Restricting Multiple Users To Only Their Specific Areas Of A Site

    I think I understand the basics of user authentication and
    password protection for areas of a site using PHP/MySQL, etc. Maybe
    I don't however.
    My question is: If I have 10 users how do I restrict each
    user to only their specific pages in the site so that they can only
    see their specific pages and not every protected page?
    See, maybe I don't understand, but any help would be
    appreciated. Thanks in advance.
    Glenn Atkins

    Can you password-protect individual folders, each containing
    only a single
    user's pages?
    "GEAtkins" <[email protected]> wrote in
    message
    news:fj4gel$1sh$[email protected]..
    >I think I understand the basics of user authentication
    and password
    >protection
    > for areas of a site using PHP/MySQL, etc. Maybe I don't
    however.
    >
    > My question is: If I have 10 users how do I restrict
    each user to only
    > their
    > specific pages in the site so that they can only see
    their specific pages
    > and
    > not every protected page?
    >
    > See, maybe I don't understand, but any help would be
    appreciated. Thanks
    > in
    > advance.
    >
    > Glenn Atkins
    >

  • How can I restrict options result to only one cost center?

    In transaction KS03 (Display cost Center), when I search for a cost center (hit F4), I have an option to drill down by Company code, controlling area, Cost Center Category, Person Responsible etc.
    My question is, how can I restrict users to select only controlling area they are authorized for ? Is there any authorization object I can use to restrict user's access to particular value in the table CSKS ?
    Thanks,
    Karan.

    Hi Karan,
    If you want to restrict on the values users can return when using F4 lookup then there may be some useful info in the following link:
    Authorization object for capacity planning CM03

  • I have a new 16g nano and I have only added about 600 songs and I only have less than a gig left of space.  It says I have used over 9G of other.  I have no movies, pictures, tv shows or anything else on it.  How do I find out what the "other" is?

    I have a new 16g nano.  I have only added about 600 songs so far.  It is telling me that I 4.47G of songs and 9.92G of other and only 3.297MB of space left.  I have no tvshows, no movies, no pictures on the Ipod.  How do I find out what the "other" is and get rid of it? 

    You most likely have some corrupted files in other. Restore it and resync.

  • HT4191 how do I not sync notes with my email? I have a business email on my iphone as well as his iphone. Now all of my notes are on his phone, and all of his notes are gone. We have never adjusted any settings, I only added the shared email account to hi

    How do I not sync notes with my email? I have a business email on my iphone as well as my husbands iphone. Now all of my notes are on his phone, and all of his notes he previously has on his iphone are gone. We have never adjusted any settings or hooked it up to itunes, I only added the shared email account to his phone. Help???

    Hi StoneLeadyFarms,
    Thanks for visiting Apple Support Communities.
    It sounds like notes on your devices may have synced when the email account was added, as described here:
    iOS: Syncing Notes
    http://support.apple.com/kb/HT4191
    Notes are associated with an IMAP email account or iCloud account. To sync Notes, enable Notes for each account in Settings > Mail, Contacts, Calendars or Settings > iCloud.
    You can stop syncing notes by tapping Settings > Mail, Contacts, Calendars or Settings > iCloud, tapping the email address that you added, and switching Notes to the off position.
    Additionally, if your husband has backed up his iPhone to iTunes or iCloud, the steps in this article can help with recovering the lost notes from his device:
    iOS: Back up and restore your iOS device with iCloud or iTunes
    http://support.apple.com/kb/HT1766
    Best Regards,
    Jeremy

  • Best practice for adding and removing eventListeners?

    Hi,
    What is the best practice in regards to CPU usage and performance for dealing with eventListeners when adding and removing movieclips to the stage?
    1. Add the eventListeners when the mc is instantiated and leave them be until exiting the app
    or
    2. Add and remove the eventListeners as the mc is added or removed from the stage (via an addedToStage and removedFromStage listener method)
    I would appreciate any thoughts you could share with me. Thanks!
    JP

    Thanks neh and Applauz78.
    As I understand it, the main concern with removing listeners is to conserve memory. However, I've tested memory use and this is not really an issue for my app, so I'm more concerned if there will be any effect on CPU (app response) if I'm constantly adding and removing a list of listeners every time a user loads an mc to the stage, as compared to just leaving them active and "ready to go" when needed.
    Is there any way to measure CPU use for an AIR app on iOS?
    (It may help to know my app is small - I'm talking well under 100 active listeners total for all movieclips combined.)

  • Purchased MacBook Air...I am administrator and only user.  Forgot the admin ID and password.  Would like to start over and reboot

    JJust purchased a MacBook Air.
    i Am the administrator and only user.    It somehow lost the Admin ID and password... Hint does not work. 
    would ould like to to reset everything or just reboot and start the registration and setup from the beginning.  No saved items so nothing would be lost in a total reboot
    what is the best option please.  Migrating from a PC so everything is a bit confusing

    i know how to reset it....
    check this... http://www.tomsguide.com/faq/id-2330386/restore-macbook-air-factory-settings.htm l
    i have done it two time well it will ask you to download OS X again..
    Aayush

  • Restrict people to see only spool requests from one group of users

    I would like to restrict people to see only spool requests from one group of users defined somewhere inside role.
    I am playing with S_SPO_ACT authorisation object but with no positive result,
    Please help

    There is a note  Note 119147 - Spool: Authorizations (https://service.sap.com/sap/support/notes/119147)
    Object for "Selection authorization for spool requests" is S_ADMI_FC where "Operation authorization" use S_SPO_ACT
    Regards

  • Adding and removing plug-in - Gets dirty Catalog?

    Trying many plug-in, adding and removing it, could be a problem with the file Catalog?
    The removed plug-in leaves traces on catalog? E.g.: a bites growed catalog....
    Thanks

    Rob,
    What about your ExifMeta plug-in?
    How it works with the catalog?
    Is there a catalog working difference between ExifMeta and DevMeta plug-in?
    Thanks

  • Will Adobe be adding spot removal, adjustment brush and grad filter tools to lightroom mobile?

    will adobe be adding spot removal, adjustment brush and grad filter tools to lightroom mobile?will adobe be adding spot removal, adjustment brush and grad filter tools to lightroom mobile?

    We don't know (and anybody who knows can't say). It's an unanswerable question...

  • TS4079 Siri used to work fine when making mobile calls in Ecuador until yesterday, when the administration of Ecuador added an aditional number in all mobile numbers existing in Ecuador. Since then Siri is unable to make any mobile calls with any new numb

    Siri used to work fine when making mobile calls in Ecuador until yesterday, when the administration of Ecuador added an aditional number in all mobile numbers existing in Ecuador. Since then Siri is unable to make any mobile calls with any new number.Help
    I`ve tried restarting, rebooting, nothing works.
    The interesting thing is that SIRI can call to previous mobile numbers (without the new digit) obviously not connecting , and, can call to any other numbers as an office or home number. So the problem is the new digit in the mobile number

    Ecuador has added an extra digit to mobile phone numbers but apple wont accept 10 digit phone numbers so we cant use facetime or apple IM or verify our new phone numbers. ( and Siri won't work either!) I have contacted apple support online but can't request a call back as the apple system says our new phone numbers are invalid. I am going to phone them tomorrow and you should complain too at http://www.apple.com/support/contact/.  . The more people that bring this to their attention the faster it will get fixed

Maybe you are looking for