Restricting Users in 'Search Users' List while request creation.

Hi All,
We are working on OIM Version : 11.1.1.5.7
When a requester wants to raise any request for provisioning resource, he selects a request template and then he selects the user to whom he want to provision the resource.
Also, We have an user attribute "Company" with four possible values.
Now acc to requirement,during request creation the requester should only be able to see list of those users who belongs to his company only.
How can this be achieved?
Please help..
Thanks & Regards,
Aparna

Ashan,
Except 'Users' search all other option in search can be restricted by use of Book.
Currently we do not have option of searching Users by book.
Please register enhancement request.
Santosh

Similar Messages

Restricting users from Creating Request in OBIEE

Hi,
I want to restrict users fron creating request, in the Manage Priviledge section i was not able to find the where i could restrict the user from *"Creating Request"*, so is it possible to restrict users fron creating request if yes from where.
Regards,
Amit

look for "Access to Answers" under Access in Manage Privileges. That is where you restrict access to creating requests.
- Mahesh

How to restrict the the oreder reason list while creating sales order

Hi gurus,
Can anyone suggest me
how to restrict the Order rerson list
while creating the sales order in VA01
Thanks & Regards
kalyan.

hi,
Try this exit:
Enhancement MMFAB001 User exit for generation of release order
Thanks,
AMS

GRC 10 Not able to search roles in Access Request Creation

Hello Experts,
I am unable to search for roles while creating access request by giving system name.
I am able to search with any other search criteria except system.
When I look for valid entries for System I get the following connector group values:
ECC - (Custom Connector Group)
SAP_BAS_LG
SAP_ECC_LG
SAP_HR_LG
SAP_R3_LG
All the above connector groups are pointing to the same system XXXCLNT100. I want to get only ECC as the result when I search for the system (Probably then it might work right).
Others that start with SAP are linked to the XXXCLNT100 for generating rules after activating BC Sets.
Any ideas how to get this work !!
Thanks and Regards,
Ajesh Raju.

Found Note:
Note 1654033 - Role search by System is giving same result
Regards,
Ajesh.

GRC 10.0: Access Request Creation - LDAP user advanced search not working

Dear Experts,
We are implementing SAP GRC Access Control and we have an issue in Access Request Creation. If we put the user name in “User” field and press intro, the user details are updated, but if we want to make an "Advanced search" the user is not found and the application give us the following message: “No records found for the search criteria entered.”
Scenario 1: If we put the user name in “User” field and press intro, the user details are updated:
Scenario 2: If we want to make an "Advanced search" the user is not found and the application give us the following message: “No records found for the search criteria entered.”
We are using the Active Directory as Data Source.
Thanks and Regards.

Hi Jose,
Try maintaning the parameter 2050 as YES and check once.
Kindly, also make refer to the below list of SAP notes:
1757906 - GRC 10.0 - LDAP user search does not work in NWBC
1745370 - LDAP search in GRC does not work anonymously
1718242- UAM: User search not working in Access Request.
Regards,
Neeraj Agarwal

How to restrict user at selection screen while executing in background mode

hi all,
how to restrict user at selection screen while executing in background mode
Regards
Deepak

Hi,
We can get the Program whether this is running in background or not then we need to use SY-BATCH, if the SY-BATCH is set to X then the program is running in Background,
so in the INITIALIZATION event, you can use this SY-BATCH and check the User names, and give the error messsage which you want to restrict
Regards
Sudheer

Disable the Advanced tab at user level while scheduling concurrent requests

How can I disable the Advanced option at user level while scheduling concurrent requests ?
In the Schedule Form you have:
Run the Job...
- AS soon as Possible
- Once
- Periodically
- On Specific Days
- Advanced
Thank you.
Edited by: user635184 on Jan 27, 2012 1:49 AM

Hi,
The steps are the same except that you need to do the personalization at the responsibility level (ie Condition Tab> Context>Level should be set to 'Responsibility')
You have to apply the personalization for all responsibilities(except Sys Admin) individually.
See the following Metalink notes for information on Form Personalization:
279034.1: Information About the Oracle Applications Form Personalization Feature in 11i
744069.1: Sample Testcase For Using Form Personalization In Oracle Applications
1266606.1: OM: Sample Codes For Form Personalization In Order Management
Regards,
Sujoy

Unable to find user list in Active Directory Authenticator

Hi all,
I am using weblogic 10.3 and want to configure ActiveDirectory Authenticator for my weblogic application. We have one managed srever under admin server . I have configured a Active Directory Authenticator named "ADAuthenticator" and made following changes as per the below values:
I set the control flag to "OPTIONAL" .
Security Realms-->myrealm-->Providers-->ADAuthenticator-->Provider Specific
UserName Attribute : ServiceBEA
Principal : ServiceBEA
Host : xxxxxx
User Search Scope : subtree
Group From Name Filter : (&(ServiceBEA=%g)(objectclass=group))
Credential : xxxxxx
Confirm Credential : xxxxxx
User From Name Filter : (&(ServiceBEA=%u)(objectclass=user))
Static Group Name Attribute : ServiceBEA
User Base DN : values provided as per requirement
Port : 389
User Object Class : user
Use Retrieved User Name as Principal : checked
Group Base DN : same values as per User Base DN
Static Group Object Class : group
Group Membership Searching : unlimited
Max Group Membership Search Level : 0
These are my AD settings. After doing this i click on save and then activate changes and then restarted the admin server.
But the problem is when i login to weblogic console to check the user list under "User and Group" i am unble to find any Active Directory users.
I don't know where i made the mistake. Can some make me out of this trouble.
Any help is highly appreciated.
Thanks in advance !

Hi Sean,
Actually we have already a Active Directory with username "ServiceBEA" in our windows server. So i used this "ServiceBEA" as UserName Attribute in weblogic console while creating a Active Directory Authenticator.
You mean to say that we should go for "sAMAccountName" or what? If that is the case then i have also tested with following values, but still no luck.
UserName Attribute : sAMAccountName
Principal : ServiceBEA
Host : xxxxxx
User Search Scope : subtree
Group From Name Filter : (&(sAMAccountName=%g)(objectclass=group))
Credential : xxxxxx
Confirm Credential : xxxxxx
User From Name Filter : (&(sAMAccountName=%u)(objectclass=user))
Static Group Name Attribute : sAMAccountName
User Base DN : values provided as per requirement
Port : 389
User Object Class : user
Use Retrieved User Name as Principal : checked
Group Base DN : same values as per User Base DN
Static Group Object Class : group
Group Membership Searching : unlimited
Max Group Membership Search Level : 0
Please advise what to be place in case of User Name Attribute.
Any help is highly appreciated.
Thanks in advance !

Restrict search access of Service requests based on service team

Hi,
We have the below requirement in our client to restrict the search of the service requests based on the service team.
Requirement
A user can only search / display the service requests which are assigned to his queue.(Partner Function --> Service team)
Can you please suggest if we have a standard authorization object by means of which we can achieve this.
Can you please help us on priority on this. Reward points would be awarded for helpful answers
Thanks,
Vamsi.

Hello Vamsi
I redefined the method EH_ONSEARCH_BTN of component BT116S_SRVO/ADVANCEDSP. Because i used this in service order. you can same method of Service request component.
Use can call method insert_selection_param of class cl_crm_bol_dquery_service
to set the SERVICE_ORG parameter with value of Employee's service org.
Regards
Naresh

Restricted users don't rejoin AirPort out of sleep

Since I set up my new Mac, I've had a problem with Airport and security settings. If I come out of sleep if logged on as an admin user, the Mac joins my Airport network. If I come out as a restricted user (a kid), it asks for an admin user and password.
The Network is set to "By default, join Preferred Networks" and I have only one preferred network. The network is there. There's no WEP or WPA or other password required. (I use MAC address filtering). It happens whether or not the Options are set to "Require administrator password to [ ] Change wireless networks."
This has been a problem since the first time I setup the users. The article below claims it's a problem with old releases but I have the latest release.
I've been a Mac users for 20 years and an OS X user for 3. Any ideas?
http://docs.info.apple.com/article.html?artnum=301530
Mac OS X 10.4: AirPort may not rejoin network on wake or restart
Symptom
Some computers, after upgrading to Mac OS X Tiger 10.4, may no longer automatically join a wireless network after waking from sleep or restarting.
iMac G5 Mac OS X (10.4.8)

On the screen where you are being asked for the password, click the triangle by Details and note down what the requested right is. From here, use an application such as TextWrangler to open the /private/etc/authorization file, search for instances of that right, and if possible, modify the file so that non-admin users have that specific right. If you're not sure what to do, post back with the requested right for instructions. General information about the setup is available in another thread.
(19497)

Retrieving ALL values from a single restricted user property

How can I retrieve ALL values of a single restricted user property from within
a .jpf file?
I want to display a dropdown list within a form in a JSP which should contain
all the locations listed in the property 'locations'. I ever get just the default
value when I access the property via
ProfileWrapper pw = userprofile.getProfileForUser(user);
Object prop = pw.getProperty("ClockSetup", "Locations");

Well, the code you've got will retrieve the single value of the property
for the current user. You're getting the default value because the
current user doesn't have Locations property set, so the ProfileWrapper
returns the default value from the property set.
I assume you want to get the list of available values that you entered
into the .usr file in Workshop. If so, I've attached a
SetColorController.jpf, index.jsp, and GeneralInfo.usr (put in
META-INF/data/userprofiles) I wrote for an example that does just this.
It uses the PropertySetManagerControl to retrieve the restricted values
for a property, and the jsp uses data-binding to create a list from that
pageflow method.
For a just-jsps solution, you can also use the
<ps:getRestrictedPropertyValues/> tag. I've attached a setcolor-tags.jsp
that does the same thing.
Greg
Dirk wrote:
How can I retrieve ALL values of a single restricted user property from within
a .jpf file?
I want to display a dropdown list within a form in a JSP which should contain
all the locations listed in the property 'locations'. I ever get just the default
value when I access the property via
ProfileWrapper pw = userprofile.getProfileForUser(user);
Object prop = pw.getProperty("ClockSetup", "Locations");
[att1.html]
package users.setcolor;
import com.bea.p13n.controls.exceptions.P13nControlException;
import com.bea.p13n.property.PropertyDefinition;
import com.bea.p13n.property.PropertySet;
import com.bea.p13n.usermgmt.profile.ProfileWrapper;
import com.bea.wlw.netui.pageflow.FormData;
import com.bea.wlw.netui.pageflow.Forward;
import com.bea.wlw.netui.pageflow.PageFlowController;
import java.util.Collection;
import java.util.Iterator;
* @jpf:controller
* @jpf:view-properties view-properties::
* 
* <view-properties>
* <pageflow-object id="pageflow:/users/setcolor/SetColorController.jpf"/>
* <pageflow-object id="action:begin.do">
* <property value="80" name="x"/>
* <property value="100" name="y"/>
* </pageflow-object>
* <pageflow-object id="action:setColor.do#users.setcolor.SetColorController.ColorFormBean">
* <property value="240" name="x"/>
* <property value="220" name="y"/>
* </pageflow-object>
* <pageflow-object id="action-call:@page:index.jsp@#@action:setColor.do#users.setcolor.SetColorController.ColorFormBean@">
* <property value="240,240,240,240" name="elbowsX"/>
* <property value="144,160,160,176" name="elbowsY"/>
* <property value="South_1" name="fromPort"/>
* <property value="North_1" name="toPort"/>
* </pageflow-object>
* <pageflow-object id="page:index.jsp">
* <property value="240" name="x"/>
* <property value="100" name="y"/>
* </pageflow-object>
* <pageflow-object id="forward:path#success#index.jsp#@action:begin.do@">
* <property value="116,160,160,204" name="elbowsX"/>
* <property value="92,92,92,92" name="elbowsY"/>
* <property value="East_1" name="fromPort"/>
* <property value="West_1" name="toPort"/>
* <property value="success" name="label"/>
* </pageflow-object>
* <pageflow-object id="forward:path#success#begin.do#@action:setColor.do#users.setcolor.SetColorController.ColorFormBean@">
* <property value="204,160,160,116" name="elbowsX"/>
* <property value="201,201,103,103" name="elbowsY"/>
* <property value="West_0" name="fromPort"/>
* <property value="East_2" name="toPort"/>
* <property value="success" name="label"/>
* </pageflow-object>
* <pageflow-object id="control:com.bea.p13n.controls.ejb.property.PropertySetManager#propSetMgr">
* <property value="31" name="x"/>
* <property value="34" name="y"/>
* </pageflow-object>
* <pageflow-object id="control:com.bea.p13n.controls.profile.UserProfileControl#profileControl">
* <property value="37" name="x"/>
* <property value="34" name="y"/>
* </pageflow-object>
* <pageflow-object id="formbeanprop:users.setcolor.SetColorController.ColorFormBean#color#java.lang.String"/>
* <pageflow-object id="formbean:users.setcolor.SetColorController.ColorFormBean"/>
* </view-properties>
public class SetColorController extends PageFlowController
* @common:control
private com.bea.p13n.controls.ejb.property.PropertySetManager propSetMgr;
* @common:control
private com.bea.p13n.controls.profile.UserProfileControl profileControl;
/** Cached possible colors from the User Profile Property Set definition.
private String[] possibleColors = null;
/** Get the possible colors, based upon the User Profile Property Set.
public String[] getPossibleColors()
if (possibleColors != null)
return possibleColors;
try
PropertySet ps = propSetMgr.getPropertySet("USER", "GeneralInfo");
PropertyDefinition pd = ps.getPropertyDefinition("FavoriteColor");
Collection l = pd.getRestrictedValues();
String[] s = new String[l.size()];
Iterator it = l.iterator();
for (int i = 0; it.hasNext(); i++)
s[i] = it.next().toString();
possibleColors = s;
catch (P13nControlException ex)
ex.printStackTrace();
possibleColors = new String[0];
return possibleColors;
/** Get the user's favorite color from their profile.
public String getUsersColor()
try
ProfileWrapper profile = profileControl.getProfileFromRequest(getRequest());
return profileControl.getProperty(profile, "GeneralInfo", "FavoriteColor").toString();
catch (P13nControlException ex)
ex.printStackTrace();
return null;
// Uncomment this declaration to access Global.app.
// protected global.Global globalApp;
// For an example of page flow exception handling see the example "catch" and "exception-handler"
// annotations in {project}/WEB-INF/src/global/Global.app
* This method represents the point of entry into the pageflow
* @jpf:action
* @jpf:forward name="success" path="index.jsp"
protected Forward begin()
return new Forward("success");
* @jpf:action
* @jpf:forward name="success" path="begin.do"
protected Forward setColor(ColorFormBean form)
// set the color in the user's profile
try
ProfileWrapper profile = profileControl.getProfileFromRequest(getRequest());
profileControl.setProperty(profile, "GeneralInfo", "FavoriteColor", form.getColor());
catch (P13nControlException ex)
ex.printStackTrace();
return new Forward("success");
* FormData get and set methods may be overwritten by the Form Bean editor.
public static class ColorFormBean extends FormData
private String color;
public void setColor(String color)
this.color = color;
public String getColor()
return this.color;
[GeneralInfo.usr]
[att1.html]

Error while adding a 'Ext No' field to Activities Search Result List on UI

Hi Experts,
The requirement is to add a new display field u2018External Nou2019to the activities SEARCH Result list.
At the moment activities are displayed with start date, end date and category, now the user want to display External No as well.
The details for that
Target:
Component:BT126S_APPT
View:bt126s_Appt/ApptSR
Context Node:BTQRACT
New attribute 'EXTERN_ACT_ID' to be added to the context node.
Source: component: BT125H_TASK
View: BT125H_TASK/TaskDetailsOV
ContextNode:BTACTIVITYH
Attribute:Struct.Extern_Act_Id
BOL Relation:
BOL ENTITY: BTQRAct
BOL Attribute: BTADVSAct -> BTOrderHeader -> BTHeaderActivityExt/EXTERN_ACT_ID
When i tried to added the attribute to the context node BTQRACT, it gave me the error 'method CL_BT126S_A_APPTSR_CTXT CREATE_BTQRACT DOES NOT EXIST.
please give me some inputs.
Regards
Krishna

Hi steve,
Still my issue was not resolved, could you help me to find the exact error.I have enhanced the component, view and context node, still i couldn't able to add attributes to the context node BTQRACT.I tried to add several fields, but it is giving the same error 'METHOD CL_BT126S_A_APPTSR_CTXT' CREATE_BTQRACT DOES NOT EXIST'. I have checked the OSS messages and found 2 relavant to this component. I have implemented both the Sap Notes 1363752, 1226612. Still after implementing the OSS note, i am getting the same error.My guess is one of the method is missing. Please help me out?
Regards
Krishna

How to find out the user list that created by someone?

Hi all:
Now I want to develop a program that can find out the user list created by someone.
such as :
John create 3 user in SAP ,they are u1,u2,u3.
Susan create 2 user in SAP , they are s1,s2.
I input the the parameter such as John , the program can give me the list :u1,u2,u3.
Could you tell me which table should I use in this program?
Thanks .
Elisa.

Hi Ling,
As per my understanding, you are looking for listing down the number of Users created by a particular users of the System. Like a System Administrator has created some 30 users. If this is correct, then you can use the table
USR02 - Logon Data (Kernel-Side Use). This table has 2 fields which are of importance - BNAME - User Name in User Master Record & ANAME - Creator of the User Master Record. You can query the ANAME with the username of the system and you will get the resultant users.
But I would reccomend to search the Table for a standard class, function module or RFC or BAPI so that you can reuse the same and need not to develop from the scratch.
Hope this will help.
Thanks,
Samantak.

Sorting of user list in 'ACT AS' by displayname -OBIEE 11G

Hi,
I have configured 'ACT AS' successfuly in obiee 11g . We have written the following query to populate user name and displayname in the act as drop down .
<getValues>EXECUTE PHYSICAL CONNECTION POOL DAA2.DAA2 select USERNAME, DISPLAYNAME from SIEBEL_USERS </getValues>
With this query the list is getting ssorted by USERNAME .
However, our client expects the user list to be populated in the ascending order of the DISPLAYNAME.
I tried modifying the above query as below in the xml file to implement the same .
<getValues>EXECUTE PHYSICAL CONNECTION POOL DAA2.DAA2 select USERNAME, DISPLAYNAME from SIEBEL_USERS Order by 2 desc </getValues>
But the liste is still getting sorted by USERNAME. Could anyone give some pointers to achieve this requirement ?
Regards,
Karan
Edited by: kchadha2 on Sep 12, 2011 7:21 PM

Thanks Veeravalli, I did exactly the same. Editing the registry didn't help so I deleted the service from registry and create it again and before that added the following in my installSVC file in the section you mentioned
set JAVA_VM=-server
set MEM_ARGS==-Xms1024m -Xmx1024m -XX:MaxPermSize=2048m -XX:-UseSSE42Intrinsics
But it is still not working, I am getting the same error but now it says
[Tue Dec 11 07:38:45 2012] [RunJavaApp] Loading class - =-Xms1024m
java.lang.NoClassDefFoundError: =-Xms1024m
Caused by: java.lang.ClassNotFoundException: =-Xms1024m
     at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
     at java.security.AccessController.doPrivileged(Native Method)
     at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
     at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
one of the things I didn't mention though was that when I create the service, I run the installAdmServer_Service.cmd file as "Run as Administrator", only then the service gets installed. Can this be related to the fact that this windows service needs to be run under admin account? or Run as Administrator? I am guessing because I tried various heap sizes and also edited my setDomainEnv.cmd and commEnv.cmd file to use 1024 as heap size it but still didn't work and it is failing may be while loading the class? If that is the case then how to run this services as administrator? Am I missing anything else?
Thanks,
Ronny

How to restrict users from printing documents and exporting to local file

Hi SAP gurus,
I have two questions.
1. How can I restrict users from printing a document? i.e. billdoc? I would like to know if I could block it though authorization. If yes, what auth obj to use?
2. How to restrict certain users from exporting to local file? the System> List>Save-->Local File. I have tried restricting it using auth object S_GUI but it seems it is only applicable to older versions of SAP. im on ecc6.
Thank you in advance.

Hi,
Check this:
Create your own gui status and attach it to the list in the event START-OF-SELECTION.
In the menu painter extra -> adjust template.
Make it a list status and you will see all the standard list options appear including list->download
Deactivate the ones you don't want.
If you just want to prevent users from downloading the list you can achieve this with authorization object S_GUI, activity 61. Menu option will still be there though.
Please note that if you remove authorisation for S_GUI activity 61 then all downloads will not be possible.
If you just want to disable downloads only for a particular report, you can try this test program:
Code:
REPORT ztest.
DATA: PROGNAME LIKE SY-CPROG value 'Z_CHECK_AUTH',
        FORMNAME LIKE SY-XFORM value 'F_CHECK_AUTH'.
START-OF-SELECTION.
    CALL FUNCTION 'SET_DOWNLOAD_AUTHORITY'
         EXPORTING
              FORM    = FORMNAME
              PROG    = PROGNAME
         EXCEPTIONS
              OTHERS = 1.
WRITE: / 'TEST'.
You also need this:
Code:
PROGRAM z_check_auth.
FORM f_check_auth USING pe_result TYPE i.
pe_result = 5.
ENDFORM.
Also have a look at the exit SGRPDL00.
Hope this helps you.
Rgds,
Raghu

Restricting Users in 'Search Users' List while request creation.

Similar Messages

Maybe you are looking for