Retrying provisioning Task error in OIM11g

Hi to all.
I'm facing a strange issue when trying to retry a provisioning task. In particular, I have connected the OIM11g to an UNIX Server. When the provisioning task is rejected (I'm trying to provision an already provisioned user login, causing SSH_USER_USEREXISTS_FAIL error), the provisioning task goes correctly in "Rejected" status. With the same user that tries to finalize the privisioning, I try to "Retry the provisioning task". But this retry fails. It says me: "Unable to retry task", and the OIM log says "<XELLERATE.APIS> <BEA-000000> <The logged in user does not have permissions to perform this operation>". But the user is the same that I used to finalize the provisioning task.
Could anyone help me? I've already tried to assign the user all the privileges to complete the retry of the task but this did not solved my issue.
Thank you all in advance.
Regards,
Giuseppe.

Hi All,
I have the same requirement so I created a custom role and addded the above Data Object permissions for the role. In the organization I had added the custom role in Administrative role list with write access but still I am getting error saying 'Logged In user does not have permissions'. Added all the permissions present in Data Object Permissions for this role but still I am getting the same error. When I add the system Administrator role as super role to my custom role then the user who belongs to the custom role is able to retry the task but I cant give this permission to this role. So please suggest me if I miss anything.
Thanks,
Rajesh

Similar Messages

  • Manual Provisioning task throwing error

    In OIM 10g we have a manual provisioning task which is assigned to an user. when he tries to click Set Response he is getting 'UNKNOWN' also as one of the options with the other two options 'Complete' and 'Cancel'. Also when trying to Complete the provisioning process it throws an error as
    DOBJ.SCHTM_SCH_DATA_CHANGED
    Schedule data cannot be changed once it has been set.
    Please let me know what might be the cause. Thanks
    Regards,
    Durgaprasad

    Hi Kevin,
    Thanks for your reply. I dont have a process task adapter attached to this task. I have a task assignment adapter only. Also i dont have any clue why 'UNKNOWN' option is getting displayed in the set response page.
    Regards,
    Durgaprasad

  • How do you complete or re-attempt failed provisioning tasks

    Hi All,
    If a modify operation has been perfomed, and subsequent provisioning tasks failed, is there a way to get IdM to go back and attempt to complete the failed task and remaining tasks.
    For example, when the MX_VALIDTO attribute changes we call an event task to determine if MX_DISABLED should be set or not. This task is a generic pass which executes some logic which evaluates other attributes. This step failed because we caused an error to be raised due to an unexpected value in one of those other attributes.
    We have now modified the logic in the script and want to 're-provision' the failed task without triggering a new change on the identity.
    I know about the uRetryPrivilegeAdd and uRetryPrivilegeRemove internal functions, but it seems as if these only deal with cases where privilege assignment had failed. Is there something similar that will reconcile and clean up failed task heirarchies where it is just attribute / entry modifications rather than privilege assignments.
    Regards
    Paul

    Hi Paul,
    Hope all is going well with your project, the two bits of code you need for this are:
    Find all the failed privileges for an Identity
    var sql = "SELECT MSKEY,aValue,provstatus FROM MXPV_Priv_AddStatus WHERE (MSKEY = " +V_MSKEY +" and (ProvStatus = 1001 or ProvStatus = 1101))";
    sqlresult = uSelect(sql);
    This will give you a load of pairs of failed MSKEY - identity and aValue - privilege, which you need to split into strings via an array and then into values, and you can then retry using
    retry = uRetryPrivilegeAdd(provmskey,provavalue);
    I've put the full code on http://sap-idm.blogspot.com/2011/01/retrying-failed-provisioning-tasks-in.html in case you need more information.
    Good luck,
    Ian Daniel

  • OIM provisioning in bulk causes several provisioning tasks to be listed as

    OIM 9102 Provisioning in bulk causes several provisioning tasks to be listed as "provisioning in queue" We are using offline provisioning as we had some issues running without it.
    If i bring in via trusted resource, 10 or so users, the first 5 or 6 work fine, and then 1 or 2 will show some of their resources as provisioning in queue. It looks like it didn't get around to running those as I don't see errors in the log(debug on everything) if I open and save the form, they provision immediately with no trouble. I'm just trying to figure out what the hold up is, and is there a way to have it automatically retry when this happens?
    Any help would be great.

    also each one this happens to is a different resource. on a different user. and each is stuck and system validation.

  • GOOGLE APPS PROVISIONING TASKS FAILS.

    Hi all,
    We are using custom connector for googleapps.While am provsioning to googleapps some of the tasks are getting rejected like "create user" task. Also while trying to update first name ,lastname ,"firstname updated","lastname updated" tasks are being rejected. This is not always happening ,only sometimes it is getting rejected.when am trying to RETRY the task then it is being completed successfully.What i found in the resource history is :
    Error Details
    Setting task status... "com/google/gdata/data/appsforyourdomain/provisioning/UserEntry" does not correspond to a known Response Code. Using "UNKNOWN".
    I am unable to trace the logs as it is not even triggering the java code in the adaptor.Is it like it is unable to find the dependent jars like appsforyourdomainclient jar,g-data-appsforyourdomain etc jars which are placed in domain home lib folder.for ex:/orasw/oracle/middleware/user_projects/domains/base_domain/lib location. If needed,i can provide the code also.
    We are in UAT AND THIS  IS A SHOW STOPPER FOR US TO GO TO PRODUCTION. SO PLEASE HELPME OUT.
    How can i resolve this?
    THANKS

    Is there anything more complete?
    as much as I love his (Ray Camden's) work, this cfc was last updated in 2008 and is "read only" on the google contacts api...
    I need to find something that create contact groups and modify existing groups... Read Only isn't going to cut it for my purposes..
    Thanks for the quick response though, it brought me to one that I hadn't found yet (even if it was incomplete, it was one I hadn't seen before)

  • How to retry provisioning for pending values ?

    Hi,
    Our environment is IDM 7.2 SP7.
    And we have couple of users whose master privilege (PRIV:ADLDS:ONLY) is in pending state for quite a long time.
    I could filter those entries using mcExecState=512 in idmv_link_ext. It looks to me the reason for pending state is it's referring to some of the old notification tasks previously we had. Now those tasks are replaced by new one but i could see the old notification task is still under MX:Pending_Delete folder.
    I tried using some of the internal functions (uRetry_Privilege/uIs_PrivReconcile) but that doesn't seems to fix the problem. So is there anyother way available to clean up those  mcExecState=512 entries or retry provsioning with new tasks linked ?
    Thanks,
    Karthik

    Thanks for reverting back immediately.
    I executed the shared query and following are my observation
    select * from mxp_provision where msg like 'Wait for%'
    Output : No Result
    So there are no tasks with msg 'Wait for%' exist in our environment.
    1. Select * from mxp_provision where AuditRef=381162 (Considering 1 affected user flow)
    Output: Returned 3 rows (as the old provisioning task had 2 ordered task group and a Conditional task)
    Here It looks to me the provisioning flow is stuck at Conditional Task and MSG value is 'FALSE' so i tried to modify false branch in the condition and tried to make it 'skip entry' for completion but that doesn't seem to get triggered.
    2. Select * From Mxp_Audit Where AuditID=381162
    Output: 1 Row with ProvStatus as 1 (does ProvStatus=1 implies blocking here ?)
    Do you think executing below query will remove the blocking state and can get completed ?
    update mxp_audit set provstatus=1100 where auditid = 381162

  • No email notification from manual provisioning task - 11gR2

    I have a disconnected application instance and I am using the standard DisconnectedProvisioning flow for provisioning - modified to assign the provisioning task to a group, using a rule which determines the group via the app. instance name.
    The flow itself works as expected and the Manual Task in the flow is assigned to the correct group - the task shows up in the Inbox of the member of the group in the Self Service console
    I would like to send an email to the user when the task is assigned and I have therefore configured SMTP Notification according to this http://allidm.com/blog/2012/11/configuring-smtp-notifications-in-oracle-identity-manager-11gr2/
    I have confirmed that the SMTP server works as expected - I am able to send and receive message using this server.
    On the Notification Tab of my Manual Task I have configured:
    General:
    Status: Assign / Recipient: Assignees
    Status: Complete / Recipient: Initiator
    Status: Error / Recipient: Owner
    Advanced:
    Remind Once: 0 days, 0 hours, 1 minute "After Assignment"
    Encoding: UTF-8
    Make Notifications Secure: False
    Show worklist/workspace URL in notification: True
    Make notification actionable: True
    Send Task attachment: False
    Group Notification Configuration: "Send individual emails" 
    I have redeployed my DisconnectedProvisioning flow to my SOA server a couple of times - remembering not to change the version number and to force overwriting the existing flow.
    My SOA and IDM servers have been restarted as well.
    When requesting the disconnected application instance using the catalog, the manual provisioning task is assigned to the correct user - however - he does not receive any email nor do I send any errors or stack traces from my SOA or IDM servers.
    There must be some check box somewhere that I forgot to tick!
    Does anybody have an idea - did I forget to configure something?
    Kind regards,
    - Tom

    Ok - so I did in fact forget to tick a check box!
    After setting up UMS using this: http://docs.oracle.com/cd/E27559_01/admin.1112/e27149/notification.htm#CACCEDGF and enabling notifications via:
    Enterprise Manager, SOA, soa-infra, SOA Infrastructure drop-down, SOA Administration, Workflow Config:
    Notification Mode: Email
    After restarting my SOA and OIM managed servers - I now receive emails as expected.
    Case closed :-)
    Kind regards,
    - Tom

  • Task error report

    Is there a way to generate a report of task errors? I have a "Load from Resource" task that generated errors but I don't want to go through each of the 7000+ pages to find the ~230 errors.
    I have tried to create a new Task Report but it won't Save or Run.

    You might want to find the task and add a custom audit event on the task. If it's a default task you might be able to find it using audit log report.

  • File system task error ; Access to the path " " is denied

    HI All,
    I have created a simple package to copy xml files  from multiple source folders  to destination folder.
    Folder names and paths are stored in a sql table.  I use execute sql taks to get folder and path names. set the restult set to full result set in the execute sql task.
    Then for each loop is used to loop through each file name. File system taks is inside the for each loop. Destination vairable and source varable were created and assigned them inthe file system task.
    But I am getting an error message.
    [File System Task] Error: An error occurred with the following error message: "Access to the path '\\cor\Groups\DN\Share2\Servicing \RESPONSE_FILES\Services' is denied.".
    But I am able to do this if i design the package to move just one file. i.e without using variables. I get the error message only when I use variables.
    Can anyone tell me how to fix this please?
    Thanks
    shamen

    How to give the access please.
    Ramu Gade
    Login using a sysadmin account
    Go to the folder right click security and you've the option to add new account. You should give account write access if you want to copy files to folder.
    see
    http://technet.microsoft.com/en-in/library/bb456988.aspx
    Please Mark This As Answer if it solved your issue
    Please Vote This As Helpful if it helps to solve your issue
    Visakh
    My MSDN Page
    My Personal Blog
    My Facebook Page

  • Failed to load Execute Package Task error.

    Hello Experts,
    Excuse my newbie question.
    Execute Package Task: Error: The task has failed to load. The contact information for the task is "Microsoft Corporation; Microsoft SQL Server; Microsoft corporation; All Rights Reserved http://www.microsoft.com/sql/support/default.asp:1"
    We have a windows service running on our app server that deploys a package that executes other packages using execute package task. This package and rest of the packages are in the same folder at the same level under integration services
    catalog. The package fails to execute with the above said error.
    Execute package task is configured to run in 'in-process' mode. Changing delay validation to true/false in child packages didn't help.
    ironically if the package is deployed using a console application from the app server the package gets executed just fine. I checked permissions, everything seem fine.
    Is there anyway to get details of this error to understand the problem better? I am looking at reports > standard reports > all executions.
    Thanks.

    As it turns out, the 63bit ExecPackageTask.dll was not found under "C:\Program Files\Microsoft SQL Server\110\DTS\Binn". Installing "SQL Server Data Tools" installed only 32 bit version of the component under "C:\Program Files (x86)\Microsoft SQL
    Server\110\DTS\Binn".
    Is there a way to get 64bit version of this component without installing "Integration Services" (to avoid possible license issues)?
    Hi Jayakarthiks,
    To make use of the 64-bit ExecPackageTask.dll, you also need the 64-bit SSIS runtime and 64-bit DTExec utility tool. To obtain the 64-bit SSIS runtime and tools, you have to install the SQL Server Integration Services service from your SQL Server 2012 install
    media.
    Reference:
    http://msdn.microsoft.com/en-us/library/ms143731.aspx
    Regards,
    Mike Yin
    If you have any feedback on our support, please click here
    Mike Yin
    TechNet Community Support

  • Moving files to another directory got an error message [File System Task] Error: An error occurred with the following error message: "Could not find a part of the path.".

    Hi all,
    I am having a list of files in a folder named datafiles and I am processing them one by one when I finish each one I want to move the file into a folder archive.
    I am having a variable named filename and archivefilename and two fileconnections  one is originalfiles and archivefiles
    archivefilename=replace( @[User::filename],"datafiles","archive")
    orginalfiles connection is an expression =@user:filename
    archivefies connection is an expression=@user:archivefilename
    the filename comes from reading the folder that contains those files
    public void Main()
                string[] filenames;
                filenames = Directory.GetFiles(@"C:\luminis\datafiles\");
                Array.Sort(filenames);
                Dts.Variables["filelist"].Value = filenames;
                Dts.TaskResult = (int)ScriptResults.Success;
    The folder c:\luminis\archive\ exists
    why I am getting this error
    My filesystem task : destinationpathvariable =false
    destinationconnection:archivefile
    overwrite=true
    operation=movefile
    issourcepathvariable=false
    sourceconnection=original file
    why am i getting this error[File System Task] Error: An error occurred with the following error message: "Could not find a part of the path.".
    sohairzaki

    there may be 2 problem...
    1> specify a target directory only, not with the file name. 
    OR
    2> Try using the unc,path format \\computername\sharename\
    let us know your observation...
    Let us TRY this | Mail me
    My Blog :: http://quest4gen.blogspot.com/

  • Web Service Task Error

    Hi, After successfully testing connection to my source web service, while executing my web service task, I face the following error. Can anyone help me????
    [Web Service Task] Error: An error occurred with the following error message: "Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebserviceTaskException: Could not load the proxy for the specified Web service. The error is: Could not load file or assembly
    'iiglotg3.dll' or one of its dependencies. Access is denied..
       at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebMethodInvokerProxy.loadProxyInAppDomain()
       at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebMethodInvokerProxy.InvokeMethod(DTSWebMethodInfo methodInfo, String serviceName, Object connection)
       at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebServiceTaskUtil.Invoke(DTSWebMethodInfo methodInfo, String serviceName, Object connection, VariableDispenser taskVariableDispenser)
       at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebServiceTask.executeThread()".
    Regards,
    Njdeh Tahmasian

    Could not load file or assembly 'iiglotg3.dll' or one of its dependencies.
    Access is denied..
    Looks like a permission issue or maybe the assembly don't exists on the server where the package is running; you should check that first.
    Olaf Helper
    [ Blog] [ Xing] [ MVP]

  • [Execute SQL Task] Error: Executing the query failed with error: "The COMMIT TRANSACTION request has no corresponding BEGIN TRANSACTION."

    I have an package with source , data flow and destination to execute on begin and commit.
    in the below i have just used for questioning purpose with diagram removing my Data Flow task explaining my problem
    on execution, i get error as
    [Execute SQL Task] Error: Executing the query "COMMIT TRAN DimCompanyCode" failed with the following error: "The COMMIT TRANSACTION request has no corresponding BEGIN TRANSACTION.". Possible failure reasons: Problems with the query, "ResultSet"
    property not set correctly, parameters not set correctly, or connection not established correctly.
    as mentioned , i have checked the ResultSet, parameters , connection establish.. all are fine.
    Kindly advice on what has to be done.
    ShanmugaRaj

    To avoid this error, the RetainSameConnection property should set to 'True' for the Connection Manager - Application_DB.
    Narsimha

  • Execute SQL Task Error

    I am using the following query in Execute SQL Task
    SELECT CASE(SELECT COUNT(*) FROM STG_APJ_APIW_DETAILS
    WHERE source_filename = ?
    AND lTRIM(RTRIM([BILLING DATE])) <> '') WHEN 0 THEN (SELECT CONVERT(VARCHAR(8), GETDATE(), 112) AS [YYYYMMDD])
    ELSE
    (SELECT TOP 1 [BILLING DATE] FROM STG_APJ_APIW_DETAILS
    WHERE source_filename = ?
    AND lTRIM(RTRIM([BILLING DATE])) <> '')
    END
    In parameter Mapping i have created two parameters and in result set i choose my variable.
    Result set property is Single Row.
    Following is the error message i received,
    [Execute SQL Task] Error: Executing the query "SELECT CASE(SELECT COUNT(*) FROM STG_APJ_APIW_DETA..." failed with the following error: "Syntax error, permission violation, or other nonspecific error". Possible failure reasons: Problems
    with the query, "ResultSet" property not set correctly, parameters not set correctly, or connection not established correctly.
    Sarvan

    I cant see where you've named resultset. try like below to make sure resultset has the name used in resultset tab
    SELECT CASE(SELECT COUNT(*) FROM STG_APJ_APIW_DETAILS
    WHERE source_filename = ?
    AND lTRIM(RTRIM([BILLING DATE])) <> '') WHEN 0 THEN (SELECT CONVERT(VARCHAR(8), GETDATE(), 112))
    ELSE
    (SELECT TOP 1 [BILLING DATE] FROM STG_APJ_APIW_DETAILS
    WHERE source_filename = ?
    AND lTRIM(RTRIM([BILLING DATE])) <> '')
    END AS [Billing Date]
    Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

  • SSIS - Using Variables in Execute SQL Task Error

    The following query in my Execute SQL Task throws the following error when run - [Execute SQL Task] Error: Executing the query "SELECT @columnz = COALESCE(@columnz + ',[' + times..." failed with the following error: 
    "Must declare the scalar variable "@columnz".". Possible failure reasons: Problems with the query, 
    "ResultSet" property not set correctly, parameters not set correctly, or connection not established correctly.
    Query:
    drop table tmpNCPCNCDownstreamMaxUtilization3wks
    select node, max(utilization) as max_Utilization, DATE
    into tmpNCPCNCDownstreamMaxUtilization3wks
    from stage_ncpcncdownstream_temporal
    WHERE Date BETWEEN DATEADD(day, -20, GETDATE()) AND GETDATE() 
    group by node, date
    order by node
    go
    alter table tmpNCPCNCDownstreamMaxUtilization3wks add Timestamp varchar(50)
    go
    update tmpNCPCNCDownstreamMaxUtilization3wks
    set Timestamp = 'WeekOf_' + cast(left(Date, 11) as varchar)
    go
    --drop table tmpNCPCNC_DownstreamNodeUtilizationMaxPivot
    --go
    declare @columnz varchar (8000)
    go
    SELECT @columnz = COALESCE(@columnz + ',[' + timestamp + ']','[' + timestamp+ ']')
    FROM tmpNCPCNCDownstreamMaxUtilization3wks group by timestamp order by timestamp
    go
    --pivot contents in @columns
    declare @query varchar(8000)
    SET @query ='select * into tmpNCPCNC_DownstreamNodeUtilizationMaxPivot from 
    (select node, timestamp, Max_Utilization from tmpNCPCNCDownstreamMaxUtilization3wks)a
    pivot
    sum(max_Utilization) for timestamp in('+ @columnz +')
    )as p'
    execute (@query)
    --empty contents from NCPCNCDownstreamMaxUtilization3wks
    update tmpNCPCNCDownstreamMaxUtilization3wks
    set timestamp =''
    truncate table tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
    --load to table to be joined to Node feature class
    insert into tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
    (Node, TwoWeeksAgo, PreviousWeek, CurrentWeek)
    select * from tmpNCPCNC_DownstreamNodeUtilizationMaxPivot
    --calculate average utilization for all values in each record
    update tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
    set average = (coalesce(twoweeksago, 0) + coalesce(previousweek, 0) + coalesce(currentweek, 0))/3
    from tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
    Scott

    Issue is with variable @columnz.
    Scope of variables is only limited to the batch and if batch is over Variable is no more accessible.
    Reproduce Steps: 
    DECLARE @columnz int = 0
    Go --Scope of @columnz ends here
    SELECT @columnz -- Ends up with error
    So you have to remove GO keyword. I have commented 2 of them in below:
    DROP TABLE tmpNCPCNCDownstreamMaxUtilization3wks
    SELECT node
    ,max(utilization) AS max_Utilization
    ,DATE
    INTO tmpNCPCNCDownstreamMaxUtilization3wks
    FROM stage_ncpcncdownstream_temporal
    WHERE DATE BETWEEN DATEADD(day, - 20, GETDATE())
    AND GETDATE()
    GROUP BY node
    ,DATE
    ORDER BY node
    GO
    ALTER TABLE tmpNCPCNCDownstreamMaxUtilization3wks ADD TIMESTAMP VARCHAR(50)
    GO
    UPDATE tmpNCPCNCDownstreamMaxUtilization3wks
    SET TIMESTAMP = 'WeekOf_' + cast(left(DATE, 11) AS VARCHAR)
    GO
    --drop table tmpNCPCNC_DownstreamNodeUtilizationMaxPivot
    --go
    DECLARE @columnz VARCHAR(8000)
    --GO
    SELECT @columnz = COALESCE(@columnz + ',[' + TIMESTAMP + ']', '[' + TIMESTAMP + ']')
    FROM tmpNCPCNCDownstreamMaxUtilization3wks
    GROUP BY TIMESTAMP
    ORDER BY TIMESTAMP
    --GO
    --pivot contents in @columns
    DECLARE @query VARCHAR(8000)
    SET @query = 'select * into tmpNCPCNC_DownstreamNodeUtilizationMaxPivot from
    (select node, timestamp, Max_Utilization from tmpNCPCNCDownstreamMaxUtilization3wks)a
    pivot
    sum(max_Utilization) for timestamp in(' + @columnz + ')
    )as p'
    EXECUTE (@query)
    --empty contents from NCPCNCDownstreamMaxUtilization3wks
    UPDATE tmpNCPCNCDownstreamMaxUtilization3wks
    SET TIMESTAMP = ''
    TRUNCATE TABLE tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
    --load to table to be joined to Node feature class
    INSERT INTO tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week (
    Node
    ,TwoWeeksAgo
    ,PreviousWeek
    ,CurrentWeek
    SELECT *
    FROM tmpNCPCNC_DownstreamNodeUtilizationMaxPivot
    --calculate average utilization for all values in each record
    UPDATE tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
    SET average = (coalesce(twoweeksago, 0) + coalesce(previousweek, 0) + coalesce(currentweek, 0)) / 3
    FROM tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
    -Vaibhav Chaudhari

Maybe you are looking for