Roles and Owner details

Hi,
We are using Oracle 8i database.
We need to extract roles and owner names which were created the roles. Please let us know in which data dictionary table I'll get these details.
Note: I have already verified DBA_ROLES , ROLE_TAB_PRIVS and ROLE_SYS_PRIVS. I didnt get the details.
Thanks,
Suri

A role is simply named a collection of privileges it does not have an owner. As far as I know, there is no easy way to determine which user created a role.
If by "We need to extract roles and owner names which were created the roles" you actually mean that you want to know which users have particular roles, then something like:
SELECT grantee, granted_role
FROM dba_role_privs
WHERE granted_role IN (<list of roles you are interested in>)John

Similar Messages

DB02 Type and Owner details

Hi All,
How can i get Type and Owner description from Detail anlysis in DB02 Scree?
I need to get the Type and owner Description or short text .
Is there any SAP Function module or table that will give these details .Please let me know any time in the next few months.
Edited by: Rob Burbank on Jun 6, 2009 12:50 PM

yes

Sql server agent roles and job's owner issue

Hi,
We have a tricky question about agent role and job owner. If I granted sqlagentoperatorrole to a windows account in a sql instance, the account will have permission to create a sql job, the job's owner is the account and he can edit the job. But we want
to keep all agent jobs' owner as SA. But after I (have sysadmin role) changed the job's owner to SA, the windows account won't be able to edit the job any more. but I don't want to give sysadmin role to the account, Does anybody have solution for my issue?
so recap my question,
1. all jobs owners should be SA
2. Allow some accounts without sysadmin permission can edit these jobs
3. Which kid of permission shall I grant to these accounts?
Thanks
David

Its not secessary to have SA for all the jobs, normally we avoid using SA...
Depends if you want to have some sort of security measures in place. If not, doesn't matter much. As for the 'sa' topic, I change the name of that account or disable immediately after install. It practically eliminates that vector of attack.
If you SQLAgentOperatorRole permissions then you can do the below... this is just a agent role so this comes under MSDB....
http://msdn.microsoft.com/en-us/library/ms188283.aspx
Also if you have sql SA access with doamin account or sql account then you can play with sql server completely without any issues, no harm in this...
Agenet principals are scoped to msdb; make sure you are running the statement from msdb DB. For example:
use [msdb]
go
-- The code where @userName is declared & set
EXEC sp_addrolemember 'SQLAgentOperatorRole', @userName
go
If you still have problems let us know, and please include the error number and message in order to help us understand the nature of the fauilure.
Best practice...
http://technet.microsoft.com/en-us/library/cc966485.aspx
Raju Rasagounder Sr MSSQL DBA

I brought a iphone 5c from ebay, when i recieve the i item its loked with i cloud, and also had a tmobile sim card in the slot...now i cant access the phone because its locked with i cloud,i do not have the owner details to contrac him,,

i brought a iphone 5c from ebay, when i recieve the i item its loked with i cloud, and also had a tmobile sim card in the slot...now i cant access the phone because its locked with i cloud,i do not have the owner details to contrac him....but i called to tmobile, they said this phone is not a stolen one,,thet told me to contrac apple.....is apple can unlock the icloud?

Plug your phone into the wall charger for at least 30 minutes...make sure you have a sim card in the phone...then:
Leave the USB cable connected to your computer, but NOT your phone, iTunes running, press & hold the home button while connecting the USB cable to your dock connector, continue holding the home button until you see “Connect to iTunes” on the screen. You may now release the home button. iTunes should now display that it has detected your phone in recovery mode, if not quit and reopen iTunes. If you still don’t see the recovery message repeat these steps again. iTunes will give you the option to restore from a backup or set up as new.
Make sure you have no anti-virus software running or any firewalls...turn all of that stuff off.

Explanation of Process Default Roles: Administrator and Owner

HI experts,
I am having some trouble understanding the reason of the existence of the process default roles:
Administrator and Owner.
In the CAF-GP Security guide, it says that the Standard Process Role Administrator can "Maintain process instances using the GP administration tools"; what this means ?
My user has de GP Administration role and it DOESN`T have the Standard Process Role Administrator from ANY process, and I can maintain ALL the process instances from the Administration workset, I don´t need to have the Standard Process Role Administrator assigned to me.
The same happens with the Standard Process Role Owner ; the Security Guide says the person who is assigned that role can "Maintain process instances"; my question is: If i assign the "Owner" role to a user that doesn´t have the GP Administrator role and this user wants to "Maintain Process instances" where he has to go? because he won´t have the administration workset !.
Best regards,
Marco.

Hi Marco,
First, check this link: http://help.sap.com/saphelp_nw2004s/helpdata/en/d9/273a4209a6ae04e10000000a1550b0/content.htm
That will explain better the role of each role.
Itu2019s important to you understand that each process may have a responsible person (admin or overseer) that will monitor the progress of the process.
And you will have a u201CBASISu201D person that will have the GP Administrator role. This role allow to maintain process (with other kind of operations like terminate, complete step, etc.), maintain background queues, archiving, transport of objects, configurations, schedule and other admin tasks for all GP infrastructure.
Regards,
Reward points if itu2019s helpful.

Explaning the concept or roles, groups and owners

Hi, i'm trying to find any documentation which explains theses concepts i 've tried the oracle library but it was no results.
Can anyone help me?
I'm trying to undestand that.

Hello,
have you gone through the BPM tutorial:
http://download.oracle.com/docs/cd/E13154_01/bpm/docs65/tutorial/index.html
It gives some basic understanding of the implementation ofthe roles and groups.
If you are looking for further material on the topic then look into the following material on studio:
http://download.oracle.com/docs/cd/E13154_01/bpm/docs65/studio/index.html
Check the documentation for organization.
Hope this helps,
Regards,
Jaydev Doshi.

Group and Owner fields blank when viewing Service Request results via UWQ

When looking at a row that represents a service request in either the UWQ or View Service Requests (search form) the group and owner columns are blank only for some of my users.
If you look at the detail for the SR, there is a owner and group.
Not sure what the issue is..? Inherited this role.
-JP

Which release is this occuring? At the first glance it looks like an issue that cropped up in 11.5.3. and has been fixed since.

Question about Roles And priviledges

I have designed my database and i have generated the ddl script. Now I want to design or somehow to create the system roles and system priviledges for every role.
for example:
CREATE ROLE DOCTOR;
GRANT SELECT ON DOCTOR TO DOCTOR;
So is there any way to do that from Enterprise manager or jdevelopper gui? Can I generate the dcl script somehow?

aa8a14cf-4c39-4940-8315-e35d47cccb28 wrote:
I know which roles and system privileges should be created. How am i gonna create them and generate the dcl script?
You've been shown two variants on how to have "sql write sql" to create a script. We assumed you know how to use sqlplus to run a script, and in this case to spool the output of the script we showed to create the script you want. (That was covered in my commend "I leave the details as an exercise for the student")
Since you wanted a script we also assumed NOT using a GUI. Live by the GUI, die by the GUI.
But since it seems our assumptions were false ...
Log on with sqlplus and do the following:
set echo off feedback off verify off head off trimsp on tab off lines 512 pages 0
spool doit.sql
select 'grant '||privilege||' on '||owner||'.'||table_name||' to '|| role||';' from ROLE_TAB_PRIVS WHERE ROLE='DOCTOR';
spool off
edit doit.sql
After examining and doing a sanity check on 'doit.sql', you just execute it in sqlplus ..
sql> @doit

Problem with Roles and Triggers

I'm having a strange problem with Roles and Triggers in Oracle. It's a little difficult to describe, so bear with me...
I'm trying to create a trigger that inserts records into a table belonging to a different user/owner. Of course, the owner of this trigger needs rights to insert records into this other table. I find that if I add these rights directly to the owner of the trigger, everything works okay and the trigger compiles successfully.
However, if I first create a Role and grant the "insert" rights to it, and then assign this role to the owner of the trigger, the trigger does not compile successfully.
To illustrate this, here's an example script. I'm using Oracle 10g Release 2...
-- Clean up...
DROP TABLE TestUser.TrigTable;
DROP TABLE TestUser2.TestTable;
DROP ROLE TestRole;
DROP TRIGGER TestUser.TestTrigger;
DROP USER TestUser CASCADE;
DROP USER TestUser2 CASCADE;
-- Create Users...
CREATE USER TestUser IDENTIFIED BY password DEFAULT TABLESPACE "USERS" TEMPORARY TABLESPACE "TEMP" QUOTA UNLIMITED ON "USERS";
CREATE USER TestUser2 IDENTIFIED BY password DEFAULT TABLESPACE "USERS" TEMPORARY TABLESPACE "TEMP" QUOTA UNLIMITED ON "USERS";
CREATE TABLE TestUser.TrigTable (TestColumn VARCHAR2(40));
CREATE TABLE TestUser2.TestTable (TestColumn VARCHAR2(40));
-- Grant Insert rights on TestTable to TestRole...
CREATE ROLE TestRole NOT IDENTIFIED;
GRANT INSERT ON TestUser2.TestTable TO TestRole;
-- Add TestRole to TestUser. TestUser should now have rights to INSERT on TestTable
GRANT TestRole TO TestUser;
ALTER USER TestUser DEFAULT ROLE ALL;
-- Now, create the trigger. This compiles unsuccessfully...
CREATE TRIGGER TestUser.TestTrigger AFTER INSERT ON TestUser.TrigTable
BEGIN
INSERT INTO TestUser2.TestTable (TestColumn) VALUES ('Test');
END;
When I do a "SHOW ERRORS;" after this, I get:
SQL> show errors;
Errors for TRIGGER TESTUSER.TESTTRIGGER:
LINE/COL ERROR
2/3 PL/SQL: SQL Statement ignored
2/25 PL/SQL: ORA-00942: table or view does not exist
SQL>
As I said above, if I just add the Insert rights directly to TestUser, the trigger compiles perfectly. Does anyone know why this is happening?
Thanks!
Adrian

Hi Raghu,
If the insert rights exist only on TestRole, and TestRole is assigned to TestUser, I can do the INSERT statement you suggest with no problems if I just execute it from SQLPlus (logged in as TestUser).
The question is, why does the same INSERT fail when it's inside the trigger?

Report to show workbook, worksheets and owner

Hi,
I need to be able to produce a report to show all of the workbooks stored on the db. I need to be able to list the owner, workbook name and the sheets.
I have been looking at Eul_user_queries but there is way too much data there for what I need.
Any help would be appreciated.
Thx
Dennis

You can find the workbooks and owners in the EUL5_DOCUMENTS table. The worksheet information is stored in the DOC_DOCUMENT long raw column. This column is encrypted, so it is impossible (so far, many have asked and tried, but no one has succeeded) to get worksheet details.
You may also be able to get worksheet details from the EUL5_QPP_STATS table. That has information about all workbooks and sheets, but a worksheet needs to have been run to be included here.
Another way would be to use the EUL5 business area (ORAHOME_FOR_BI_TOOLS/discoverer/EUL.eex). Import that BA (if you haven't already), and it may be easier to manage the EUL_USER_QUERIES data.
I may have a query using QPP_STATS, but it will be a while before I can find it and post it.

I have bought a second hand ipod 4, but it has the previous owners details all over it, for example it has her email address when trying to update facebook. How do I update it with my email address?

I have just purchased a second hand ipod touch 4. The previous owners details are still in it, so for example when I try to update the facebook app it asks me for the previous owners password, and shows the previous owners email address. How do I change it all to my details? I have already synced it with itunes and all of my music is now in it, and it's also renamed on the itunes page when I attach the ipod to my PC. I've also been in to the 'info' page, 'Advanced' and then 'Replace information on this ipod with mail accounts from this computer' then finally 'apply', but it still has the other persons ID.

I've answered my own question! I now understand that you can't use apps as they are always going to be linked to the original owner. I've since deleted the app and downloaded it again, and all is now well!

Update Address and communication Details of BP

Hi,
Requirement is we need to update address and communication details of BP, please let us know relative BAPI for the same. Below roles has to be updated with given address and communication details,
General Role
Employee Role
Help full information will be appreciated..

Hi,
For updation of address you can use
BAPI_BUPA_ADDRESS_CHANGE.
I guess you cannot update a role . You can only add new roles with BAPI_BUPA_ROLE_ADD .
One more thing in address updation, Whatever fields are there in import parameter ( Address) you can update them even if they are not present in database.
But in case of Tables( Communication details) fields you can only update if the values are existing in database.
Reward if helpful.
Regards
Sourabh

How to set up fax solution using Windows 2008 R2 Fax server role and Exchange 2007

Hello,
I don't know if this is the right forum to post this but since it is related to Exchange I thought it might be. If this is not the right place, please direct me to the forum where my post would be more appropriate.
I'm looking to set up a Fax solution for the company that I work for as we are moving away from analog phone lines to VoIP using SIP. My original thought was to set up a Windows 2008 R2 server with Fax server role installed and have it route the fax message
to Exchange 2007 SP3 so the fax message can be delivered to each user's inbox. I was reading a little bit on the Windows Fax server role and from what I saw it looks like it can only route fax messages to one email address. This not ideal for my company. Is
there a way to have the fax server role route the email to each user's inbox? If so, how can I achieve this?
How can implement this for this sending outgoing faxes as well?
I don't know if this releveant or not but I will be using Asterisk as a media gateway between our SIP trunks and the Windows Fax server.
Any help is appreciated. Thanks!

Please find the below url for the complete Fax configuration in Exchange 2007 Unified Messaging
http://blogs.technet.com/b/exchange/archive/2007/04/18/3401950.aspx
The article is so easy to understand with detail procedure and guideliness
Exchange Queries

Business Role and PFCG Role

Hi all,
I am new to CRM 7.0 Can someone explain What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
Thanks.
Neha.

Neha,
Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely. I'm locking this thread due to it fact that this question has been asked many times before by many different people.
These threads explain the topic in more detail:
Re: Reg: Business Role
Assignment pfcg-role to user and assignment pfcg-role to business role
Thank you,
Stephen

GRC 10 EAM - Unable to assign Firefighter roles to owners

Greetings SAP gurus,
I am currently on a new GRC 10 installation and having issues with the Emergency Access Management (EAM) component previously known as FireFighter or SPM. Note: We are trying to implement the Firefighter ''Role-Based" Approach.
Issue: We are unable to assign EAM roles to owners within NWBC. Click on 'Assign owners to Firefigher ID's and provision Firefighter ID's to firefighters' via the Access Management Tab within NWBC, option Superuser Assignment. Click on Assign. We are able to find the owners, but when I search for roles to assign, I get the error, 'No records found for the search criteria entered''.
We are on SP7.
Items completed:
1) All post installation tasks were completed correctly, i.e. BC sets activated, connector groups created and working.
2) EAM roles created on target system and imported via BRM.
3) EAM role properties edited for "Firefighting' usage in BRM, role owners defined, functional areas defined, business process and sub process areas defined.
4) Access control owners (i.e. role owners and controllers) defined.
5) The ID being used for configuration is currently assigned all GRC_NWBC roles available.
6) The connector groups are working fine and we are using for the Access risk Analysis component which is working fine.
7) The post EAM configuration steps has been completed.
Has anyone else experienced a similar issue? I look forward to your responses.
Rgds,
Prevlin Moodley

Hello Prevlin,
Are you using a FF role owner for the assignment. This might be helpful:
[Note 1289579 - Firefighter Owner additional authorization for Role based FF|https://service.sap.com/sap/support/notes/1289579]
Cheers,
Diego.

Roles and Owner details

Similar Messages

Maybe you are looking for