Roles not getting assigned to User OIM11gR2

Hi Experts,
I have created a Role, Access policy for ACF2 and a rule for automatically provision Users whose Company Code = 200 (company code is a UDF)
The records are getting provisioned if I assign the role manually to the user and run Evaluate user Policies task. But if i reconcile the user from trusted resource, the users with company code are not getting even the role assigned to them.
Am i missing something. Please help me out!!

hi,
have you run the configuration wizard?
http://yourhost:port/nwa/cfg-wizard
there is a task for BPM. just execute it.
if you have already run the wizard, you can go to following place to check and make further change if required.
http://yourhost:port/nwa/sys-config
select "Applications" tab
put "bpembaseear" in the name filter, select that application in the result table
you will see the properties tab
if your locale is not there, you can fix now.
Best regards,
John

Similar Messages

  • Roles Not Getting assigned during trusted reconn in OIM 11gR2

    Hi Experts,
    I have created a Role, Access policy for ACF2 and a rule for automatically provision Users whose Company Code = 200 (company code is a UDF)
    The records are getting provisioned if I assign the role manually to the user and run Evaluate user Policies task. But if i reconcile the user from trusted resource, the users with company code are not getting even the role assigned to them.
    Am i missing something. Please help me out!!

    I followed the exact same steps to create the rule,
    Search your Role > Select Your Role > Detail will be opened > Members Tab > Right top Corner > Add Rule > Select your condition
    I even tried with User Type = Consultant etc with some OOTB attributes but still no luck
    Once the recon is complete and user is created in OIM, i don't see the role added to user. Now, if i open the role again and edit the rule and navigate to preview results tab I see the newly created user listed in preview, and if I click Save without any changes, user gets added to the role.
    I think this could be due to our custom event handler as mentioned by NN, please let me know if you have any other clue to debug this issue.

  • BPM 7.2 Tasks not getting assigned to user UWL

    Hi All,
    I am on CE7.2 and downlaoded NWDS for the same.
    I follwed Donka Dimitrova's article to create a BPM process (name, age) application. I had earlier tried it on CE 7.11 and it worked fine. But now on CE7.2 when I initiate the process from /nwa, the first user (user assigned to the very first task) doesnt get it in UWL. I .looked into nwa and It seems like the tasks itself are not getting created because there are no tasks under "Manage Tasks" option.
    Is there some configuration missing.
    Note: I have assigned tasks to users in the Process in IDE and EP-BPEM UWL configuration is done.
    Prem

    hi,
    have you run the configuration wizard?
    http://yourhost:port/nwa/cfg-wizard
    there is a task for BPM. just execute it.
    if you have already run the wizard, you can go to following place to check and make further change if required.
    http://yourhost:port/nwa/sys-config
    select "Applications" tab
    put "bpembaseear" in the name filter, select that application in the result table
    you will see the properties tab
    if your locale is not there, you can fix now.
    Best regards,
    John

  • New user creation in AE- user group not getting assigned

    Hi All,
    Here is a typical case, wherein when we create a new user with AE for the production system, the user gets created and the roles are also assigned but the user group is not getting assigned. The user group is being fetched from a table from the backend and all that is working fine. Infact in order to test the configurations we even created a new user in the production instance of AE giving the development system as the target system for user creation and in this case the user was successfully created and the user group is also assigned. The problem is arising only when the target system is production system.
    Connectors are all working fine, but we are unable to think of a reason. Can somebody help us on this?

    Hi Vani,
    If you are provisioning the user group using user defaults, check  that production system is selected in the user defaults configured. Configuration -> user defaults. You can define any user default system, but for perticuticular user defaults that is applicable define all the systems, in which you want user defaults to be provisioned.
    Kind Regards,
    Srinivasan

  • Which roles we should assign to user , then the user can create COMPONENT_CATALOG

    Hi support ,
    Which roles we should assign to user , then the user can create componet catalog,
    I have yet assigned COMPONENT_CATALOG_ID_ADMIN . but can not find the menu in GSM to create new componet catalog.
    Terry

    Hi Terry
    I think you are looking for [FIC_CREATOR] role that lets you create new component catalogs.
    There is [FIC_READER] role that provides read-only access to component catalogs.
    Also, you need to check if GSM.SideNav.ComponentCatalog.Enabled feature configuration is set to true since this feature drives component catalog menu visibility in GSM.
    Dmitriy

  • Purchase order output type NEU is not get assigned automatically

    Dear All,
    when i am creting purchase order the output type NEU is not get assigned automatically.
    I have maintained message condn record for NEU and for specific PO doc type NB.
    same problame i was facing for the inventory docuemnts but i was resolved by running one SAP std program so please guide me if any such program is available for Purchasing documents also or any other setting i am missing to make.
    Pl suggest
    Regards,
    Vimlesh

    Hi
    Please check the following in customization.Dont check in NACE you may miss something like fine tune control
    1) Check the Message determination procedure is having the NEU output type
    2) Check the std Message determination procedure is assigned to PO
    3) Check the output type for the Access sequence, default data for transmission medium and partner function VN, Language & Form assigned to it
    4) Check the Access sequence for the condition tables
    5) Check the condition record in MN04/MN05
    6) Check the purchasing group has printer assignement
    7) Check the fine tuen control for operation 1 & 2 for message type.
    Hope your problem now solved.
    Thanks /karthik
    Edited by: Karthik on Aug 13, 2009 5:29 PM

  • Products not getting assigned to product catlog

    Hi,
    I am learning crm and needed your advice on product catlog.
    My products are not getting assigned to product catlog (both automatic as well as manual).
    There are 2 queries related to creation of sub area -
    1) I wanted to know, what comes in Cat Area type - ie does it remains blank or something is assigned to it?
    2) When I enter my product ID under item overview, the errors comes as product 0000..510010 does not have data for sales management.
    Please advice me on above 2 queries.
    Thanking you in advance.
    Regards.
    Edited by: Rachna Adani on Jun 28, 2009 7:04 PM

    1) I wanted to know, what comes in Cat Area type - ie does it remains blank or something is assigned to it?
    Catalog area is a kind of categorization or grouping or hierarchy in a catalog. For example, if yuo are creating a catalog for a super market, then Clothes, Groceries, Toys etc. could be Cat. Areas. With in a catalog area one can define more sub-areas - for example, in Toys, you can have sub-areas either by Age 5-10, Age 11-15 etc or by Brand. This is the case of manual assignment. In case of *automatic assignment, the catalog area and sub-ares will be part of the Product hierarchy.
    All you need is a definition for the Catalog Areas. You need to assign products only if there are any in that area or sub-area.
    2) When I enter my product ID under item overview, the errors comes as product 0000..510010 does not have data for sales management.
    Did you download them from ERP system? Then you must download the Sales Org data. In the same token, if you have created this product in CRM, then you should maintain the sales data tab,

  • Partner roles not getting copied from customer.

    Hi ,
    Partner Roles not getting copied from customer to delivery Document .
    we have created one delivery document from a purchase order and when trying to create billing document from that delivery document it is giving log "payer" and ' Bill to party " not maintained.
    when checked in partner tab in delivery document these partner roles are not present there . so what can be the probable reason . These partner functions are maintained in customer.
    thanks!!!!!!
    which customizing seeting to check for this

    Hello Payal,
    Please go to T.code VOPA i.e. Maintain Partner Determination and select Delivery from the list and then click Partner Procedurers and select the relevant delivery type and double click you will get mandatory Partner Functions like Sold To, ship To, Bill to are ticked or not.
    Reward if useful

  • WebCenter user role not getting propagated

    Hi,
    I am creating a WebCenter WSRP portlet application. I expected, after registering the application as a portlet, when I will consume it in WebCenter, the currently logged in user's name and role will be accessible. But in my case, when I am trying to check the logged in user's role using request.isUserInRole(...) method, it always return false. When I debugged the application, I saw that the user role is empty.
    Can someone please help me understand, if I have to do anything to successfully propagate the logged user's role to the custom portlet application.
    Just so you know, I could access the logged in user's name using request.getUserPrincipal().getName(). Please help.
    Thank you,
    Kanchan Upadhyay

    Hi,
    Yes, I am using LDAP and everything else in webcenter works fine. Just the user role is not getting propagated to my custom application developed using portlet. I have tried in taskflow also, seems like the user role is not accessible from there as well. Is there any specific way of accessing user information for custom application hosted in webcenter as portlets?
    Your help is appreciated!!
    Thank you,
    Kanchan

  • "Role not defined for individual users" on user import

    Hello,
    I am trying to import a certain user from one portal to another and I get this warning message:
    "Role <pcd_role_path> not defined for individual users."
    This role is assigned to this user at the 1st portal and exists at the 2nd portal at the same location.
    What does it mean and what do I need to do in this case?

    hi Roy,
    just check one thing ....
    please check wether the user have permissions to those roles.
    please go to the PCD location, where the roles have defined.
    right click on the role and check permissions.
    see if the user you are using is mentioned there. if no, add your user with read/write end user permission.
    i hope this will help you .
    Regards,
    Sujay

  • Roles Creating and assigning to user

    Hi all,
    Am creating a role as venki & granting some privileges to that role i.e, create session,create table...
    Then am creating a user & assigning a role "venki" to the created user.
    then after connecting to the user am unable to create a table in that user, am getting privilege problem..
    Please give a solution..
    Thanks in advance..
    Edited by: Venkateshj on Jan 1, 2013 3:32 PM
    Edited by: Venkateshj on Jan 1, 2013 4:12 PM

    JohnWatson wrote:
    The answer you have so far is not necessarily correct. You have granted RESOURCE to the role, and RESOURCE includes an implicit grant of UNLIMITED TABLESPACE. See this:orcl> create role venki;
    Role created.
    orcl> grant connect,resource,create table to venki;
    Grant succeeded.
    orcl> create user tpt identified by tpt default tablespace users account unlock;
    User created.
    orcl> grant venki to tpt;
    Grant succeeded.
    orcl> conn tpt/tpt
    Connected.
    Session altered.
    orcl> create table app(sname varchar2(9),sid int);
    Table created.
    orcl>there is no need to grant quota on a tablespace if the user already has RESOURCE, which is one reason why you should never grant RESOURCE to anyone. Clearly, there is sonething else going on in your database. Another indication that things are not as they seem is that in 11.2.x by default you do not need quota on a tablespace (or unlimnited tablespace) to create tables, because by default segment creation is deferred. So you get the error only when you try to insert into the table:orcl> create user me identified by me;
    User created.
    orcl> grant create session,create table to me;
    Grant succeeded.
    orcl> conn me/me
    Connected.
    Session altered.
    orcl> create table t1(c1 date) tablespace system;
    Table created.
    orcl> insert into t1 values(sysdate);
    insert into t1 values(sysdate)
    ERROR at line 1:
    ORA-01950: no privileges on tablespace 'SYSTEM'
    orcl>I think you need to investigate further. Things are not as they seem.Ok sir i'l investigate further, but my problem is solved.. By the above content i have to know why the error occurs in 11g..Let me check Once...
    Thank u Sir..

  • EA2700 router not getting assigned IP address via DHCP

    I'm helping my mom (remotely) set up her new EA2700 router to replace her old Linksys WRT160N router.  It is currently connected to a Motorola 6121 cable modem.  She also has Charter cable modem service.  FYI, the WRT160N is currently working albeit it is dropping connections and losing connections from time to time.  That's why she purchased this new router.
    I'm trying to help her set it up manually.  Unfortunately, she does not have a laptop computer.  She does have an iPad and Android phone, but nothing that would allow her to connect a device with a CD to the router that would allow her to do a CD based setup.  Thus, we're trying to do a manual setup.
    She is able to login to the router using Safari by connecting to 192.168.1.1 so I think the basic stuff is set up properly and all the wires are connected properly.  She is able to get into the main setup page.  I've helped her compare the setup of the current (EA2700) router to her old WRT160N router - this took quite a while - and essentially everything is set up similarly between the old and new router.  Internet connection type is set to "Automatic Configuration - DHCP."  Unfortunately, the router doesn't seem to be able to get assigned an IP address from Charter.  When she goes to the Status page, no IP addresses are listed.  She has also clicked on both the release IP and renew IP buttons, both with no effect.  She has tried power cycling both the cable modem and router, but not luck.  What's going on?  I see another user may have a similar issue:
    http://homecommunity.cisco.com/t5/Wireless-Routers/EA2700-DHCP-reservations/m-p/561986?comm_cc=HSus&...
    What can we do to fix this issue?

    If mac clone is enabled, the address that it will clone is usually the mac address of the computer that can get online directly to the modem. Or it’s possible that the cable modem is only recognizing the MAC address of the old router. You may enabling MAC Address clone and clone the MAC address of the old router.

  • GRAC_ROLE_MASS_IMPRT : roles not getting imported

    Hi Friends,
    I am working on GRC AC migration from AC 5.3 to 10.1
    Currently I am importing the Data from backend systems.
    While performing intra-migration tasks before RAR data import, I am stuck at below step :
    Importing roles for defined connectors : GRAC_ROLE_MASS_IMPRT
    My roles are not getting imported from backend systems. I have tested the connection and it is working properly.
    Profile, role and authorization sync also has been done successfully.
    I am looking forward for help from you expert people.
    Thanks in advance,
    Achala.

    Hi,
    I am able to import few roles. When I try to import say 'XC:*' roles, I can see only around 500 roles in the output log where there are around 7000 "XC:*"roles present in the system.
    Secondly, when I try to enter multiple roles in the role tab, the import gets executed only for first role and not for remaining once. Please find attached file of screenshots.
    Please advise if there is any limit for number of roles imported at a time via GRAC_ROLE_MASS_IMPRT.
    Please also adivse if any workaround available.

  • HT1430 I can not open my email.  A box comes up stating- CAN NOT GET MAIL, The user name or password for "Hotmail" is incorrect,   I never have to use a password on my IPAD.    What is going on?

    I Can not open my email, Never had this problem...   Message says:   CAN NOT OPEN MAIL, The user name or password for "HOTMAIL" is incorrect.
    What is going on???????

    Check your email settings (on your iPad) for that account and make sure the username and/or password are correct.

  • Business Roles not getting refreshed in UI

    Hi,
    When I log in to the Web UI, I can see all my roles.
    Now when I delete a Position/user assignment in the org model, I would assume
    not to see that role when I log on to the BSP application.
    I'm completely coming out of the application to reflect my changes.
    My questions would be
    1. How to delete a business role
    I've tried removing the complete position itself but I can see the roles
    I even tried clearing the browser cache but not luck, I'm using Firefox.
    2.I wanted to try a different browser, can somebody tell me how to change the browser
    3. For the other roles when I login I get an Interaction centre page with most of the screen blank.
    I've checked all the links
    I did try other solutions mentioned in other threads.
    I'm new to this version as well.
    I'm following c04 and CR580.
    Please do tell me the missing config.
    Another point is that I've SAP_ALL role
    Points will be given
    Thanks in advance
    Regards
    Deepak
    Edited by: deepak nair on Oct 28, 2008 3:39 AM

    Hi Deepak,
    1. Did you copied SALESPRO business role to ZSALESPRO business role?? If yes, delete ZSALESPRO business role and
    again copy SALESPRO business role to ZSALESPRO1 - reason may be by mistake you have copied IC_AGENT or IC_MANAGER to ZSALESPRO.
    2. To make your life easy with PFCG roles -
    2.1. I suggest you to copy standard Sales Professional role to "Z" role
    (eg: SAP_CRM_UIU_SLS_PROFESSIONAL to Z_SAP_CRM_UIU_SLS_PROFESSIONAL) and generate the profile.
    2.2. Add role SAP_CRM_UIU_FRAMEWORK (copy of it eg: ZSAP_CRM_UIU_FRAMEWORK)
    2.3. Add these roles to your User along with SAP_ALL (or Z_SAP_ALL) and SAP_NEW
    3. Add your User to Employee
    4. Add your Employee to the Position in Org. Model
    5. Select PFCG Role ID = Z_SAP_UIU_SLS_PROFESSIONAL in your business role (ZSALESPRO1)
    6. Extend your Position with Business Role (PPOMA_CRM -> double click on your position -> select GOTO -> Detail Object -> Enhance Object Description) -> highlight business role -> click on create info-type -> select your business role (ZSALESPRO1) -> save
    7. Clear the browser cache (delete temp. internet files) and delete cookies
    8. Log on to WEB UI with your user and password...
    I am sure that, if you follow this - you will active WEB UI without any problems. If still you have problems, let me know....
    Cheers,
    Peter J.

Maybe you are looking for

  • How do I change the speed of a track (not simply change tempo, but in a way that affects pitch)?

    I'd like to be able to (essentially) duplicate the function of this Audacity feature: Change Speed - Audacity Wiki In Audacity, when I use "Change Speed," it modifies the recording in a fashion similar to playing a tape slower or faster than its norm

  • Black background and white letters?

    Lion 10.7.2 and iTunes 10.5 on a Mac Pro. Everything has been fine until this morning when all of a sudden my background has changed color to black and the characters are white. I don't know what I did to cause this. More importantly, I don't have a

  • How to create PO through BAPI from custom screen

    Hi SAP Technical Guru, i am new to module pool programming. i designed custom screen which is like TA me21n means it has one tabstrip and tablecontrol. for header details(fields) at tab strip, and item detials(fields) at table control i used. now i h

  • DYNPRO_SEND_IN_BACKGROUND short dump in BW while calling Process chain remotely from APO

    Hi, While trying to call a process chain remotely from SCM APO system to SAP BW system - we are getting below short dump - Short text     Screen output without connection to user. What happened?     Error in the ABAP Application Program     The curre

  • Wake sleeping computer from outside of LAN...?

    Hello. I use Timbuktu to remotely access my home computer from work and my work computer from home. I'd like to not have to leave my computer on at home all day, but once it's set to sleep, Timbuktu can't access it. Is it possible (via 3rd party app