Roles of BW member

How can we divide the roles and responsibilities of a 4 memebr BW team in a development project.

hi Denzil,
take a look bi best practice 'bw role' doc (v 1.35 and v 2.35)
http://help.sap.com/bp_biv235/bi_en/documentation/BW_ROLES_SKILLS.doc
http://help.sap.com/bp_biv135/documentation/BW_ROLES_SKILLS.doc
hope this helps.

Similar Messages

ERM error: Field ROLE not a member of INPUT

Hi Experts,
After upgrade to 11.2 I'm having this error.
It appears at the Define Authorization stage after I chose transactions and clicking continue.
The connectors and JCos are working.
Please assist.
Thx,
Vit V
edit: All XMLs reloaded and system restarted.
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Current Module: |RE| Conversation: |cnvRole| Screen: |scrSearchTransaction|
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Module#RE#Conversation#cnvRole#Screen#scrManageAuthorization#Action#continueTCodeSearch#
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Changing Screen: FROM: scrSearchTransaction TO scrManageAuthorization
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.framework.Context : clearScreenRep :   : 6 entries cleared from screen repositiory
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG Handler found:class com.virsa.re.role.actions.AuthAuthorizationDataAction
2010-04-20 11:59:05,575 [SAPEngine_Application_Thread[impl:3]_39] DEBUG SAPConnectorDAO.java@365:com.virsa.comp.connectors.dao.jdbc.SAPConnectorDAO.findByConnectorName()connectorId: 5; lngId: 1
2010-04-20 11:59:05,590 [SAPEngine_Application_Thread[impl:3]_39] DEBUG SAPConnectorDAO.java@365:com.virsa.comp.connectors.dao.jdbc.SAPConnectorDAO.findByConnectorName()connectorId: 5; lngId: 1
2010-04-20 11:59:05,590 [SAPEngine_Application_Thread[impl:3]_39] DEBUG com.virsa.service.sap.SAPConnectorHelper : getClientFromSLD :   : INTO the method SapConnectorDTO :com.virsa.service.sap.dto.SapConnectorDTO@3e0a2020[conClass=,system=COD200,appId=COD200,host=consit-sap,systemNo=00,client=200,userId=codcom,SystemLang=EN,sysId=cod,messageServerGrp=default,messageServerHost=consit-sap,password=xxxxx,type=ECC600,userName=,description=COD200,isSLD=true,isActive=true,isHRSystem=false]
2010-04-20 11:59:05,590 [SAPEngine_Application_Thread[impl:3]_39] ERROR Field ROLE not a member of INPUT
java.lang.Throwable: Field ROLE not a member of INPUT
     at com.sap.mw.jco.JCO$MetaData.indexOf(JCO.java:9534)
     at com.sap.mw.jco.JCO$Record.setValue(JCO.java:14923)
Edited by: Vit Vesely on Apr 20, 2010 12:10 PM

Hi guys,
The problem is finally resolved.
1. Implement SNOTE 1441463
2. Implement SNOTE 1443612
3. Register key for object /VIRSA/RE_OBJ_INFO
4. In SE03 >> Administration >> Set System Change Option. Change /VIRSA/ to modifiable
5. In Se11 open data type /VIRSA/RE_OBJ_INFO in change mode with the key from p. 3
6. Edit structure according to Note 1452772. Save and activate.
7. Implement SNOTE 1452772
8. Restart grc~reear (or the server)
...or wait for VIRSANH patch 12
Hopefully it will work for you aswell.
Kind Regards,
Vit

How to change a Server with DC role to a member of a DC

Dear All,
I have a Server which is connected on the Local Network.
My server consists of 5 VM's.
I would like to make my Host Machine a DC and the all the VM's as the member of this Host DC. (I can do this...No Problem)
What I am worried about is, Later If I need to add my Host Machine Dc as a member of DC
of Local Network Domain Controller.
This means If i need to change the role of my DC to the role member of another DC!
Is it Possible? If possible then how to do it.
Thankyou and Regards,
Ahmed

Hi Ahmed,
Thanks for your reply.
Since your questions are related to Hyper-V, I am sorry to say that I am not an expert for Hyper-V. I recommend you to ask in Hyper-V forum below and you will get professional assistance there:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?category=windowsserver&filter=alltypes&sort=lastpostdesc
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How to find out by MDX that the current users is member of a role - Default member issue

Hi,
just imagine you have a dimension with a few members (A, B, C...). I defined a role which gives some users only rights to "B". On the other hand the default member for the dimension is set to "A". Now users part of the role get an error
that the member "A" is not found. So while
https://msdn.microsoft.com/en-us/library/ms175626.aspx says the default member setting in the role "overrides" the overall default member this is not completely true because first the general default member is selected and after that the role
specific one.
So the solution might be that I explicitly define the default member in all roles. This might be possible but there is one issue: you can't define a role specific default member for users part of the adminstrator role. So all admins don't have a default
member which is quite some restriction for some users...
So the question is how to solve that problem. An idea would be that I use some MDX to determine the default member in the dimension based on the actual user's role membership. But how to do that? Or any better idea?
Thanks,
Thomas Pagel

Hi Thomas,
According to your description, you want to have a role-specific default member for different roles. Right?
In Analysis Services, when granting access to dimension, a connection will fail if a role restricts access to a default measure. As you mentioned, the best solution is specify a default member for each role. But for administrator role(full control),
it can't set the default member. All tabs except General and Membership are disabled. And the system can determines the default member of current user automatically. It's not supported to get the default member in MDX either.
However, SSAS has additive design for role security. So in this scenario, we just need to create another role for those members of administrator role and specify a default member for this role. SSAS will take that role-specific default member
for these users. And it will not effect the administration permission for them.
Reference:
Default members, MDX Scripts, Security, KPIs and Perspectives
The Additive Design of SSAS Role Security
If you have any question, please feel free to ask.
Best Regards,
Simon Hou
TechNet Community Support

Error while granting BPMOrganizationAdmin role to SOAOperator.

Error Starting While starting SOA server. Please advise.
<Mar 5, 2015 12:56:08 PM EST> <Error> <oracle.bpm.services.organization> <BEA-000000> <Exception
exception.70692.type: error
exception.70692.severity: 2
exception.70692.name: Error while granting BPMOrganizationAdmin role to SOAOperator.
exception.70692.description: Error occured while granting the application role BPMOrganizationAdmin to application role SOAOperator.
exception.70692.fix: In the policy store, please add SOAOperator role as a member of BPMOrganizationAdmin role, if it is not already present.
ORABPEL-10513
Cannot get application roles from application identified by "{0}".
An error occurred while getting application roles from application identified by "soa-infra".
The underlying APIs threw an exception. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
        at oracle.tip.pc.services.identity.jps.JpsProvider$1.run(JpsProvider.java:920)
        at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRole(JpsProvider.java:913)
        at oracle.bpm.bpmn.engine.runtime.DeploymentDescriptorUtil.grantBPMOrganizationAdminRoleToSOAOperator(DeploymentDescriptorUtil.java:294)
        at oracle.bpm.bpmn.engine.service.BPMNServiceEngine.stateChanged(BPMNServiceEngine.java:578)
        at oracle.integration.platform.blocks.mesh.FabricLifecycle.notifyListeners(FabricLifecycle.java:46)
        at oracle.integration.platform.blocks.mesh.FabricLifecycle.setState(FabricLifecycle.java:30)
        at oracle.integration.platform.blocks.mesh.MeshImpl.postDeployInit(MeshImpl.java:118)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
        at oracle.integration.platform.metrics.PhaseEventAspect.invoke(PhaseEventAspect.java:71)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
        at $Proxy307.postDeployInit(Unknown Source)
        at oracle.integration.platform.kernel.FabricKernelInitializerServlet$1.run(FabricKernelInitializerServlet.java:555)
        at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:120)
        at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:183)
        at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
Caused By: ORABPEL-10510
Application role not found.
Application role "BPMOrganizationAdmin" could not be found for application identified by "soa-infra".
Check if the application role exists in the repository associated with the application. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
        at oracle.tip.pc.services.identity.jps.JpsProvider$9.run(JpsProvider.java:2338)
        at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRoleEntry(JpsProvider.java:2333)
        at oracle.tip.pc.services.identity.jps.JpsProvider.access$000(JpsProvider.java:169)
        at oracle.tip.pc.services.identity.jps.JpsProvider$1.run(JpsProvider.java:917)
        at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRole(JpsProvider.java:913)
        at oracle.bpm.bpmn.engine.runtime.DeploymentDescriptorUtil.grantBPMOrganizationAdminRoleToSOAOperator(DeploymentDescriptorUtil.java:294)
        at oracle.bpm.bpmn.engine.service.BPMNServiceEngine.stateChanged(BPMNServiceEngine.java:578)
        at oracle.integration.platform.blocks.mesh.FabricLifecycle.notifyListeners(FabricLifecycle.java:46)
        at oracle.integration.platform.blocks.mesh.FabricLifecycle.setState(FabricLifecycle.java:30)
        at oracle.integration.platform.blocks.mesh.MeshImpl.postDeployInit(MeshImpl.java:118)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
        at oracle.integration.platform.metrics.PhaseEventAspect.invoke(PhaseEventAspect.java:71)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
        at $Proxy307.postDeployInit(Unknown Source)
        at oracle.integration.platform.kernel.FabricKernelInitializerServlet$1.run(FabricKernelInitializerServlet.java:555)
        at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:120)
        at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:183)
        at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
>
<Mar 5, 2015 12:56:08 PM EST> <Error> <oracle.bpm.common> <BEA-000000> <Exception
BPM-70692
Exception
exception.70692.type: error
exception.70692.severity: 2
exception.70692.name: Error while granting BPMOrganizationAdmin role to SOAOperator.
exception.70692.description: Error occured while granting the application role BPMOrganizationAdmin to application role SOAOperator.
exception.70692.fix: In the policy store, please add SOAOperator role as a member of BPMOrganizationAdmin role, if it is not already present.
        at oracle.bpm.bpmn.engine.runtime.DeploymentDescriptorUtil.grantBPMOrganizationAdminRoleToSOAOperator(DeploymentDescriptorUtil.java:324)
        at oracle.bpm.bpmn.engine.service.BPMNServiceEngine.stateChanged(BPMNServiceEngine.java:578)
        at oracle.integration.platform.blocks.mesh.FabricLifecycle.notifyListeners(FabricLifecycle.java:46)
        at oracle.integration.platform.blocks.mesh.FabricLifecycle.setState(FabricLifecycle.java:29)
        at oracle.integration.platform.blocks.mesh.MeshImpl.postDeployInit(MeshImpl.java:118)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
        at oracle.integration.platform.metrics.PhaseEventAspect.invoke(PhaseEventAspect.java:71)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
        at $Proxy307.postDeployInit(Unknown Source)
        at oracle.integration.platform.kernel.FabricKernelInitializerServlet$1.run(FabricKernelInitializerServlet.java:555)
        at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:120)
        at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:183)
        at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
Caused By: ORABPEL-10513
Cannot get application roles from application identified by "{0}".
An error occurred while getting application roles from application identified by "soa-infra".
The underlying APIs threw an exception. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
        at oracle.tip.pc.services.identity.jps.JpsProvider$1.run(JpsProvider.java:920)
        at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRole(JpsProvider.java:913)
        at oracle.bpm.bpmn.engine.runtime.DeploymentDescriptorUtil.grantBPMOrganizationAdminRoleToSOAOperator(DeploymentDescriptorUtil.java:294)
        at oracle.bpm.bpmn.engine.service.BPMNServiceEngine.stateChanged(BPMNServiceEngine.java:578)
        at oracle.integration.platform.blocks.mesh.FabricLifecycle.notifyListeners(FabricLifecycle.java:46)
        at oracle.integration.platform.blocks.mesh.FabricLifecycle.setState(FabricLifecycle.java:30)
        at oracle.integration.platform.blocks.mesh.MeshImpl.postDeployInit(MeshImpl.java:118)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
        at oracle.integration.platform.metrics.PhaseEventAspect.invoke(PhaseEventAspect.java:71)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
        at $Proxy307.postDeployInit(Unknown Source)
        at oracle.integration.platform.kernel.FabricKernelInitializerServlet$1.run(FabricKernelInitializerServlet.java:555)
        at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:120)
        at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:183)
        at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
Caused By: ORABPEL-10510
Application role not found.
Application role "BPMOrganizationAdmin" could not be found for application identified by "soa-infra".
Check if the application role exists in the repository associated with the application. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
        at oracle.tip.pc.services.identity.jps.JpsProvider$9.run(JpsProvider.java:2338)
        at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRoleEntry(JpsProvider.java:2333)
        at oracle.tip.pc.services.identity.jps.JpsProvider.access$000(JpsProvider.java:169)
        at oracle.tip.pc.services.identity.jps.JpsProvider$1.run(JpsProvider.java:917)
        at oracle.tip.pc.services.identity.jps.JpsProvider.lookupAppRole(JpsProvider.java:913)
        at oracle.bpm.bpmn.engine.runtime.DeploymentDescriptorUtil.grantBPMOrganizationAdminRoleToSOAOperator(DeploymentDescriptorUtil.java:294)
        at oracle.bpm.bpmn.engine.service.BPMNServiceEngine.stateChanged(BPMNServiceEngine.java:578)
        at oracle.integration.platform.blocks.mesh.FabricLifecycle.notifyListeners(FabricLifecycle.java:46)
        at oracle.integration.platform.blocks.mesh.FabricLifecycle.setState(FabricLifecycle.java:30)
        at oracle.integration.platform.blocks.mesh.MeshImpl.postDeployInit(MeshImpl.java:118)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
        at oracle.integration.platform.metrics.PhaseEventAspect.invoke(PhaseEventAspect.java:71)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
        at $Proxy307.postDeployInit(Unknown Source)
        at oracle.integration.platform.kernel.FabricKernelInitializerServlet$1.run(FabricKernelInitializerServlet.java:555)
        at oracle.integration.platform.blocks.executor.WorkManagerExecutor$1.run(WorkManagerExecutor.java:120)
        at weblogic.work.j2ee.J2EEWorkManager$WorkWithListener.run(J2EEWorkManager.java:183)
        at weblogic.work.DaemonWorkThread.run(DaemonWorkThread.java:30)
>

Hi user,
Can you give us some information on the version you are using and your security setup? Are you using an external security provider? Because to me it sounds that you are using an external LDAP server.
Antonis

Concept of groups vs concept of roles

Hi!
I'm designing an LDAP structure mainly for authentication and authorization of users. I want to use the LDAP server for applications, intranet (different platforms like linux, NT, ...) and portals.
I read the Admin guide about groups and roles and found, that there aren't that many reasons for using roles instead of groups. The only real difference is (as I understood) that when using roles, I don't have to search for the the groups a user is member of, because every user contains the nsrole attribute with all the roles he is member of.
One big reason for not using roles is, that they are quite specific for iPlanet Directory Server. If one ever changes to another product (for example OpenLDAP) the roles concept may or may not be the same. When using groups I don't have that problem.
(If my information about that is incorrect please conradict!)
A mixture of groups and roles is a quite bad idea because if I put a group in a role, the "nsrole" attribute is added only to the group but not the the members of the group, so if I use roles, I should stick to them and should not use any groups.
As I told at the beginning, I am planning an LDAP structure. I don't have any "real life LDAP-experience" so if your experience is different, please tell me.
Thanks in advance for your opinion!
Florian

1. Why there could be a problem without scopes in
groups. If I have two companies and each of them has
a group "employees". Two companies would probably be
separated in two different subtrees, so I just use a
dynamic group, where I can specify a subtree where
groupmembers can be located or I use static groups,
where I define each entry.You see, you had to make a choice on which group type you could use - not because one was more convenient for defining members for the problem at hand, but because only one would work at all.
One thing I did not mention about roles advantages: they all work the same way - if a new role type were invented, applications written to work with roles prior to the new role, would still work with that role type. Groups types are so different that forward compatibility is not possible - mostly because to even use groups, applications have to do all the work to do common things like, enumerate the group, enumerate the groups an entry belongs to, test for group membership etc.
>
2. The coding logic for group evaluation with dynamic
and static groups and even mixtures of it is quite
complicated, it is much easier to ask an entry for a
roledn and thats it, but do most clients support
roles? Probably not. But then roles have not been around as long. I don't have any hard data on how many apps use roles - you would be surprised how hard it is to get that data for a developer.
As far as I know roles are not used in any
other LDAP Server. Well, the Sun DS, and the Netscape DS (which admittedly were once the same thing) both support the same roles.
So you can optimize an
applications implementing a role based queries, but
if you have a OpenLDAP environment you also need a
possibility to use groups. Talk to the OpenLDAP people about that. I believe they (at one time at least) decided to support the Netscape slapi interface - roles have interface components in that api.
I do understand what you are saying - there isn't an RFC, so other servers don't support roles. Well, I'm sorry, I never got around to it. To be perfectly frank, a lot of LDAP RFCs/Drafts merely describe some proprietary mechanism which other servers never adopt. Some even describe mechanisms that nobody has ever implemented.
When it comes down to it, it is only you who can decide whether being able to move to OpenLDAP or some other server without any reimplimentation is an important consideration. Every server will have features not supported by others, and if your choice is to use only those that are commonly supported, then that is your choice.
Roles will allow much less complex coding in order to use them and they are much faster than equivalent client side operations, but the price is non-comformance with other servers. But when that non-conformance simply boils down to entries which merely "describe" the groups without adding application level functionality - how much have you really lost? Well, until you need to change server vendor you have only gained, and then you'll need to put in the effort you saved ealier.
On the other side, what
application do support roles right now? (I really
don't know)Apart from applications by vendors that also supply DS I don't know either - but support for features such as this need to come from customers of those products. It is surprisingly simple to add support for roles in a product (for most it will almost be free) - much simpler than for groups.

I would like to know the role of the each thread on coherence

Help me.
I would like to know the role of the each thread on coherence.
There are too many kind of threads.
Example ~
GC Slave     GC Slave     RUNNABLE
RMI TCP Accept-1972     RMI TCP Accept-1972     RUNNABLE
Health Center trace subscriber     Health Center trace subscriber     RUNNABLE
LT=0:P=342534:O=0:port=55170     LT=0:P=342534:O=0:port=55170     RUNNABLE
Attach API wait loop     Attach API wait loop     RUNNABLE
PacketListener1     PacketListener1     RUNNABLE
PacketListener1P     PacketListener1P     RUNNABLE
PacketListenerN     PacketListenerN     RUNNABLE
Cluster|Member(Id=1, Timestamp=2013-04-05 10:45:44.655, Address=192.168.240.157:8088, MachineId=50044, Location=site:,machine:TMTEST-PC,process:5316, Role=CoherenceServer)     Cluster|Member(Id=1, Timestamp=2013-04-05 10:45:44.655, Address=192.168.240.157:8088, MachineId=50044, Location=site:,machine:TMTEST-PC,process:5316, Role=CoherenceServer)     RUNNABLE
RT=0:P=342534:O=0:TCPTransportConnection[addr=192.168.240.157,port=55178,local=55170]     RT=0:P=342534:O=0:TCPTransportConnection[addr=192.168.240.157,port=55178,local=55170]     RUNNABLE
Finalizer thread     Finalizer thread     RUNNABLE
WT=10     WT=10     RUNNABLE
main     main     TIMED_WAITING
IpMonitor     IpMonitor     TIMED_WAITING
Invocation:Management:EventDispatcher     Invocation:Management:EventDispatcher     TIMED_WAITING
Invocation:Management     Invocation:Management     TIMED_WAITING
DistributedCache     DistributedCache     TIMED_WAITING
JMX server connection timeout 52     JMX server connection timeout 52     TIMED_WAITING
RMI Scheduler(0)     RMI Scheduler(0)     WAITING
Thread-6     Thread-6     WAITING
stop JMX Server on shutdown     stop JMX Server on shutdown     WAITING
Logger@9228429 3.7.1.7     Logger@9228429 3.7.1.7     WAITING
PacketReceiver     PacketReceiver     WAITING
PacketPublisher     PacketPublisher     WAITING
PacketSpeaker     PacketSpeaker     WAITING
WT=7     WT=7     WAITING
WT=9     WT=9     WAITING
-----------------------------------------------------------------------------------------------------------------------------------------------

Briefly
PacketListener1 PacketListener1P PacketListenerN - listening IO threads for TCMP transport protocol
Cluster|Member(Id=1, Timestamp=2013-04-05 10:45:44.655, Address=192.168.240.157:8088, MachineId=50044, Location=site:,machine:TMTEST-PC,process:5316, Role=CoherenceServer) - main thread for cluster service (discovery, node joing / leave, etc)
IpMonitor - IP monitor, participates in death detection scheme
Invocation:Management:EventDispatcher - Event dispatch thread for distributed JMX service in Coherence
Invocation:Management - main thread for distributed JMX service in Coherence
DistributedCache - main thread for DistributedCache cache service
Logger@9228429 3.7.1.7 - Coherence async logging thread
PacketReceiver - Thread dispatching incomming network packets
PacketPublisher - Thread sending out packets via TCMP
PacketSpeaker - Thread sending out packets via TCMP (offloads some work from PacketPublisher for better core utilization)

Member death detection (Coh-3.5.3)

Hi,
Can someone explain death detection in 3.5.3 please. I have a reasonable idea how it works:
A member suspects another member has departed so it asks two other members for confirmation.
If these other members confirm departure then the original member informs the rest of the cluster that the member has departed.
Wherever possible the members being asked to confirm departure will be different roles to the member asking for confirmation
We occasionally lose storage nodes in this way but I have some questions around what I am seeing in the logs below.
The scenario is this:
* Member 27 has a timeout sending a packet to Member 16
* Member 27 asks Member 83 and member 85 to confirm departure of Member 16
* Member 83 rejects the confirmation request (@ 2010-09-22 05:21:43.411)
* Member 85 accepts the confirmation request (I assume it does as it has no rejection in its log)
* Member 27 informs the rest of the cluster that Member 16 has departed
* Member 1 (the senior member) heartbeats Member 16 causing it to re-initialise itself - it then rejoins as Member 127.
My question is given that Member 83 rejected the confirmation request I assume it could still see Member 16. What exactly are the rules around forcing a Member to depart the cluster when this happens.
The nodes asked to confirm departure were another storage node (which rejected the request) and a storage disabled worker node (which accepted the request).
These storage disabled nodes can sometimes be under reasonable load so might not be the best ones to ask to confirm departure.
What happens when only one of the two members confirms departure?
Can we choose which roles get asked to confirm departure?
Member 27
2010-09-22 05:21:43.410/648886.462 Oracle Coherence GE 3.5.3/465p2 <Warning> (thread=PacketPublisher, member=27): Timeout while delivering a packet Directed{PacketType=0x0DDF00D5, ToId=16, FromId=27, Direction=Outgoing, SentCount=79, SentMillis=05:21:43.111, ToMemberSet=null, ServiceId=7, MessageType=16, FromMessageId=32360401, ToMessageId=1730276, MessagePartCount=1, MessagePartIndex=0, NackInProgress=false, ResendScheduled=05:21:43.311, Timeout=05:21:43.15, PendingResendSkips=0, DeliveryState=outstanding, Body=0x0034D45C01001B012B110B545A001B012B110B5459004C021564BEA9FC8FE2CA80014C230D992515A16200A501843100004E084744532047424C4F40A6014E063834353235374000004CA90215A06200A401945F00A201BE2000A4014219A501A16200A501843100004E084744532047424C4F40A6014E063834353235374040..., Body.length=1445}; requesting the departure confirmation for Member(Id=16, Timestamp=2010-09-14 17:06:52.289, Address=xx.xxx.34.93:8088, MachineId=35165, Location=machine:xxxxx06428,process:8645,member:xxxxx06428:Data-2, Role=RbsOdcCoreDaoODCCacheServer)
by MemberSet(Size=2, BitSetCount=4
Member(Id=83, Timestamp=2010-09-14 17:07:39.704, Address=xx.xxx.34.97:8091, MachineId=35169, Location=machine:xxxxx06432,process:25212,member:xxxxx06432:Data-6, Role=RbsOdcCoreDaoODCCacheServer)
   Member(Id=85, Timestamp=2010-09-21 00:43:23.208, Address=xx.xxx.34.88:8090, MachineId=35160, Location=machine:xxxxx06441,process:10718,member:xxxxx06441:VEST-6, Role=RbsOdcVestCoreVestMain)
2010-09-22 05:21:43,412 [Logger@9227652 3.5.3/465p2] INFO Coherence - 2010-09-22 05:21:43.411/648886.463 Oracle Coherence GE 3.5.3/465p2 <Info> (thread=Cluster, member=27): Member departure confirmed by MemberSet(Size=1, BitSetCount=4
   Member(Id=85, Timestamp=2010-09-21 00:43:23.208, Address=xx.xxx.34.88:8090, MachineId=35160, Location=machine:xxxxx06441,process:10718,member:xxxxx06441:VEST-6, Role=RbsOdcVestCoreVestMain)
); removing Member(Id=16, Timestamp=2010-09-14 17:06:52.289, Address=xx.xxx.34.93:8088, MachineId=35165, Location=machine:xxxxx06428,process:8645,member:xxxxx06428:Data-2, Role=RbsOdcCoreDaoODCCacheServer)
2010-09-22 05:21:43.412/648886.464 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=27): Member 16 left service Management with senior member 1
Member 83
2010-09-22 05:19:06.003/648688.372 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=83): Member 100 joined Service PutAllInvocationService with senior member 1
648726.432: [GC 648726.432: [ParNew: 186837K->14089K(191744K), 0.0153790 secs] 2272524K->2100231K(2538752K), 0.0155370 secs] [Times: user=0.19 sys=0.00, real=0.01 secs]
648782.121: [GC 648782.121: [ParNew: 184585K->8246K(191744K), 0.0077860 secs] 2270727K->2094904K(2538752K), 0.0079440 secs] [Times: user=0.09 sys=0.00, real=0.01 secs]
648784.254: [GC 648784.254: [ParNew: 178742K->11283K(191744K), 0.0231890 secs] 2265400K->2097941K(2538752K), 0.0232940 secs] [Times: user=0.18 sys=0.00, real=0.02 secs]
648840.470: [GC 648840.470: [ParNew: 180452K->8909K(191744K), 0.0078950 secs] 2267110K->2095568K(2538752K), 0.0080540 secs] [Times: user=0.06 sys=0.01, real=0.01 secs]
648842.869: [GC 648842.869: [ParNew: 179405K->9775K(191744K), 0.0189500 secs] 2266064K->2096433K(2538752K), 0.0190970 secs] [Times: user=0.21 sys=0.00, real=0.02 secs]
2010-09-22 05:21:43.411/648845.780 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=83): MemberLeft request for Member 16 received from Member(Id=27, Timestamp=2010-09-14 17:06:58.895, Address=xx.xxx.34.95:8090, MachineId=35167, Location=machine:xxxxx06430,process:8662,member:xxxxx06430:Data-1, Role=RbsOdcCoreDaoODCCacheServer)
2010-09-22 05:21:43.411/648845.780 Oracle Coherence GE 3.5.3/465p2 <Info> (thread=Cluster, member=83): Rejecting the departure confirmation request by Member(Id=27, Timestamp=2010-09-14 17:06:58.895, Address=xx.xxx.34.95:8090, MachineId=35167, Location=machine:xxxxx06430,process:8662,member:xxxxx06430:Data-1, Role=RbsOdcCoreDaoODCCacheServer) regarding Member(Id=16, Timestamp=2010-09-14 17:06:52.289, Address=xx.xxx.34.93:8088, MachineId=35165, Location=machine:xxxxx06428,process:8645,member:xxxxx06428:Data-2, Role=RbsOdcCoreDaoODCCacheServer)
2010-09-22 05:21:43.413/648845.782 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=83): MemberLeft notification for Member 16 received from Member(Id=27, Timestamp=2010-09-14 17:06:58.895, Address=xx.xxx.34.95:8090, MachineId=35167, Location=machine:xxxxx06430,process:8662,member:xxxxx06430:Data-1, Role=RbsOdcCoreDaoODCCacheServer)
2010-09-22 05:21:43.413/648845.782 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=83): Member 16 left service Management with senior member 1
Member 85
2010-09-22 05:19:05.894/102952.247 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=85): Member 100 joined Service distributed-pof-service with senior member 1
2010-09-22 05:19:06.003/102952.356 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=85): Member 100 joined Service PutAllInvocationService with senior member 1
09/22/10 05:21:07.667 INFO: [ProcessWrapper] [STDOUT] 103074.362: [GC 103074.362: [ParNew: 225038K->3371K(249216K), 0.0025490 secs] 782627K->560965K(2069504K), 0.0026190 secs] [Times: user=0.02 sys=0.00, real=0.00 secs]
2010-09-22 05:21:43.411/103109.764 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=85): MemberLeft request for Member 16 received from Member(Id=27, Timestamp=2010-09-14 17:06:58.895, Address=xx.xxx.34.95:8090, MachineId=35167, Location=machine:xxxxx06430,process:8662,member:xxxxx06430:Data-1, Role=RbsOdcCoreDaoODCCacheServer)
2010-09-22 05:21:43.412/103109.765 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=85): MemberLeft notification for Member 16 received from Member(Id=27, Timestamp=2010-09-14 17:06:58.895, Address=xx.xxx.34.95:8090, MachineId=35167, Location=machine:xxxxx06430,process:8662,member:xxxxx06430:Data-1, Role=RbsOdcCoreDaoODCCacheServer)
2010-09-22 05:21:43.412/103109.765 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=85): Member 16 left service Management with senior member 1
Member 16
09/22/10 05:11:03.478 INFO: [ProcessWrapper] [STDOUT] 648253.507: [GC 648253.507: [ParNew: 173464K->2443K(191744K), 0.0128920 secs] 1401433K->1230671K(2538752K), 0.0130370 secs] [Times: user=0.06 sys=0.00, real=0.01 secs]
09/22/10 05:12:18.307 INFO: [ProcessWrapper] [STDOUT] 648328.337: [GC 648328.337: [ParNew: 172939K->2972K(191744K), 0.0108240 secs] 1401167K->1231401K(2538752K), 0.0109550 secs] [Times: user=0.05 sys=0.01, real=0.01 secs]
09/22/10 05:13:30.532 INFO: [ProcessWrapper] [STDOUT] 648400.564: [GC 648400.564: [ParNew: 173468K->2582K(191744K), 0.0095490 secs] 1401897K->1231266K(2538752K), 0.0097180 secs] [Times: user=0.07 sys=0.00, real=0.01 secs]
09/22/10 05:14:51.958 INFO: [ProcessWrapper] [STDOUT] 648481.990: [GC 648481.990: [ParNew: 173078K->2969K(191744K), 0.0087620 secs] 1401762K->1231877K(2538752K), 0.0088810 secs] [Times: user=0.06 sys=0.00, real=0.01 secs]
09/22/10 05:16:12.607 INFO: [ProcessWrapper] [STDOUT] 648562.641: [GC 648562.641: [ParNew: 173465K->2798K(191744K), 0.0067770 secs] 1402373K->1231945K(2538752K), 0.0069300 secs] [Times: user=0.07 sys=0.01, real=0.01 secs]
09/22/10 05:17:23.249 INFO: [ProcessWrapper] [STDOUT] 648633.284: [GC 648633.284: [ParNew: 173294K->2824K(191744K), 0.0064570 secs] 1402441K->1232187K(2538752K), 0.0065950 secs] [Times: user=0.06 sys=0.00, real=0.01 secs]
09/22/10 05:18:43.913 INFO: [ProcessWrapper] [STDOUT] 648713.948: [GC 648713.948: [ParNew: 173320K->2812K(191744K), 0.0065200 secs] 1402683K->1232354K(2538752K), 0.0066450 secs] [Times: user=0.05 sys=0.01, real=0.00 secs]
2010-09-22 05:19:05.894/648735.426 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=16): Member 100 joined Service distributed-pof-service with senior member 1
2010-09-22 05:19:06.003/648735.535 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=16): Member 100 joined Service PutAllInvocationService with senior member 1
09/22/10 05:21:30.919 INFO: [ProcessWrapper] [STDOUT] 648880.948: [GC 648880.948: [ParNew: 173272K->3255K(191744K), 0.0126250 secs] 1403096K->1233261K(2538752K), 0.0127910 secs] [Times: user=0.07 sys=0.00, real=0.01 secs]
2010-09-22 05:21:44.005/648893.537 Oracle Coherence GE 3.5.3/465p2 <Error> (thread=Cluster, member=16): Received cluster heartbeat from the senior Member(Id=1, Timestamp=2010-09-14 17:06:38.751, Address=xx.xxx.34.98:8088, MachineId=35170, Location=machine:xxxxx06433,process:20795,member:xxxxx06433:Data-1, Role=RbsOdcCoreDaoODCCacheServer) that does not contain this Member(Id=16, Timestamp=2010-09-14 17:06:52.289, Address=xx.xxx.34.93:8088, MachineId=35165, Location=machine:xxxxx06428,process:8645,member:xxxxx06428:Data-2, Role=RbsOdcCoreDaoODCCacheServer); stopping cluster service.
2010-09-22 05:21:44.005/648893.537 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=16): Service Cluster left the clusterAny more information would be appreciated (or any settings I can tweak).
Cheers,
JK

Thanks Mark, we will look the timeout settings.
In the logs for the accusing node we see...
2010-09-22 05:21:14.408/648857.460 Oracle Coherence GE 3.5.3/465p2 <D6> (thread=PacketPublisher, member=27): Member(Id=16, Timestamp=2010-09-14 17:06:52.289, Address=xx.xxx.34.93:8088, MachineId=35165, Location=machine:xxxxx06428,process:8645,member:xxxxx06428:Data-2, Role=RbsOdcCoreDaoODCCacheServer) has failed to respond to 17 packets; declaring this member as paused.
648857.732: [GC 648857.732: [ParNew: 189247K->16395K(191744K), 0.0229780 secs] 1556730K->1384220K(2538752K), 0.0231600 secs] [Times: user=0.29 sys=0.00, real=0.02 secs]
2010-09-22 05:21:43.410/648886.462 Oracle Coherence GE 3.5.3/465p2 <Warning> (thread=PacketPublisher, member=27): Timeout while delivering a packet Directed{PacketType=0x0DDF00D5, ToId=16, FromId=27, Direction=Outgoing, SentCount=79, SentMillis=05:21:43.111, ToMemberSet=null, ServiceId=7, MessageType=16, FromMessageId=32360401, ToMessageId=1730276, MessagePartCount=1, MessagePartIndex=0, NackInProgress=false, ResendScheduled=05:21:43.311, Timeout=05:21:43.15, PendingResendSkips=0, DeliveryState=outstanding, Body=0x0034D45C01001B012B110B545A001B012B110B5459004C021564BEA9FC8FE2CA80014C230D992515A16200A501843100004E084744532047424C4F40A6014E063834353235374000004CA90215A06200A401945F00A201BE2000A4014219A501A16200A501843100004E084744532047424C4F40A6014E063834353235374040..., Body.length=1445}; requesting the departure confirmation for Member(Id=16, Timestamp=2010-09-14 17:06:52.289, Address=xx.xxx.34.93:8088, MachineId=35165, Location=machine:xxxxx06428,process:8645,member:xxxxx06428:Data-2, Role=RbsOdcCoreDaoODCCacheServer)
by MemberSet(Size=2, BitSetCount=4
Member(Id=83, Timestamp=2010-09-14 17:07:39.704, Address=xx.xxx.34.97:8091, MachineId=35169, Location=machine:xxxxx06432,process:25212,member:xxxxx06432:Data-6, Role=RbsOdcCoreDaoODCCacheServer)
   Member(Id=85, Timestamp=2010-09-21 00:43:23.208, Address=xx.xxx.34.88:8090, MachineId=35160, Location=machine:xxxxx06441,process:10718,member:xxxxx06441:VEST-6, Role=RbsOdcVestCoreVestMain)
2010-09-22 05:21:43,412 [Logger@9227652 3.5.3/465p2] INFO Coherence - 2010-09-22 05:21:43.411/648886.463 Oracle Coherence GE 3.5.3/465p2 <Info> (thread=Cluster, member=27): Member departure confirmed by MemberSet(Size=1, BitSetCount=4
   Member(Id=85, Timestamp=2010-09-21 00:43:23.208, Address=xx.xxx.34.88:8090, MachineId=35160, Location=machine:xxxxx06441,process:10718,member:xxxxx06441:VEST-6, Role=RbsOdcVestCoreVestMain)
   ); removing Member(Id=16, Timestamp=2010-09-14 17:06:52.289, Address=xx.xxx.34.93:8088, MachineId=35165, Location=machine:xxxxx06428,process:8645,member:xxxxx06428:Data-2, Role=RbsOdcCoreDaoODCCacheServer)
2010-09-22 05:21:43.412/648886.464 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=27): Member 16 left service Management with senior member 1So the first hint anything is wrong is the debug message at 05:21:14.408
Confirmation is requested at 05:21:43.410 which is 29 seconds later, so I assume we have the "dev" timeout settings of 30 seconds.
The logs for the suspect member have...
09/22/10 05:17:23.249 INFO: [ProcessWrapper] [STDOUT] 648633.284: [GC 648633.284: [ParNew: 173294K->2824K(191744K), 0.0064570 secs] 1402441K->1232187K(2538752K), 0.0065950 secs] [Times: user=0.06 sys=0.00, real=0.01 secs]
09/22/10 05:18:43.913 INFO: [ProcessWrapper] [STDOUT] 648713.948: [GC 648713.948: [ParNew: 173320K->2812K(191744K), 0.0065200 secs] 1402683K->1232354K(2538752K), 0.0066450 secs] [Times: user=0.05 sys=0.01, real=0.00 secs]
09/22/10 05:19:05.897 INFO: [ProcessWrapper] [STDOUT] 2010-09-22 05:19:05,895 [Logger@9248631 3.5.3/465p2] DEBUG Coherence - 2010-09-22 05:19:05.894/648735.426 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=16): Member 100 joined Service distributed-pof-service with senior member 1
09/22/10 05:19:06.004 INFO: [ProcessWrapper] [STDOUT] 2010-09-22 05:19:06,004 [Logger@9248631 3.5.3/465p2] DEBUG Coherence - 2010-09-22 05:19:06.003/648735.535 Oracle Coherence GE 3.5.3/465p2 <D5> (thread=Cluster, member=16): Member 100 joined Service PutAllInvocationService with senior member 1
09/22/10 05:20:08.250 INFO: [ProcessWrapper] [STDOUT] 648798.277: [GC 648798.277: [ParNew: 173308K->2776K(191744K), 0.0136850 secs] 1402850K->1232600K(2538752K), 0.0138770 secs] [Times: user=0.09 sys=0.00, real=0.01 secs]
09/22/10 05:20:16.851 INFO: [FabricDiagnosticsPlugin] [M: 15M/40M/184M] [T: O(30)] [3.0.1.7] [JRE: 1.5.0_05/Sun Microsystems Inc.] [OS: Linux/2.6.9-89.0.9.ELlargesmp/i386] [H: xx.xxx.34.93]
09/22/10 05:21:30.919 INFO: [ProcessWrapper] [STDOUT] 648880.948: [GC 648880.948: [ParNew: 173272K->3255K(191744K), 0.0126250 secs] 1403096K->1233261K(2538752K), 0.0127910 secs] [Times: user=0.07 sys=0.00, real=0.01 secs]
09/22/10 05:21:44.005 INFO: [ProcessWrapper] [STDOUT] 2010-09-22 05:21:44,005 [Logger@9248631 3.5.3/465p2] ERROR Coherence - 2010-09-22 05:21:44.005/648893.537 Oracle Coherence GE 3.5.3/465p2 <Error> (thread=Cluster, member=16): Received cluster heartbeat from the senior Member(Id=1, Timestamp=2010-09-14 17:06:38.751, Address=xx.xxx.34.98:8088, MachineId=35170, Location=machine:xxxxx06433,process:20795,member:xxxxx06433:Data-1, Role=RbsOdcCoreDaoODCCacheServer) that does not contain this Member(Id=16, Timestamp=2010-09-14 17:06:52.289, Address=xx.xxx.34.93:8088, MachineId=35165, Location=machine:xxxxx06428,process:8645,member:xxxxx06428:Data-2, Role=RbsOdcCoreDaoODCCacheServer); stopping cluster service.which seem to show it is reasonably OK, there are GC pauses but none are 30 seconds, although I suppose there are other reasons besides GC that may cause comms timeouts.
Cheers,
JK

Coherence.jar in EAR - ejbmodule error while joining cluster senior member

Hi
We are trying to package coherence in EAR to connect to JMS queue. The ejb MDB module when a message is received process the data and tries to connect to coherence cluster members - Looking at the following log - right coherence config file/override/pof are picked however while this new member join DistributedService - it fails.
The senior member has 13001 partition, backup count 1. Both MDB module , coherence cluster use the same cache-config file.
Can someone help me in this regard.
Thanks
sunder
2011-10-12 11:18:05.351/2523.753 Oracle Coherence GE 3.7.0.0 <Info> (thread=[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)', member=n/a): Loaded cache configuration from "file:/data/blazecache/config/SDR-Cache-config.xml"
2011-10-12 11:18:05.980/2524.382 Oracle Coherence GE 3.7.0.0 <D4> (thread=[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)', member=n/a): TCMP bound to /10.160.57.138:8092 using SystemSocketProvider
2011-10-12 11:18:06.211/2524.613 Oracle Coherence GE 3.7.0.0 <Info> (thread=Cluster, member=n/a): Failed to satisfy the variance: allowed=16, actual=41
2011-10-12 11:18:06.211/2524.613 Oracle Coherence GE 3.7.0.0 <Info> (thread=Cluster, member=n/a): Increasing allowable variance to 19
2011-10-12 11:18:06.538/2524.940 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=6): Member(Id=4, Timestamp=2011-10-12 11:18:06.332, Address=10.160.57.138:8092, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:8703, Role=WeblogicServer) joined Cluster with senior member 1
2011-10-12 11:18:06.539/2524.941 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=8): Member(Id=4, Timestamp=2011-10-12 11:18:06.332, Address=10.160.57.138:8092, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:8703, Role=WeblogicServer) joined Cluster with senior member 1
2011-10-12 11:18:06.553/2524.955 Oracle Coherence GE 3.7.0.0 <Info> (thread=Cluster, member=n/a): This Member(Id=4, Timestamp=2011-10-12 11:18:06.332, Address=10.160.57.138:8092, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:8703, Role=WeblogicServer, Edition=Grid Edition, Mode=Development, CpuCount=1, SocketCount=1) joined cluster "sdrcluster_dev.dell.com" with senior Member(Id=1, Timestamp=2011-10-12 09:43:00.859, Address=10.160.57.138:14001, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:6992,member:BlazeCacheServerDEV01_1, Role=WeblogicWeblogicCacheServer, Edition=Grid Edition, Mode=Development, CpuCount=1, SocketCount=1)
2011-10-12 11:18:06.593/2524.995 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member(Id=2, Timestamp=2011-10-12 09:43:35.556, Address=10.160.57.138:14003, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:6989,member:BlazeCacheExtendServerDEV01_1, Role=WeblogicWeblogicCacheServer) joined Cluster with senior member 1
2011-10-12 11:18:06.595/2524.997 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member(Id=3, Timestamp=2011-10-12 09:43:35.983, Address=10.160.57.138:14005, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:7034,member:BlazeCacheServerDEV01_2, Role=WeblogicWeblogicCacheServer) joined Cluster with senior member 1
2011-10-12 11:18:06.595/2524.997 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member(Id=6, Timestamp=2011-10-12 10:36:33.614, Address=10.160.57.138:8088, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:8703, Role=WeblogicServer) joined Cluster with senior member 1
2011-10-12 11:18:06.595/2524.997 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member(Id=8, Timestamp=2011-10-12 10:42:51.491, Address=10.160.57.138:8090, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:8703, Role=WeblogicServer) joined Cluster with senior member 1
2011-10-12 11:18:06.652/2525.054 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 1 joined Service Cluster with senior member 1
2011-10-12 11:18:06.653/2525.055 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 1 joined Service Management with senior member 1
2011-10-12 11:18:06.653/2525.055 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 1 joined Service DistributedCache1 with senior member 1
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 2 joined Service Cluster with senior member 1
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 2 joined Service Management with senior member 1
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 2 joined Service DistributedCache1 with senior member 1
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 2 joined Service ExtendTcpProxyService with senior member 2
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 3 joined Service Cluster with senior member 1
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 3 joined Service Management with senior member 1
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 3 joined Service DistributedCache1 with senior member 1
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 6 joined Service Cluster with senior member 1
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 6 joined Service Management with senior member 1
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 8 joined Service Cluster with senior member 1
2011-10-12 11:18:06.654/2525.056 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=n/a): Member 8 joined Service Management with senior member 1
2011-10-12 11:18:06.661/2525.063 Oracle Coherence GE 3.7.0.0 <Info> (thread=[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)', member=n/a): Started cluster Name=sdrcluster_dev.dell.com
WellKnownAddressList(Size=1,
WKA{Address=10.160.57.138, Port=14001}
MasterMemberSet
ThisMember=Member(Id=4, Timestamp=2011-10-12 11:18:06.332, Address=10.160.57.138:8092, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:8703, Role=WeblogicServer)
OldestMember=Member(Id=1, Timestamp=2011-10-12 09:43:00.859, Address=10.160.57.138:14001, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:6992,member:BlazeCacheServerDEV01_1, Role=WeblogicWeblogicCacheServer)
ActualMemberSet=MemberSet(Size=6, BitSetCount=2
Member(Id=1, Timestamp=2011-10-12 09:43:00.859, Address=10.160.57.138:14001, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:6992,member:BlazeCacheServerDEV01_1, Role=WeblogicWeblogicCacheServer)
Member(Id=2, Timestamp=2011-10-12 09:43:35.556, Address=10.160.57.138:14003, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:6989,member:BlazeCacheExtendServerDEV01_1, Role=WeblogicWeblogicCacheServer)
Member(Id=3, Timestamp=2011-10-12 09:43:35.983, Address=10.160.57.138:14005, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:7034,member:BlazeCacheServerDEV01_2, Role=WeblogicWeblogicCacheServer)
Member(Id=4, Timestamp=2011-10-12 11:18:06.332, Address=10.160.57.138:8092, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:8703, Role=WeblogicServer)
Member(Id=6, Timestamp=2011-10-12 10:36:33.614, Address=10.160.57.138:8088, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:8703, Role=WeblogicServer)
Member(Id=8, Timestamp=2011-10-12 10:42:51.491, Address=10.160.57.138:8090, MachineId=12174, Location=site:us.dell.com,machine:austeochr01,process:8703, Role=WeblogicServer)
RecycleMillis=1200000
RecycleSet=MemberSet(Size=0, BitSetCount=0
TcpRing{Connections=[3, 8]}
IpMonitor{AddressListSize=0}
2011-10-12 11:18:06.741/2525.143 Oracle Coherence GE 3.7.0.0 <D5> (thread=Invocation:Management, member=4): Service Management joined the cluster with senior service member 1
2011-10-12 11:18:06.750/2525.152 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=6): Member 4 joined Service Management with senior member 1
2011-10-12 11:18:06.751/2525.153 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=8): Member 4 joined Service Management with senior member 1
2011-10-12 11:18:07.299/2525.701 Oracle Coherence GE 3.7.0.0 <Info> (thread=DistributedCache:DistributedCache1, member=4): Loaded POF configuration from "file:/data/blazecache/config/SDR-coherence-pof-config.xml"
2011-10-12 11:18:07.306/2525.708 Oracle Coherence GE 3.7.0.0 <Info> (thread=DistributedCache:DistributedCache1, member=4): Loaded included POF configuration from "zip:/data/oracle/middleware/user_projects/domains/BlazeDEV/servers/BlazeJMS/tmp/_WL_user/BlazeMDBEAR/1pwed8/APP-INF/lib/coherence.jar!/coherence-pof-config.xml"
2011-10-12 11:18:07.382/2525.784 Oracle Coherence GE 3.7.0.0 <D5> (thread=DistributedCache:DistributedCache1, member=4): Service DistributedCache1 joined the cluster with senior service member 1
2011-10-12 11:18:07.454/2525.856 Oracle Coherence GE 3.7.0.0 <Warning> (thread=DistributedCache:DistributedCache1, member=4): This node is configured with a 'partition-count' value of 257, but the service senior is using a value of 13001; overriding the local configuration.
2011-10-12 11:18:07.455/2525.857 Oracle Coherence GE 3.7.0.0 <Warning> (thread=DistributedCache:DistributedCache1, member=4): This node is configured with a 'backup-count' value of 1, but the service senior is using a value of 0; overriding the local configuration.
2011-10-12 11:18:07.456/2525.858 Oracle Coherence GE 3.7.0.0 <Error> (thread=DistributedCache:DistributedCache1, member=4): Incompatible KeyAssociator implementation: this node is configured to use com.tangosol.net.partition.DefaultKeyAssociator, but the service senior is using com.dell.it.services.sdr.blazeload.partaffinity.BlazeCacheKeyAssociator; stopping the service.
2011-10-12 11:18:07.466/2525.868 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=6): Member 4 left service DistributedCache1 with senior member 1
2011-10-12 11:18:07.467/2525.869 Oracle Coherence GE 3.7.0.0 <D5> (thread=Cluster, member=8): Member 4 left service DistributedCache1 with senior member 1
2011-10-12 11:18:07.477/2525.879 Oracle Coherence GE 3.7.0.0 <D5> (thread=DistributedCache:DistributedCache1, member=4): Service DistributedCache1 left the cluster
2011-10-12 11:18:07.477/2525.879 Oracle Coherence GE 3.7.0.0 <Error> (thread=[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)', member=4): Error while starting service "DistributedCache1": java.lang.RuntimeException: Failed to start Service "DistributedCache1" (ServiceState=SERVICE_STOPPED)
2011-10-12 11:18:07.477/2525.879 Oracle Coherence GE 3.7.0.0 <Error> (thread=[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)', member=4): at com.tangosol.coherence.component.util.daemon.queueProcessor.Service.start(Service.CDB:38)
at com.tangosol.coherence.component.util.daemon.queueProcessor.service.Grid.start(Grid.CDB:6)
at com.tangosol.coherence.component.util.SafeService.startService(SafeService.CDB:39)
at com.tangosol.coherence.component.util.safeService.SafeCacheService.startService(SafeCacheService.CDB:5)
at com.tangosol.coherence.component.util.SafeService.ensureRunningService(SafeService.CDB:27)
at com.tangosol.coherence.component.util.SafeService.start(SafeService.CDB:14)
at com.tangosol.net.DefaultConfigurableCacheFactory.ensureServiceInternal(DefaultConfigurableCacheFactory.java:1102)
at com.tangosol.net.DefaultConfigurableCacheFactory.ensureService(DefaultConfigurableCacheFactory.java:934)
at com.tangosol.net.DefaultConfigurableCacheFactory.ensureCache(DefaultConfigurableCacheFactory.java:916)
at com.tangosol.net.DefaultConfigurableCacheFactory.configureCache(DefaultConfigurableCacheFactory.java:1293)
at com.tangosol.net.DefaultConfigurableCacheFactory.ensureCache(DefaultConfigurableCacheFactory.java:294)
at com.tangosol.net.CacheFactory.getCache(CacheFactory.java:204)
at com.tangosol.net.CacheFactory.getCache(CacheFactory.java:181)
at com.dell.it.services.sdr.blazeinc.util.CustomerProductUpdate.recordExists(CustomerProductUpdate.java:267)
at com.dell.it.services.sdr.blazeinc.util.CustomerProductUpdate.insert(CustomerProductUpdate.java:222)
at com.dell.it.services.sdr.blazeinc.util.DataMapperUtility.mapToBean(DataMapperUtility.java:260)
at com.dell.it.services.sdr.blazeinc.util.DataMapperUtility.mapToBean(DataMapperUtility.java:119)
at com.dell.it.services.sdr.blazeinc.listener.BlazeMDB.onMessage(BlazeMDB.java:53)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

The KeyAssociator implementation is MDB classpath as well.
Here is the configuration override config
===========
<coherence>
<cluster-config>
     <member-identity>
<cluster-name system-property="tangosol.coherence.cluster">sdrcluster_dev.XX.com</cluster-name>
     </member-identity>
<unicast-listener>

<well-known-addresses>

<socket-address id="austeochr01.us.XX.com">
<address>austeochr01.us.XX.com</address>
<port>14001</port>
</socket-address>
</well-known-addresses>
</unicast-listener>
<shutdown-listener>
<enabled system-property="tangosol.coherence.shutdownhook">false</enabled>
</shutdown-listener>
<service-guardian>
     <timeout-milliseconds system-property="tangosol.coherence.guard.timeout">360000</timeout-milliseconds>
</service-guardian>
</cluster-config>
<configurable-cache-factory-config>
<class-name>com.tangosol.net.DefaultConfigurableCacheFactory</class-name>
<init-params>
<init-param>
<param-type>java.lang.String</param-type>
<param-value system-property="tangosol.coherence.cacheconfig">/data/blazecache/config/SDR-Cache-config.xml</param-value>
</init-param>
</init-params>
</configurable-cache-factory-config>
</coherence>
Here is the Cache config
=========
<?xml version="1.0" encoding="UTF-8"?>
<cache-config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xmlns="http://xmlns.oracle.com/coherence/coherence-cache-config"
     xsi:schemaLocation="http://xmlns.oracle.com/coherence/coherence-cache-config/coherence-cache-config.xsd">
     <caching-scheme-mapping>
          <cache-mapping>
               <cache-name>blaze-local-*</cache-name>
               <scheme-name>blaze-local</scheme-name>
          </cache-mapping>
          <cache-mapping>
               <cache-name>blaze-distributed-ASSET_HEADER_DATA</cache-name>
               <scheme-name>blaze-distributed-AssetHeaderData</scheme-name>
          </cache-mapping>
          <cache-mapping>
               <cache-name>blaze-distributed-ENTITLEMENT_SUMMARY_DATA</cache-name>
               <scheme-name>blaze-distributed-EntitlementSummaryData</scheme-name>
          </cache-mapping>
     </caching-scheme-mapping>
     <caching-schemes>
          <local-scheme>
               <scheme-name>blaze-local</scheme-name>
               <expiry-delay>0</expiry-delay>
          </local-scheme>
          <distributed-scheme>
               <scheme-name>blaze-distributed-AssetHeaderData</scheme-name>
               <service-name>DistributedCache1</service-name>
               <serializer>
                    <class-name>com.tangosol.io.pof.ConfigurablePofContext</class-name>
                    <init-params>
                         <init-param>
                         <param-type>java.lang.String</param-type>
                         <param-value>/data/blazecache/config/SDR-coherence-pof-config.xml</param-value>
                         </init-param>
                    </init-params>
               </serializer>
               <thread-count>40</thread-count>
               <backup-count>0</backup-count>
               <backup-storage>
                    <flashjournal-scheme />
               </backup-storage>
               <key-associator>
                    <class-name>com.XX.it.services.sdr.blazeload.partaffinity.BlazeCacheKeyAssociator</class-name>
          </key-associator>
<partition-count>13001</partition-count>
<task-hung-threshold>360000</task-hung-threshold>
<task-timeout>360000</task-timeout>
<backing-map-scheme>
<partitioned>true</partitioned>
                    <read-write-backing-map-scheme>
                         <scheme-name>DBCacheLoaderScheme</scheme-name>
                         <internal-cache-scheme>
<local-scheme>
<expiry-delay>0</expiry-delay>
<high-units>3</high-units>
<unit-calculator>BINARY</unit-calculator>
<unit-factor>1073741824</unit-factor>
</local-scheme>
                         </internal-cache-scheme>
                         <read-only>true</read-only>
                    </read-write-backing-map-scheme>
               </backing-map-scheme>
               <autostart>true</autostart>
          </distributed-scheme>
          <distributed-scheme>
                         <scheme-name>blaze-distributed-EntitlementSummaryData</scheme-name>
                         <service-name>DistributedCache1</service-name>
               <serializer>
                    <class-name>com.tangosol.io.pof.ConfigurablePofContext</class-name>
                    <init-params>
                         <init-param>
                         <param-type>java.lang.String</param-type>
                         <param-value>/data/blazecache/config/SDR-coherence-pof-config.xml</param-value>
                         </init-param>
                    </init-params>
               </serializer>
                         <key-associator>
               <class-name>com.XX.it.services.sdr.blazeload.partaffinity.BlazeCacheKeyAssociator</class-name>
                    </key-associator>
                         <thread-count>40</thread-count>
                         <backup-count>1</backup-count>
                         <backup-storage>
                              <flashjournal-scheme />
                         </backup-storage>
          <partition-count>13001</partition-count>
                         <task-hung-threshold>360000</task-hung-threshold>
                         <task-timeout>360000</task-timeout>
                         <backing-map-scheme>
<partitioned>true</partitioned>
                              <read-write-backing-map-scheme>
                                   <scheme-name>DBCacheLoaderScheme</scheme-name>
                                   <internal-cache-scheme>
<local-scheme>
<expiry-delay>0</expiry-delay>
<high-units>3</high-units>
<unit-calculator>BINARY</unit-calculator>
<unit-factor>1073741824</unit-factor>
</local-scheme>
                                   </internal-cache-scheme>
                                   <read-only>true</read-only>
                              </read-write-backing-map-scheme>
                         </backing-map-scheme>
                         <autostart>true</autostart>
          </distributed-scheme>
<proxy-scheme>
<service-name>ExtendTcpProxyService</service-name>
<thread-count>5</thread-count>
<acceptor-config>
<tcp-acceptor>
<local-address>
<address system-property="tangosol.coherence.session.proxy.localhost"></address>
<port system-property="tangosol.coherence.session.proxy.localport"></port>
</local-address>
</tcp-acceptor>
</acceptor-config>
<task-hung-threshold>360000</task-hung-threshold>
<task-timeout>360000</task-timeout>
<proxy-config>
<cache-service-proxy>
<enabled>true</enabled>
</cache-service-proxy>
<invocation-service-proxy>
<enabled>true</enabled>
</invocation-service-proxy>
</proxy-config>
<autostart system-property="tangosol.coherence.session.proxy"></autostart>
</proxy-scheme>
          <class-scheme>
               <scheme-name>default-backing-map</scheme-name>
               <class-name>com.tangosol.util.SafeHashMap</class-name>
          </class-scheme>
     </caching-schemes>
</cache-config>
Thanks
sunder

Does ADF security support sub-roles? If not are there plans to support it?

hi,
I have following scenario: there are dozens of regions and each region has dozen of facilities and each facility dozens of offices.
I would like to setup Office roles to have Query permission only and create a new role OfficeUpdate role that has update permissions for this office data, and at the same time to inherit permissions from Office role (e.g. Query permissions), so if I assign a user to Office role he will be able to query only and if I assign him to OfficeUpdate role he will be able to query and update the office data because privilege will be inherited from Office role.
User can be a member of different offices/facilities/regions. So I would like to, in order to simplify user management, to be able to assign a whole role as a member of another role. By doing this I wouldn't have to assign users to different roles all over again (all users assigned to a sub-role would automatically become members of main role as well) as this is time-consuming.
But it seems that ADF security does not support this. It seems that ADF security can only deal with roles and not sub-roles? Roles and sub-roles are supported by oc4j container but it seems that ADF security does not support it.
I would like first to be sure that my observation is correct, and if yes to find out if there are any plans to support sub-roles in future Jdev releases?
And also if somebody knows, if Acegi or JsfAcegi security supports role-sub-role privilege inheritance?

I created a testcase that excludes ADF Security and the same behavior can be reproduced, so the problem doesn't seem to be with ADF Security but JAZN.
Need to further track this issue, but so far it appears that a member role is not sufficient to authenticate and authorize a container managed constraint as used by ADF Security for authentication. This could be a problem with the embedded OC4J only but also a general problem with settings on the system-jazn-data.xml. This is what I need to further evaluate.
So for now I can't say that this isn't working in ADF Security because its not even getting there
Frank

Can only see reports with Consumer Role

Hello. i am setting up shared folders for multiple LDAP groups. Regardless of the group, a user can only view a folder if i grant "Open" to the BI Consumer Role. We will be setting up shared folders for each department and would like only members in that dept to see the folder.
New Role: Warehouse (Only Member: LDAP Warehouse Group)
in the /em --> application policies, i did a create like on the BI Consumer policy and assigned the Warehouse role as the grantee.
Is there something else i should be doing?
Thanks in advance for any help,
Brian

You suppose to give folder permissions using manage catalog groups from answers administration
http://docs.oracle.com/cd/E14571_01/bi.1111/e10543/authentication.htm#BABFGGIG
http://www.varanasisaichand.com/2011/03/obiee-11g-security-creating-users-and.html#!http://varanasisaichand.blogspot.com/2011/03/obiee-11g-security-creating-users-and.html

Incorrect display Business Partner roles when creating Individual account

Hi,
The problem occurs in CRM 5.2. I have changed some business partner roles for both the business partner categories 'Organization' & 'Person'. My settings al correctly displayed in de SAP GUI but not in de webclient (my new business partner roles are only displayed correctly for 'Corporate Account' but not for 'Individual Account'.)
Does anyone has a clue?
Kind regards,
Nigel de la Rambelje

Hi Joost,
Thank you for your reply.
The issue is that different roles are displayed in the webclient compared to the gui.
For the business partner category 'Person' the following roles are displayed: Contact Person, Employee, Portal Provider & Sold-to Party (and which are the roles we would like to have).
But, if I create an Individual Account in the webclient, the following roles are displayed: Member, Patient, Physician, Portal Provider & Sold-To Party. The roles Member, Patient and Physician should not be displayed. Where are these roles defined? I would like to hide these roles.
Kind regards,
Nigel

Restricted Backup role

Hi all
I am new to MSSQL, so please be patient if my question sounds trivial :-)
We have an instance of MSSQL for development and the people normally do frequent backup/restore of databases (i.e. for upgrade of customer's production DBs, restore of production databases, etc..) via "sa" login. Note that we don't have a dedicated
DBA and we would like to avoid to dedicate a resource only for these trivial tasks.
Now we would like to restrict such security policy, like:
Remove DBA permissions to all users
Grant all users a specific role to backup/restore databases ONLY remotely (i.e. to/from \\192.168.xxx.xxx\mySharedFolder)
Restore only to the database where user is dbOwner
Would this be possible just by using security restrictions (not with stored procedures)? How?
I had a quick look to the Media sets config, but I couldn't figure out how to restric only to remote locations, and the dp_backupoperator doesn't seem to be configurable. Also the CREATE DATABASE permission is way to strong as we don't want a user to be
able to restore to any database, but only to his own.
Thank you!

Hello,
I just tried out Below on SQL Server 2012 where I created a procedure which did backup on local disks. Created a Login and user mapped it to a database gave user DB datareader and BACKUP DATABASE permission.
Procedure to backup database
USE [Database_Name]
GO
/****** Object: StoredProcedure [dbo].[BackupDatabase_Proc] Script Date: 10-10-2014 21:29:00 ******/
DROP PROCEDURE [dbo].[BackupDatabase_Proc]
GO
/****** Object: StoredProcedure [dbo].[BackupDatabase_Proc] Script Date: 10-10-2014 21:29:00 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
create procedure [dbo].[BackupDatabase_Proc]
@Dbname char(20),
@Location varchar(20)
as
Begin
declare @SQL NVARCHAR(500)
SET @SQL = 'BACKUP DATABASE ' + @dbName + ' TO DISK = '''
+ @Location + ''' WITH INIT'
exec sp_executesql @SQL
end
GO
After This I created Login and then user with same name and gave it data reader for database for which I need to take backup.
USE DATABASE_NAME
GO
CREATE LOGIN backupLogin WITH PASSWORD=N'backup', DEFAULT_DATABASE=[master], DEFAULT_LANGUAGE=[us_english],
CHECK_EXPIRATION=OFF, CHECK_POLICY=ON
GO
CREATE USER BACKUPLOGINUSER FOR LOGIN [backupLogin] WITH DEFAULT_SCHEMA=[dbo]
GO
ALTER ROLE DB_DATAREADER ADD MEMBER BACKUPLOGINUSER
After that granted execute permission on Procedure to User
GRANT EXECUTE ON BACKUPDATABASE_PROC TO BACKUPLOGINUSER
GO
GRANT BACKUP DATABASE TO BACKUPLOGINUSER
Well with above user have data reader privilege and can run procedure to take backup. Is this what you are looking for.
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it
My Technet Wiki Article
MVP

Windows Server Essentials Experience Role - Deployment in Active Directory Environment

Hello
I have a new domain with 2 x DCs working normally.
If I add the Essentials Experience role to a member server primarily for Remote Web Access, VPN and Direct Access, will this affect the existing Active Directory setup in any way? I see the Dashboard wants to manage everything including file shares,
user accounts, Office 365 etc., etc., Is this going to be more trouble than it is worth?
Are there any blogs or field notes about using the Essentials Experience Role in a standard Active Directory environment?
Advice appreciated

Hi Susan
Many thanks for your reply but I have already installed the Essentials Experience Role on a Windows 2012 Standard R2 member server OK.
You mention that the Essentials Role wizards do not support multiple DC environments - which any existing domain would be - so I am a bit confused!
Is this because the Essentials Role wizards automatically federate the on premise AD with Azure AD or something like that?
I am not sure how this role integrates into an existing corporate structure like MS says it does.
Any suggestions would be very much appreciated

Adding application roles as members to application roles

Hi, I 'm using jdeveloper 11.1.1.3 and i'm trying to assign an application role as a member to another application role, but only entrprise users and roles can be added.
The strange thing is that i can achieve that, at the deployed application, using enterprise manager. (and it's working)
Do you have any idea how can i do this ?
thanks
Tilemahos

JDev does not support application roles as members to other application roles in 11.1.1.3.0. We have added this support to the JDeveloper jazn-data.xml editor and you should see it in the next available patchset release. In the meantime, you could do this yourself in the xml editor.

Roles of BW member

Similar Messages

Maybe you are looking for