Synchornized automatically roles into CUP from Backend

Hi all,
We would like to synchronize the roles between backend and CUP both periodically and automatically.
We have only RAR and CUP modules in our GRC.
We can synchronize the roles between CUP and backend by executing regularly the import role job in CUP from Configuration->Roles ->Import Roles or roles could be loaded from backend.
But we are looking for a way to synchornized automatically a list of roles into CUP from backend. It is possible?
Thanks in advance
Marta

Hi Marta,
nope, unfortunately there is no feature to do so.
Best,
Frank

Similar Messages

CUP SP12: Can no longer import roles to CUP from ERM

Hello All,
I can no longer import roles from ERM to CUP on SP12. What is going on with SP12? Error message: "Action failed."
Log info:
2010-06-14 14:13:52,933 [SAPEngine_Application_Thread[impl:3]_20] ERROR
com.virsa.ae.dao.NoRecordsFoundException: No Records Found ..
com.virsa.ae.dao.NoRecordsFoundException: No Records Found ..
at com.virsa.ae.dao.dto.LocaleFieldContainerDTO.getRecordsList(LocaleFieldContainerDTO.java:127)
2010-06-14 14:13:52,935 [SAPEngine_Application_Thread[impl:3]_20] ERROR com.virsa.ae.configuration.ConfigurationException: No Records Found ..
com.virsa.ae.configuration.ConfigurationException: No Records Found ..
at com.virsa.ae.configuration.bo.ImportRolesBO.upsert(ImportRolesBO.java:979)
Is anyone else running SP12 with CUP & ERM?
Best Regards, Dylan

SAP came back and mentioned that I had some role descriptions missing (empty value) and this was causing the issue.
The results vary by role type:
1. SINGLE roles CAN be imported successfully to CUP from ERM with missing role descriptions.
2. DERIVED roles CANNOT be import to CUP from ERM if the role description is missing.
The solution is to update the DERIVED roles with role descriptions. It's always good practice to have role descriptions for all roles, but many customers have different views on the importance/usefulness of role descriptions.
This didn't appear to be an issue before SP11, but oh well... Also, since the Role Description field in ERM is mandatory, the mass role import should not allow roles to be imported with missing role descriptions, but it does. I've mentioned that to SAP as well.
I'm going to close this thread as solved, with workarounds.
-Dylan

How to pull Roles and Policies from backend using SQL query in OIA

Hello,
I have Roles and Policies defined in OIA with mapping each other and there is no direct extract report from OIA Web console.
Is there any oracle SQL query by which we can get the data and filter the Policies based on the role ?
Note: We have one Role having more than one Polcies defined in OIA.
Appreciate your help.
Thanks

I am quoting this from MOS Doc Id "Why would multiple session records be present in the User Sessions screen in P6 Web, and why might some of them have different IP addresses? (Doc ID 1600172.1)"
Multiple sessions show up for users since different sections of P6 Web have their own sessions associated with them. If a user is authorized to use multiple areas of the software they will have multiple sessions each time they log in. Additionally, if users are closing their browsers before logging out of P6 Web Access you might see some past sessions still appearing in the list. These will eventually be cleared out by background jobs, however you can also reset the sessions in the software by clicking the "Reset User" link (Administer > User Sessions > Manage User Sessions), or by choosing the "Reset All Users" link (Administer > User Sessions > Manage User Sessions) to do this for all past sessions.
Multiple IP addresses for sessions can happen when a user logs in from different machines. For example, a person may login at their desk, but then go to a colleagues workstation to discuss a project, and log in from there. Doing so will leave them with multiple IP addresses in the session records.
Hope this helps
Regards,
Sachin Gupta

Description issue: Role Import in CUP from ERM

Hi All
While importing roles from ERM in CUP, the description column shows some numeric values in some strange sequence (like 0,1,10,100,1000,1001,1002,1003, and so on). In ERM, roles were uploaded from backend using Mass role Import and Role description are properly available there. For the roles created in ERM itself, correct description is available, when imported in CUP.
Not able to understand this....Please suggest
Thanks
Abhijeet

Hi Abhijeet,
I have found out the cause of this issue.
This issue is coming for those roles which doesn't have detailed description in ERM.
In ERM you can see role name, Role description and also role detailed description.
If the role's detailed description is null in ERM then after importing that role into CUP the description of that particular role will become four digit numeric character. So, We can't say it is a bug because the program is witten like this.
You can see this detailed description in role in the backend ECC system using pfcg.
I hope you understand the point what I wanted to say.
Thanks,
Sudip

GRC 5.3 CUP SP16 - User info not loading from LDAP into CUP

Hello,
We have multiple LDAPS that we needed to connect to our CUP system to authenticate the userids before a request can be created for them. And also to bring in Manager ID and manager email from LDAP as the first level approver for requests.
My client hasn't maintained the actual LDAP userids, Manager and manager email fields correctly, so we utlized three other custom fields in LDAP and then did field mapping in CUP for those fields. But even when the connection to all the LDAPs is successful, there's no user information being pulled in from LDAP into CUP. I noticed that when I use our backend SAP QA system as 'User Data Source' while using multiple LDAPS for 'User Detail Source Data' , it only reads data from SAP QA system SU01 area and even when I'm trying to create requests, no Manager info is being pulled from LDAPS for that user id.
SAP does not allow the use of multiple LDAPS for the configuration-->User Data Source , top option. So, if a client has userids in multiple systems, it can only read from one data source. But even when I temporarily assigned one active directory LDAP to the 'user data source' option, it stated, no records found. So, something is up that no data is being pulled from LDAPs even when the connection to those systems is successful. I just asked our AD guy to temporarily assign domain admin rights to that LDAP connection ID to see if it's access issue, and still I am not getting any LDAP data to read into GRC CUP.
Anyone else has had this issue? Is there especial access that the LDAP connection id needs access in LDAP to be able to retreive data into GRC? Is there any jobs that need to be run to read LDAP data. I thought it should be live as the system is connected to LDAPs. I don't understand if the connection is successful, why the user info is not being pulled from there and even after the LDAP custom field mapping is done, those field values are not showing up on requests.
We need the following to happen:
1). Authenticate the custom userid field in LDAPs to ensure this user exist as an employee b4 request can be created for the user. For this I have configured the multiple LDAPS for the 'Authentication'. But it doesn't seem to confirm that option when creating a request for a user.
2). The user details info source should bring in the custom manager id and manager email into the request to send the first level of approval via workflow to that manager. Since SAP doesn't give the option to define approvers per user group values in CUP, we had to actually map all the User Owner approvers this way since their direct managers are not aware of what to request as the User owner approvers per user group are. So, we added custom fields for Manager id and Manager EMail into LDAP to be ready automatically into the request when reading user id while creating request.
I will greatly appreciate anyone's help on how they got the LDAP field values to be read into GRC CUP for request processing and what type of encripted access can a LDAP connection id have without assigning it complete domain admin rights on an open port 389 for LDAP and GRC CUP connection.
Thanks and Regards,
Alley

Hi Alley,
1). Authenticate the custom userid field in LDAPs to ensure this user exist as an employee b4 request can be created for the user. For this I have configured the multiple LDAPS for the 'Authentication'. But it doesn't seem to confirm that option when creating a request for a user.
This is not possible. You can have only 1 LDAP. Why you want to authenticate the user in different sources?? CUP looks at only one user source, not many. The below wiki explains you the configuration part:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b089fb71-a3b7-2a10-64a2-8c77243b0664
2). The user details info source should bring in the custom manager id and manager email into the request to send the first level of approval via workflow to that manager. Since SAP doesn't give the option to define approvers per user group values in CUP, we had to actually map all the User Owner approvers this way since their direct managers are not aware of what to request as the User owner approvers per user group are. So, we added custom fields for Manager id and Manager EMail into LDAP to be ready automatically into the request when reading user id while creating request.
Based on user group is not possible. However, if you wish to maintain the Manager's Field, ensure that the CUP mapping is done correctly from the Configuration, Field Mapping, LDAP Mapping.
While defining the workflow, take the approver determinator as Manager. This will route the request to the users manager. Also, ensure that LDAP is the source in all the confiuration areas in CUP.
Check note 1228996 for more information.
Hope this helps!!
Regards,
Raghu

Each time I create a new album in IPhoto, photos from another album or from photo stream are automatically dumped into the new album.. how do I create a blank album and then import photos from a flash drive into the new album?

each time I create a new album in IPhoto, photos from another album or from photo stream are automatically dumped into the new album.. how do I create a blank album and then import photos from a flash drive into the new album?

just import the iPhoto
Surely you meant "just import the photo"? The Spell checker is dangerously creative !

Nsslapd-state automatically switching from backend to referral on update

Hello,
I recently separated 4 instances of DS5.2 which used to be on the same machine on 2 different servers (one master & one slave by server).
The first master is working well (including replication on all 3 other instance) but the second master always switch is state (nsslapd-state) from 'backend' to 'referral on update' and never replicate on other LDAP's instances.
I first think of a backend's data problem and try to copy backends from the first master to the second (with binary copy, ldif2db, bak2db, ...) but wihtout any result.
Then I delete my replication agreement and recreate them but without anymore result.
I don't understand why it isn't working (and the 2 servers are binding each other because the first master's replication works well);
Please help me !!!!!
Julien

There is one button which is available on the right pane after master is initialized, under:
"Data" -> "sufix dc=XYZ,dc=com" -> "Replication"
I don't remember the name on the button but it is someting like "start accepting updates".
Read the following two topics at
http://docs.sun.com/source/816-6698-10/replicat.html#14962
* Convergence After Multi-Master Initialization
* To Begin Accepting Updates Through the Console
To Begin Accepting Updates Through the Console
Follow these steps to explicitly allow update operations after the initialization of a multi-master replica:
On the top-level Configuration tab of the Directory Server console, expand both the Data node and the node for the replicated suffix, and select the Replication node below the suffix.
In the right panel, the console will display a message indicating that the replica has been initialized and is currently returning referrals for update operations. If this message indicates the automatic referral delay is enabled, you may still follow this procedure to override the delay.
Use the insync tool to ensure that the replica has converged with all other masters. Replicas are in sync if the delay between modifications on all servers is zero or if the replica has never had any changes to replicate (delay of -1). For more information, see "insync" in Chapter 1 of the Sun ONE Directory Server Reference Manual.
Click the button to the right of the message to start accepting update operations immediately.

NW 7.3 and roles from backend instances

Hi
I'm trying to find out more information about roles from backend instances in NW 7.3. In particular how the roles are synchronised with changes that may occur to the roles in the backend (ie role changes or users allocated to the role).
I haven't been able to find this kind of details in SAP Help or SMP.
Thanks
Doug

Hi,
I did face the same problem when i first configured AS JAVA system and really struggle and grease my elbow to get it working.
I would advise your to upgrade to latest SP level, SP03 and also the CIM and CR Content for SLD to eliminate all possible bugs.
However you can try as below:
1) go to SMSY -> search for the SID instance
2) Highlight the SID and click "Change"
3) Technical system editor will prompt out, and you'll see no Product Version and Product System assigned.
4) Next, navigate to software component and click on "Software Component Versions" and assigned the correct product instance by click the fitting SC proposal. SAVE and leave the page.
5) Now, go to SOLMAN TX: LVSM and webdynpro will display
6) Ensure the Landscape verification job is full sync and completed. Else, you can trigger using LVSM_LOAD.
7) Go to tab "Errors Warnings" and look for the SID, and you'll see that product instance SID is not assign to a product system.
8) on the same page, click "Add product system" and select the correct product and product version. For eg: Your product is Netweaver EHP2 you should first assign product as SAP Netweaver, and Version is EHP1.
9) Select the correct SID and correct Product Instance on the next screen, click Finish and SAVE once done. Remember, you can only select ONE PRODUCT INSTANCE HERE!!
10) Now, go back to Technical System Editor and change the entry for the particular SID.
11) Here, you can see the Product Versions and Product System is filled on the main object. Check all your entry and save is everything is correct.
12) Go back to SMSY, and you should able to see the SID is populated under the correct Product and Product Version.
13) Now in SMSY, you should able to change the data for Product System such as assign Installation no, read system number, sync with SAP and etc.
Hope it helps,
Cheers,
Nicholas Chang

How to Update PO's Automatically from Backend..

I want to approve PO's which are in Process or requires Reapproval from backend..
Can Anybody help??

I have created a invoice and updating payment details.
I just need small information regarding payaments.
After invoice we create payments using validate, pay in full.
But What actually happens when we do validate and pay in full.
and what are the fields and tables effected in this process.FAQ: Common Tracing Techniques in Oracle E-Business Applications 11i and R12 [ID 296559.1]
R12 Docs
http://docs.oracle.com/cd/E18727_01/index.htm
eTRM
http://etrm.oracle.com/
Thanks,
Hussein

Excel Output appears in IE after submitting XDOREPPB from backend

Hello,
I have submitted the XML Report Publisher request with Output Format = EXCEL from Standard Request Submission and after completion clicked View Output, it asks me to save the file as EXCEL format.
While doing the same exercise from backend, it doesnot ask me to save type as EXCEL, rather it automatically opens in the Browser (Internet Explorer).
I'm using the following piece of code
--To Set the layout
x_add_layout:= FND_REQUEST.ADD_LAYOUT(Template_appl_name=> v_application_name
,Template_code => v_template_code
,Template_language => 'en'
,Template_territory => ''
,Output_format => 'EXCEL');
--Then submitting the request
v_xml_request_id :=fnd_request.Submit_request('XDO'
,'XDOREPPB'
,FALSE
,v_request_id
,20015 --application
,'GEPSJENFNDSCURS' --template
,'N'
,'RTF'
,'EXCEL'
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL);
I'm wondering if this is a issue with BI Publisher (5.6.3) or Oracle EBS (11.5.10.2).
Please help.
Thanks & Regards

Hey Iam also getting this problem..by using xdoreppb I am getting the output in excel format but not getting the data populated into that..
Please help if you have any solution

Roles in CUP

Hi,
We imported all the roles from SAP into CUP. CUP however requires certain mandatory fields e.g. Role Approver, Business Process, Functional Area, etc which we would like to use. Does this have to be maintained in CUP? I know you can export the roles in excel, update the file and import back to CUP. Can this be maintained in SAP when creating the roles?
The reason I ask, what happens if new roles are maintained in SAP, a sync is done to CUP but someone forgets to maintain these mandatory fields.
Please advise.
Regards,
Mo

Hi,
Thanks for the prompt reply.
We are not using ERM. We are also in the process of a role redesign. I understand that it is best to use the excel and that is the approch we are taking. However, in event that the implementation is complete and new roles are created in SAP, what is the best practice to keep CUP clean (i.e. include fields like Functional Area, Business Process, etc).
Regards,
Mo

Restricting users from backend changes

Hello,
I have some users who keep doing the changes from backend without going into the application ( Forms 10g Frontend). I want to restrict all users to change the data from backend so that whenever they use sqlplus they can't change the records in the tables. But whenever they are running the application ( Oracle forms) they should be able to change(insert/Update/Delete) the records in the table. Any suggestion how can I make this happen.
Thank you.

Assuming the users dont have the schema owner password and have to log into their own accounts in sqlplus.
grant a role to the user identified by a password. Dont tell the users the password. :)
grant select, insert, update, delete, execute permissions to specific tables, functions, procedures to the role.
When the users go into sqlplus they wont be able to do anything until the role is enabled since it has a password. Remember, they dont know the password so they are not going to be doing much.
In your pre-form trigger do this to enable the role so they can do things.
Check to see if the currently logged in person has the role assigned..
SELECT GRANTED_ROLE
FROM USER_ROLE_PRIVS
WHERE USERNAME = my_username_variable and
granted_role = 'MY_ROLE';
if they do have the role then do this...
DBMS_SESSION.SET_ROLE('my_role IDENTIFIED BY my_password');
Now they can insert, update, delete and so on from the form.

Importing CRM roles into Portal

Hi All,
I am using CRM-5.0 as backend and ER-6.0 with it. Both of them are sharing the same datasource. But if I create a new role in CRM I can't find it from portal. Whereas the users created in CRM are visible in portal. How can I import all the roles available in CRM to portal? My System landscape is working properly.
Thanks
Indranil Datta

Hi Indranil
SAP/CRM roles are built with transaction PFCG. Portal roles are built using portal tools. They have no direct connection.
In theory you can upload SAP/CRM roles into the portal to become portal roles, but what do you gain? Every time you change the SAP/CRM role you need to upload it again..
You are better to make portal roles that are assigned to portal groups that are the same as the PFCG roles. Maintain the portal roles manually, probably with a subset of the all the functions in the CRM role and assign them to the portal group that represents the FCG role.
Cheers

Upgrade CUPS from 8.5 to 9.0 ? Is it possible ?

Hi,
is it   possible to upgrade directly CUPS from 8.5 to 9.0.
when i do it, i get the following error :
Error encountered: Version mismatch. Please switch versions on the publisher and try again
after checking logs :
I found that :
ERROR: The CUCM Publisher must have 9.0 installed before upgrading CUCM IM and Presence to 9.0.1.10000-21|<LVL::Info>
12/14/2012 01:13:52 upgrade_manager.sh|       CUCM Publisher currently has installed:|<LVL::Info>
12/14/2012 01:13:52 upgrade_manager.sh|            Active Version:   |<LVL::Info>
12/14/2012 01:13:52 upgrade_manager.sh|            Inactive Version: |<LVL::Info>
Please note that CUCM is already on version 9.0 active partition.
Regards
Driss

Hi,
The problem is resolved.
There was something wrong into etc/hosts file.
the new message is :
12/14/2012 15:06:22 upgrade_manager.sh|CUCM new_version check passed.   ACTIVE:9.0.1.10000-37, INACTIVE:8.6.2.21900-5|
Thank you very much for your help.
From GUI, I always got that all was fine (refer to following screenshot)
Best Regards
Driss

My documents on pages have been deleted from my ipad. I have logged into icloud from a windows computer and can see all my lost documents, but cant seem to get them back on my ipad. HELP!

I opened up my pages app and the document i needed opened up automatically, i turned away from my ipad to log onto my computer only to find when i look back at my ipad that ALL my documents have been deleted!! It is very important i get these back as i have an assignment to hand in tomorrow and ALL my revision is on their for my exam in 4 days time. please please please help me get my documents back onto my ipad? I have logged into icloud on my computer and can see the documents but cant work out how to get them back on my ipad???

http://support.apple.com/kb/HT5824?viewlocale=en_US&locale=en_US

Synchornized automatically roles into CUP from Backend

Similar Messages

Maybe you are looking for