Tracking USER GROUP changes

Hi All,
I have two questions regarding user groups:
1) How to find out who has created/changed a particular user group?
2) Is it possible to transport user groups?
Thanks,
Vijaya

Hi Vijaya,
as 'usergroups' are non-critical, there seem to be no changelogs for usergroups. So you could track changes only, if you switch on table-logging for the usergroup table.
The table name is USGRP.
To transport usergroups, just transport tablecontents of table USGRP.
(R3TR TABU).
b.rgds, Bernhard

Similar Messages

User-Groups Change history

Hi,
Does SAP system maintains the user-groups change history in any tables. Like it does for users in USH* tables.
Is Group Creation date, etc is recorded in any table ?
If user-group description is changed, is it recorded in any tables ?
Any pointers would be a great help !!!
Thanks & Regards,
Chandrasekhar.

You could check the USGRP* tables to see if any relevant information is present. Hope this helps.

External table authentication not updating user group changes

Hello
I have a question..
In OBIEE, i am using external table authentication. I have user and user group tables where users and groups are stores.. Every Time I create a new user and assign them to a group, these records get inserted immediately to these tables with the correct user and group ID that matches with each other.. Then in my initialization block I have the query that fetches the user name and psswd as well as groups names..
All these are working at the initial user creation. For example, when I create user A and assign it to group A, the DB table has all of the records inserted correctly. When I log in to OBIEE using User A login, I see it is assigned to Group B.
The problem comes when I change the user A from Group B to Group C. When I did that, although the DB table gets updated correctly, OBIEE session seems to still be the previous one. As a result, when I log in the second time, I see the user A is still assigned to Group B instead of Group C.. This seems to be cached..
I double check these user tables in OBIEE, none of them are cache enabled.. The connection pool setting of the isolation level is set as default..
When I reinstall OBIEE all over again and re-log in the first time, this User is now assigned to Group C..
So seems to be that it is caching issue.
How should I go about solving this issue
Appreciate in advance

Make sure you check the box for 'Required for authentication' and also 'Use caching' should not check.
Edited by: Srini VEERAVALLI on May 15, 2013 9:05 PM

4.0.8.2.4 Cannot start listener after changing user/group to nobody/nobody

Installed OAS 4.0.8.2.4 and configured it. Everything is working fine with listener, plsql cartridge, Java cartridge and OSSWA. But if change listener's user/group from Oracle/Dba to nobody/nobody. Listener will not start. It hangs in as follows:
========================================================================
Information: Listening on NORM port 80 address 0.0.0.0
Information: wriorProcessInit: RMProxy IOR Bootstrap Service initialized
Information: Adapter services initialized successfully
Information: The server started successfully
Server now running as process 15654
OWS-08850: Oracle Web Listener 'www' started.
Oracle Web Listener 4.0.8.2.4 Enterprise Edition - Release (Domestic)
Copyright (c) Oracle Corporation 2000. All rights reserved.
Information: Listening on NORM port 5502 address 0.0.0.0
Information: wriorProcessInit: RMProxy IOR Bootstrap Service initialized
===========================================================================
from the message above, we can see if it failed to start the "Adapter services"
If we change the user/group back to Oracle/Dba, it starts fine.
And also, we have under $ORACLE_BASE/admin, the listener ( name devl ) permission has been changed accordingly to the user/group change. We follow the instruction from OAS configuration to change user/group.
( Read access to the configuration file
Read access to all files that provide content for servicing requests
Read access to all imagemap files
Execute access to all Oracle Application Server binaries and program files that the Web Listener must execute
Write access to the log and error files
Read access to user directories )
Thanks.

Thanks. After a few more days testing. We finally figure out where it went wrong. We changed user/group from node manager. ( from Oracle/dba, installer, to nobody/nobody). After that, we only changed $ORACLE_BASE/admin/ows/SITE_name/httpd-host_name/listener_name to be read and write accessed by nobody. We forgot to change owl.cfg to be read access to nobody/nobody. After we changed that. It starts fine.
Thanks again.

Track user changes in customized transparent table

Greetings..
How do i to track user changes in my table ? is there any master table that keep track changes made by user on the specific field.? Is there possible if the table have the original and changed data.

i got the below explanation from other thread, which has explained by an expert, so, take it as reference and interprete according to ur req.
BEGIN
Table Events:
Go to SE11 and open your Ztable
click on the Table maintenance generator.
you can find the function group. right
Take the Function group name and go to Tcode SE37
and open the Function Group.
In the Status of the small window of the Function
group display
you can find out change requests , Main program and
Function group Docu tabs.
Click on Main program and create user defined Include.
check the sample code below
Click on main program
Create user defined include
User-defined Include-files (if necessary). *
INCLUDE LZPHIRF... " Subprograms
INCLUDE LZPHIRO... " PBO-Modules
INCLUDE LZPHIRI... " PAI-Modules
Create the below include.
INCLUDE LZPHIRI01. " PAI-Modules
Double click on the Include name. you have the below
code
Loop at Extract.
module liste_init_workarea.
chain.
field fild1
field fild2
field fild n
module set_update_flag on chain_request.
You have to add a new module here
check the below code
*----User defind module
Module user_defind_validation.
endchain.
Double click on module write code in that.
Include <Include Name> *
*& Module user_defind_validation
Module user_defind_validation.
Here you can write your own validations.
field2 = field1 /2.
field4 = field1 /4.
if field4 field3.
message.
endif.
EndModule. "user_defind_validation
Events allow you to change the generated table
maintenance dialog at predefined positions, which
cannot be reached by user modules in the screen flow
logic.
The user routines are called dynamically at runtime.
For this reason, the routines must be in a user include
in the table/view maintenance dialog function group.
All extended table maintenance global data is available.
An interface is only required for events 22 and AF.
The events can be additions or replacements.
Additional events
Event 01 before saving the data in the database
This event occurs before new, changed or deleted
entries are written to the database
FORM abc.
DATA: F_INDEX LIKE SY-TABIX. "Index to note the
lines found
LOOP AT TOTAL.
IF <ACTION> = desired constant.
READ TABLE EXTRACT WITH KEY <vim_xtotal_key>.
IF SY-SUBRC EQ 0.
F_INDEX = SY-TABIX.
ELSE.
CLEAR F_INDX.
ENDIF.
(make desired changes to the line TOTAL)
MODIFY TOTAL.
CHECK F_INDX GT 0.
EXTRACT = TOTAL.
MODIFY EXTRACT INDEX F_INDX.
ENDIF.
ENDLOOP.
SY-SUBRC = 0.
ENDFORM.
END
thanq

I have a Mac Pro using Lion, with a SSD for system. Restored drive from backup. Now logon password doesn't work. Account password still works. Changing password in user group preferences no longer works to change logon password.

I have a Mac Pro using Lion, with SSD for system drive. Drive stopped booting, but otherwise appeared healthy. Restored from system backup. Now drive seems to work properly, BUT my logon password no longer works. Password OK for account; can access system preferences, and change user password there BUT logon still refuses to accept password. No luck changing password for that account after adding new administrator account and logging on from that account. Suggestions? Thanks.

If you redirect Accounts to another location (not on the Boot Drive) you need to direct them back there again after a restore.
SystemPreferences > Accounts/User&Groups > ...
... Unlock the lock, then hold down Control as you click on an Account to get access to the Advanced Options pane.

SAP Query, user groups, revoking 'change' rights

Hi,
I have a problem regarding SAP Queries and revoking the change rights. This is what I have done:
1. Created the new user group in SQ03
2. Created the new InfoSet (SQ02), assigned it to the above UG (SQ03)
3. Created the new user, assigned it to the UG in SQ03 and removed the Change checkbox (revoke change rights)
4. Logged on as the new user
5. Started SQ01, switched user group to the new one
6. Created the new SAP query based on the new InfoSet, run the query
As I understand the principles of user groups and queries, I wasn't supposed to be allowed to do the step 6 as the new user, as it was revoked the change rights. Why wasn't I stopped?
I searched for reply in previous posts - everybody agrees on principles, but I didn't find explanation on why it doesn't work.
Thanks in advance!
KR,
Igor

The table AQGDBBN seems to display a mapping of User Group with use rindeed but the results are less than the actual assignment. And the mapping does not have the Z query usergroups that have users assigned in SQ03.
Anything that I may be missing?
Thanks,
Kashif

How to change user group of a query (sq01)

Hi,
I'm working with SAP Queries (SQ01) and I don't know how can I change the user group assignation of a query. We did only one user group for all users and queries and know in order to arrange it a bit we've created three user groups.
We know how to assign users to new user groups but for each query of the old group we neet to move it to one of the new user groups, how could we do this?
thanks in advance

Hi
pls go through these links
http://help.sap.com/saphelp_46c/helpdata/en/35/26b413afab52b9e10000009b38f974/content.htm
Step-by-step guide for creating ABAP query
http://www.sappoint.com/abap/ab4query.pdf
ABAP query is mostly used by functional consultants.
SAP Query
Purpose
The SAP Query application is used to create lists not already contained in the SAP standard system. It has been designed for users with little or no knowledge of the SAP programming language ABAP. SAP Query offers users a broad range of ways to define reporting programs and create different types of reports such as basic lists, statistics, and ranked lists.
Features
SAP Query's range of functions corresponds to the classical reporting functions available in the system. Requirements in this area such as list, statistic, or ranked list creation can be met using queries.
All the data required by users for their lists can be selected from any SAP table created by the customer.
for more information please go thru this url:
http://www.thespot4sap.com/Articles/SAP_ABAP_Queries_Create_The_Query.asp
http://goldenink.com/abap/sap_query.html
Please check this PDF document (starting page 352) perhaps it will help u.
http://help.sap.com/printdocu/core/Print46c/en/data/pdf/BCSRVQUE/BCSRVQUE.pdf
check the below link will be helpful for u
Tutorial on SQVI
once you create query system generates a report starting with AQZZ/SAPQUERY/ABAGENCY2======= assing this report to tr code for the same

WGM creates new home folders with _unknown user/group, SA can't change it

A little background:
In our school we've got an xserve (about 1.5 yrs old), that was having issues last year. (the OD database pretty much ate itself). in august we did a clean install of 10.5, and updated to 10.5.3 (after suffering through the AFP/OD issues in 10.5.2). Because of the corrupt database from the last server, and the fact that a large number of our accounts have migrated through 4-5 iterations of servers from 9.2 on through 10.4.11, we created all new clean accounts by hand in WGM and moved the user files to the new home folders, changed user and permissions with SA to the new accounts and propogated that info to all the files for each home folder. everything has been going fine since then.
until this week.
the issue was discovered when we tried to create a new staff account (we created several accounts last week with no issue). in WGM everything looked fine. it created the account, assigned it to the proper group, and sucessfully created a home folder. the problem however was when we went into SA to change the permissions. we don't need everybody seeing everyone else's files, so we change the default group and everyone permissions to something more appropriate (don't even get me started on that gripe). When you navigate to the new home folder you just created in WGM, it shows the owner as _unknown (read/write) and group _unknown (read only... I think), Everyone (read only). Server Admin refuses to change the user or group. doesn't matter whether you use the 'show users/group' dialog and drag the account, or whether you edit it manually and insert the short name or UID. when you hit save, it stubbornly reverts back to unknown/unknown for user and group. we've tried creating accounts with different templates, no template, different account names and UID's, all with the same result.
The odd part is that nothing in the OS has changed since we first set it up and created all the users. nothing installed, nothing updated...
We've stayed at 10.5.3 due to the disaster in one of the updates (10.5.5 I think) that many of our other local districts had with network accounts not being able to see their own library folders due to permission issues, as well as the AFP causing 100% CPU use bug reported with 10.5.5
A second, probably related issue is that when browsing home folders in Server Admin filesharing, any files our network users create seem to end up assignedunknown/unknown for user and group (as far back as October it seems). After searching around the net most of the day I came across a lot of info about the _unknown user issues for folks upgrading from 10.4, but these are all newly created 10.5 network users (not local) logging in and working in home folders on the server. The original owners can read/write/delete these files as normal.
Any help would be most appreciated.

ok... I find we were shot in the foot by one of our own.
The quick answer: DO A GET INFO ON THE VOLUME WITH THE SHAREPOINTS! if the 'ignore permissions on this volume' box is checked... UNCHECK IT!
Explaination: not sure how the ignore permissions box got checked, but I don't think it was done directly by human hands. we use Carbon Copy Cloner Ver. 3.something (not sure which at this point) to back up both our data (daily) and server (weekly) drives to remote storage. by striking coincidence, things started saving with _unknown user and group about the same time as crash reporter shows that CCC hosed itself. My guess is that CCC temporarily ignores permissions (as shown in the status when you do a clone) and then resets them to their original state. when it crashed, it looks like they were still set to ignore, so it happily set it back to that state every time it ran after that. not sure why the account creation issue suddenly turned up after so long... In any event, it turns out that if you have sharepoints on a server volume, AND you set the OS to ignore permissions on that volume, BAD things happen (I'm not sure it should even be an option on a shared volume, but that's for the engineering folks to figure out.) .... specifically, the symptoms above. if you login as root (yeah, I know that's something you should never do) and uncheck the ignore permissions box on the volume, then log into WGM, as root (yeah, yeah, I know... even worse) and set ALL of the Directory Administrator accounts to 'do not administer this server', and no change rights for the directory, save those settings, and then set them back to 'administer this server', and FULL rights to change the open directory, save again. and then WAIT until the drives stop going nuts... after that everything works fine.

Subcribe a Portal User Group to content change events on page?

Another developer at my shop has created a custom routine that programmatically subscribes the given user to content change events on a page. At the heart of their custom routine are the following Oracle Portal API calls:
portal.wwctx_api_private.set_context( v_user );
portal.wwsbr_app_approval.subscribe
p_object_context_id => v_siteid,
p_page_id => v_pageid
...where v_user is the account we want to subscribe for notification of content changes on the given page.
I have a need to extend this to allow subscriptions of Portal User Groups (PUGs) for the same content change events. It is not acceptable to statically subscribe the PUG membership, because I do not want a situation where today I subscribe all the members of group X, then tomorrow the membership of group X changes, but the list of subscribed users does not change automatically with the group membership modification. I could just as well manually subscribe each group member without going through the hassle of coding a modified subscription UI and backend routine to handle groups.
Any suggestions?
Thanks,
shastew

My shop is currently on 10g R1 (9.0.4.3). We will be upgrading to 10g R2 (10.1.2) in a few months, but this is not the 10.1.4 version your document link points to. Is CMEF included actually usable in 10.1.2?
Also, publish and subscribe solves a particular set of design issues and allows for a certain degree of flexibility of usage, however, I don't see any built-in support for the User Groups that Portal provides for assigning basic page permissions. It's the group support that I'm interested in...and I don't want to have to create duplications of groups outside of what I already have. I don't want to have to write an entire application infrastructure to support outside group membership maintenance just for supporting subscription notifications. This should have already been built-in to interface with the existing Portal page permissions group framework. At our shop, a lot of effort has already been put into setting up and maintaining these built-in groups and we should be able to re-use them for something as brain dead simple as subscription notification.
I've already given up and opened an enhancement request "TAR" for this.
shastew

AD Group Change, Can this be made User self requestable in oim?

Hi,
We have a typical requirement where in end user will be requesting for a group change in AD, on Approval he is made member of the group he requested.Can any one suggest how this can be achievable. Any pointers on this is highly appreciated.
Thanks in Advance.

Hi all,
I had this same requirement (Approval process for AD group assignment). So, I have implemented the process you have defined. It is working fine except one problem.
When I add the first OIM group(group A) to OIM user, it will fire an approval process(using Access policy) and after the approver approve it, RO ("AD Group Resource") will be granted to the user. Also, ad information will be updated through my custom code.
But, if I then try to add another OIM group(group B) to the same OIM user, OIM will just assign OIM group to this OIM User. other than that, OIM will not do anything. No approval process will be fired.
(Note: There is no error in the implementation. i.e. if I try to do this in the other way around, i.e. first add the group B and then add the group A, same result. Information regarding assignment of group B will be updated on AD and RO will be granted. But, assignment of group A would not do anything)
Please help me regarding this issue.
Regards,
Chaturanga

Why do we change the user group when doing LSMW?

Hi experts,
I just wanted to know why do we change the user group Tcode SU3 when we are doing upload of data using LSMW?
Thanks,
JEss.

As Rajesh suggested if you are uploading data for action in which infotype group is based on User Group then you need to change User group.
Otherwise there is no need to change user group for using LSMW.
Rgds,
Lata

"You are not authorized to change users in user group XY"

Hello,
I ran a report. Within that report, a BAPI is called. It's name is user_change.
That BAPI enables you to change user details like passwords and so on...
When I tried to change the user's password, an error message occured.
"You are not authorized to change users in user group XY"
The user belongs to the group XY.
After an unsuccessful pwd change, there is no SU53 file!
So how could I solve that?
Could I explicitly define for which user groups, passwords can be changed?
Any other ideas?
Thanks a lot in advance,
holger

Hi Holger,
May be they might have restricted to change password. See <a href="http://www.sap-basis-abap.com/bc/restrict-role-to-unlock-lock-change-password.htm">this</a> for more details.

How to change the groupType attribute of a user group object?

I'm trying to change the "groupType" attribute, of a user group object, from 'Distribution' to 'Security' (and the group scope is set to 'Global').
The CAD bit mask value needed would be: 0x80000002 (Decimal -2147483646).
How to change/modify the "groupType" attribute for this user group object?
Thanks,
UD

Attribute attr= new BasicAttribute("groupType", "-2147483646");
items[0]=new ModificationItem(DirContext.REPLACE_ATTRIBUTE, attr);
ctx.modifyAttributes(dn, items);
--does not work.
javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 00002141: SvcErr: DSID-031A0B56, problem 5003 (WILL_NOT_PERFORM)
Is it possible to modify it?
Thanks,
UD.

Collaboration Drives Innovation as China Oracle User Groups and Oracle University Work Together to Change Lives

Check out the latest Customers in the Know blog post where Jim Jiang shares the story of an innovative program launched collaboratively by the China Oracle User Groups and Oracle University.
https://blogs.oracle.com/customersknow/entry/innovation_and_collaboration_at_its

Check out the latest Customers in the Know blog post where Jim Jiang shares the story of an innovative program launched collaboratively by the China Oracle User Groups and Oracle University.
https://blogs.oracle.com/customersknow/entry/innovation_and_collaboration_at_its

Tracking USER GROUP changes

Similar Messages

Maybe you are looking for