User Creation-Access Denied

Hi All,
I Have Requirement  some thing like this.
we are using EP 7.0 SP 9 (Not configured with any directory server)
Only the Administrator user ID should have rights to create a new user ID.
I mean to say the other user id who have super_admin_role,  or user administration role should not have rights to create a new user ID. Is it possible?
How can we do?
Please let me know
Regards
Srinivas

Hi Sreenu,
If you directly assign the user administration or super admin role then that user has the right to create  a new user id.
So to avoid this copy the roles, remove the identity management iView and assign the copied roles to the users.
Else if u need the identity management iView to be in a display mode then u have to customise or developed the application using the API.
Regards
Basha

Similar Messages

  • Why do my Visitors users get Access Denied in my New Forms - Mobile Devices Only

    The issue I have is that I have a SP2013 Site with a group Visitors.
    the default Site Permissions have been set to Read.
    I then created a SharePoint List with a People Picker.
    I broke the Security inheritance and gave the Visitors group Contribute Permissions
    In Browser mode, they can access the site, open all links and even add content to list.
    When I do the same actions on a mobile device, All the visitors get Access Denied when clicking on the Add Content Link.
    The Link I make available is "https://myweb/sites/site/Lists/mylist/NewForm.aspx"
    I have found some suggestions about unplublished content, but this does not explain why the user can perform the required actions on a desktop, but not on a mobile device using the same link

    Hi,
    By mobile do you happen to mean iPhone? There has been quite a few issues with SharePoint 2013 and iOS authentication. You might want to refer to the following exchange.
    http://apple.stackexchange.com/questions/146808/ios-8-safari-sharepoint-2013-windows-authentication-support
    Eric Overfield - PixelMill -
    ericoverfield.com -
    @EricOverfield

  • IDM User Interface: Access Denied, Service Down

    Hello,
    I have a problem with the login to the IDM UI. I get the message: "Access denied, Service down".
    In the userinterface_00.0.log following information is stored:
    #2.0 #2010 08 10 12:40:19:898#0-700#Info#/System/UserInterface#
    #BC-WD-JAV#tc~wd~webdynpro#0003FF252E3400A600000009000003D8#1050550000000004#sap.com/tc~idm~wd~workflow#
    com.sap.tc.webdynpro.services.session.SynchronizedScopeMaintainer#Administrator#9##
    164C6500A4B711DF93E60003FF252E34#f8874f50a4b411dfbe830003ff252e34#f8874f50a4b411dfbe830003ff252e34#0#
    Thread[HTTP Worker [@25656386],5,Dedicated_Application_Thread]#Plain##
    Deprecated scope of type SERVERSESSION_AT_LEAST_ONE_APP_SCOPE is used! Please replace the usage of scopes
    with new mechanism based on "Cross application session communication API".#
    Can anyone help me please...?!

    Hi Sony,
    Judith and me use CE 7.2, too. We downloaded the components under this link: https://websmp110.sap-ag.de/support
    Choose the following path:
    Support Packages and Patches - Entry by Application Group" SAP NetWeaver and complementary products" SAP NW IDENTITY MANAGEMENT" SAP NW IDENTITY MANAGEMENT 7.1
    There we downloaded:
    - ICDESIGNTIME05_1-10007480.ZIP
    - ICRUNTIME05_0-10007481.ZIP
    - IDMIC05_0-10007483.SCA
    Maybe this helps you...

  • Users getting access denied when trying to create a security group

    Hello,
    I created an MPR for granting right through an approval workflow for joining security group, but getting the following error. Any thoughts what could be going wrong?
    Error processing your request: The operation was rejected because of access control policies.
    Reason: The operation failed as a result of insufficient access rights.
    Attributes: ExplicitMember
    Correlation Id: edc226e9-ecb9-42c2-ab20-4fa8b5643056
    Request Id:
    Details: No policy grants the Requestor permission to complete all changes.
    This is what I see in the even log:
    Requestor: urn:uuid:9373552a-c063-4fb9-abcd-3501d151a061
    Correlation Identifier: edc226e9-ecb9-42c2-ab20-4fa8b5643056
    Microsoft.ResourceManagement.Service: Microsoft.ResourceManagement.WebServices.Exceptions.PermissionDeniedException: ManagementPolicyRule ---> System.Data.SqlClient.SqlException: Reraised Error 50000, Level 16, State 1, Procedure DoEvaluateRequestInner,
    Line 1319, Message: Permission denied: <ai><Name>ExplicitMember</Name></ai>
       at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
       at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
       at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
       at System.Data.SqlClient.SqlDataReader.ConsumeMetaData()
       at System.Data.SqlClient.SqlDataReader.get_MetaData()
       at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
       at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async)
       at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult result)
       at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method)
       at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior, String method)
       at System.Data.SqlClient.SqlCommand.ExecuteReader()
       at Microsoft.ResourceManagement.Data.DataAccess.DoRequestCreation(RequestType request, Guid cause, Guid requestMarker, Boolean doEvaluation, Int16 serviceId, Int16 servicePartitionId)
       --- End of inner exception stack trace ---
       at Microsoft.ResourceManagement.WebServices.RequestDispatcher.CreateRequest(UniqueIdentifier requestor, UniqueIdentifier targetIdentifier, OperationType operation, String businessJustification, List`1 requestParameters, CultureInfo locale, Boolean
    isChildRequest, Guid cause, Boolean doEvaluation, Nullable`1 serviceId, Nullable`1 servicePartitionId, UniqueId messageIdentifier, UniqueIdentifier requestContextIdentifier, Boolean maintenanceMode)
       at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Put(Message request)
    Thanks,
    John

    Hi,
    You probably missing another MPR to give the right (checkbox "Grants permission") to Add and Remove value for attribute "Explicit member". Set an authorization workflow is not enough!
    Regards,
    Sylvain

  • Access denied error for Read user in sharepoint 2010

    Hello,
    In sharepoint 2010 subsite a user with Read permission getting Access Denied error while login.
     Few points:
       1. Master pages are approved not in pending status.
       2. Site permissions are not inherited.
    Please suggest the way to resolve it.
    Thank You,
    Santosh_09

    Check below threads for troubleshooting access denied issue. You can use fiddler to trace what is causing access denied.
    http://sharepoint.stackexchange.com/questions/75263/user-has-correct-permissions-for-subsite-but-access-is-denied
    http://sharepoint.stackexchange.com/questions/41225/user-permissions-access-denied-sharepoint-2010
    My Blog- http://www.sharepoint-journey.com|
    If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

  • Access denied:com.sap.ip.bi.web.portal.integration.launcher

    Hi Friends,
    I have installed a Standalone Portal ( EP, EP core, BI Java) , configured LDAP as data source and imported the Portal content from Source system . ( in Development, Quality, Production)
    I completed all configuration and testing completed.
    But the portal user created with customized  iviews roles are working fine in Development and Production.
    But ....Access denied:com.sap.ip.bi.web.portal.integration.launcher error is encountered in Quality system.
    In QAS system, while installation I have selected EP, EP core as Usage type.. and after Insatllation I have installed additional Usage tye BI JAVA using JSPM
    Whereas in DEV, PRD ( EP, EP core, BI Java) were taken as Usage types while installation only..
    Above reason may effect the Test user for access denied error.
    Please suggest.
    Thanks
    Venkat

    Ramana,
    It looks like a permissions issue, right click on the system created for BI under System Admin-System Configuration-System landscape and open the permissions and ensure you have the everyone group added there and enduser checked.
    Good Luck!
    Sandeep Tudumu

  • Access denied solved by ¨disabling rollback

    We had an eval license of Contribute 3 which was working
    fine. Users could edit and publish pages without any problem. I
    then purchased Contribute 4 (which was just out) and installed. Now
    users got "Access Denied. The file may not exist, or the could be a
    permission problem." when they tried to publish a page. The page
    actually was published but it gave the error message anyway. After
    reading in the ng:s etc. I turned on the option to allow file
    deletion for the group (to allow .lck files to be removed). Now it
    still showed the access denied error but no page was published and
    there was no .lck files creates. After reading some more I decided
    to try to disable the rollback feature and now all of a sudden it
    works like expected. But hey, rollbacks are great, I don't want to
    do without it! Why does it only work with rollback disabled? I am
    fairly sure that file/share permissions are OK since it worked fine
    with the Contribute 3 eval license.

    I am having the same problem with a WebDAV connection to a
    new server. We used to use SFTP and "rollback" worked fine. With
    the WebDAV connection and Contribute 3.1, I get an error of "Access
    Denied. File May Not Exist or there could be a permission problem".
    Looking at the remote files on the server, the original file is
    gone replaced with a file with a .new extension. If I disable
    "rollback" and delete the .new extension, it works.
    The "rollback" feature also breaks Dreamweaver's file upload
    capability.
    Any ideas?

  • Error...java.sql.SQLException:Access denied for user

    Hi,
    I am getting the following error message while connecting with the MySQL .(O/S :Sun OS 5.6)
    Error.....java.sql.SQLException: Invalid authorization specification: Access denied for user: 'some_user&password@localhost' (Using password: NO)
    Note that i have given all permission to the user using,
    GRANT ALL PRIVILEGES .......................
    The code i have used to connect with the database is,
    import java.io.*;
    import java.sql.*;
    class test
    public static void main(String a[])
    try
    Connection con;
    Statement stmt;
    ResultSet rs;
    Class.forName("org.gjt.mm.mysql.Driver");
    con=DriverManager.getConnection(jdbc:mysql://localhost/db_name?user=some_user&password=some_pass");
    stmt=con.createStatement();
    //do something with resultset
    catch(Exception e)
    System.out.println("Exception in second try.."+e);
    plese guide me on this problem to solve.
    Thankz,
    Bala.

    Hi friends...
    I've read the last post...
    The problem that I have is as follow....
    1. I have installed on my machine MySQL 5.0 Server running
    1.1 I have a database called "base1"
    1.2 User "root", password "works"
    1.3 I have the following sentence to connect it using JDBC
    Connection con = DriverManager.getConnection("jdbc:mysql://localhost/base1", "root", "works");
    More notes:
    - I use the JDBC 5.0
    - My Machine is a Windows XP SP2 Pentium 3.0 512Mb
    and it connects����
    but I have this environment to develop applications, now that I want to connect to Production Environment happens the following:
    2 The Production database is mounted on a Linux Server with MySQL 3.2.
    2.1 I change the sentences as follow:
    Connection con = DriverManager.getConnection("jdbc:mysql://192.168.0.7/base1", "user", "password");
    2.3 But a message appears when I run the Java Program:
    java.sql.SQLException:Access denied for user: '[email protected]' (Using password: YES)
    2.4 As you can see it changes the IP Address...
    More notes:- I have the MySQL Query Browser and I got connection.
    - The IP that display the Error Message is my Second IP configurated on my Network Properties.
    - Server is a Pentium 4 3.0 GHz 2Gb Linux Red Hat 3.0
    I leave this case for the spider... I hope that somebady has the solution.
    What is the problem? Why the JDBC doesn't respect the IP that I wrote.

  • I am receiving the 'Could not sign you in [Access denied: 530]. Check your user name and password' problem on Adobe Muse CC 2014 and I cannot access the xml file that is supposed to fix this issue?

    I am a PC user and I have Adobe Creative Cloud Muse 2014. I have received the 'Could not sign you in [Access denied: 530]. Check your user name and password' error when trying to upload my muse site to my ftp host, GoDaddy. I have successfully done this in the past and only recently it has stopped working. I looked online at the FAQ Adobe Muse Help | Uploading an Adobe Muse Site to a third-party hosting service and it said to download the ftpprefs.xml file but this file simply leads to a blank page that says /*Not found*//*Not found*/.
    Can someone direct me to a working page with this file or provide a different solution? Thank you!

    Hello,
    As you are getting error [Access denied: 530] it means issue is with access. Either the username and password you are entering is incorrect or you do not have proper permissions.
    I would suggest you to contact Godaddy to either reset password or reset the permissions.
    Regards
    Vivek

  • Access denied error when Loading document library for "contribute" users : Unknown SPRequest error occurred. More information: 0x80070005

    Hi,
    We are facing a very strange issue on a SharePoint Publishing portal. Domain users (contribute level access) have access to document libraries under specific sub sites. Every morning if they try to access the document library pages, users complain about "Access Denied" issue on document library page. But if a SP Farm admin account login on site, and browse to document library page, access denied issue seems to disappear for end users also. For whole day it works fine. But next day access denied error occurs again. I am not sure why this is happening. I have looked into Event Log and SharePoint Logs, found following information useful, but not sure what to do next.
    Please help.
    Event log Details:
    Server: WFE01
    Event Type: Error
    Event Source: Office SharePoint Server
    Event Category: Publishing
    Event ID: 5169
    Date:  17/11/2009
    Time:  07:47:31
    User:  N/A
    Computer: SPWFE01
    Description:
    Console Configuration File Error: XML Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    SP Log files:
    All logs are for process: w3wp.exe (0x031C)                        0x17F4 Windows SharePoint Services  
    ·     Begin OnLoad of XmlConsoleDataSource from file "EditingMenu".
    ·     Attempting to load XML from config file "EditingMenu".
    ·     PermissionMask check failed. asking for 0x00010000, have 0x00000000
    ·     Unknown SPRequest error occurred. More information: 0x80070005
    ·     Access Denied for /Projects/LFB/03 Bid Stage 1/Forms/AllItems.aspx.
    ·     StackTrace: Microsoft.SharePoint.Utilities.SPUtility:Void HandleAccessDenied(System.Exception), Microsoft.SharePoint.SPGlobal:Void HandleUnauthorizedAccessException(System.UnauthorizedAccessException), Microsoft.SharePoint.Library.SPRequest:Void OpenWeb(System.String, System.String ByRef, System.String ByRef, System.String ByRef, System.Guid ByRef, System.String ByRef, UInt32 ByRef, System.Guid ByRef, UInt32 ByRef, UInt32 ByRef, UInt32 ByRef, UInt16 ByRef, Boolean ByRef, Int16 ByRef, UInt32 ByRef, Int16 ByRef, Int16 ByRef, Int16 ByRef, Boolean ByRef, Int16 ByRef, UInt32 ByRef, Int16 ByRef, Int16 ByRef, Int16 ByRef, Int16 ByRef, Int32 ByRef, Boolean ByRef, System.String ByRef, System.String ByRef, Int32 ByRef, Int16 ByRef, ...
    ...System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.Object ByRef, Boolean ByRef, UInt64 ByRef, Boolean ByRef, Boolean ByRef, System.Guid ByRef, System.Guid ByRef, Int32 ByRef, System.DateTime ByRef, System.DateTime ByRef, System.String ByRef), Microsoft.SharePoint.SPWeb:Void InitWeb(), Microsoft.SharePoint.SPWeb:Microsoft.SharePoint.SPSecurableObjectImpl get_SecurableObjectImpl(), Microsoft.SharePoint.SPWeb:Microsoft.SharePoint.SPRoleAssignmentCollection get_RoleAssignments(), Microsoft.SharePoint.Publishing.WebControls.ConsoleXmlUtilities:System.String ConfigurationXml(System.String, Boolean), Microsoft.SharePoint.Publishing.W...
    ...ebControls.ConsoleXmlUtilities:Microsoft.SharePoint.Publishing.WebControls.ConsoleNode GetConsoleNodeCollectionFromXmlFile(System.String, Boolean), Microsoft.SharePoint.Publishing.WebControls.XmlConsoleDataSource:Void LoadTreeFromConfigXml(), Microsoft.SharePoint.Publishing.WebControls.XmlConsoleDataSource:Void OnLoad(System.EventArgs), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Page:Vo...
    ...id ProcessRequestMain(Boolean, Boolean), System.Web.UI.Page:Void ProcessRequest(Boolean, Boolean), System.Web.UI.Page:Void ProcessRequest(), System.Web.UI.Page:Void ProcessRequestWithNoAssert(System.Web.HttpContext), System.Web.UI.Page:Void ProcessRequest(System.Web.HttpContext), System.Web.HttpApplication+CallHandlerExecutionStep:Void System.Web.HttpApplication.IExecutionStep.Execute(), System.Web.HttpApplication:System.Exception ExecuteStep(IExecutionStep, Boolean ByRef), System.Web.HttpApplication+ApplicationStepManager:Void ResumeSteps(System.Exception), System.Web.HttpApplication:System.IAsyncResult System.Web.IHttpAsyncHandler.BeginProcessRequest(System.Web.HttpContext, System.AsyncCallback, System.Object), System.Web.HttpRuntime:Void ProcessRequestInternal(System.Web.HttpWorkerReque...
    ...st), System.Web.HttpRuntime:Void ProcessRequestNoDemand(System.Web.HttpWorkerRequest), System.Web.Hosting.ISAPIRuntime:Int32 ProcessRequest(IntPtr, Int32),
    ·     Releasing SPRequest with allocation Id {E3BC24ED-F243-4DBD-8625-EE7CF9FDA039}
    ·     Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
    ·     Console Configuration File Error: XML Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
    ·     Releasing SPRequest with allocation Id {D1A87724-6FB6-4009-B6D1-D7E15918E213}
    Pryank Rohilla
    MCTS, MCAD

    Hi pryank,
    From the log, it seems that the users don’t have permission on this page:
    /Projects/LFB/03 Bid Stage 1/Forms/AllItems.aspx
    Does the sub site have unique permission instead of inheriting permission from the parent site? If no, you need to make the sub site to inherit permission from the site collection so that master page also inherits the right. If this is not allowed in your organization, please go to “Site Actions”à “Site Settings” à “Master Pages and Page Layouts” to give users permissions on this document library.
    Hope this helps.
    Lu Zou

  • Access denied when trying to use PDF printer as normal user

    I have Acrobat 8 professional installed on a computer running Windows XP SP3. When i try to print a document to pdf from any program as Administrator it performs just fine. When i log on as a normal, restricted, user i get the window popup asking for a file name and location and whereever i try to save a file i get "access denied" error.
    Users have right to write and modify in all of the folders i've tried to save to (desktop, my documents, custom made folders), but i think the problem is with the temp file being written to some system folder where restricted users don't have permission to write. Did anyone encounter a similar problem, and how did you solve it? What directories do the normal users need access to in order to perform printing.
    Thank You

    The forum added some nice links and i found my answer here http://forums.adobe.com/message/1179199#1179199 - changed the registry key permissions and it's working like a charm. Thank you.

  • End User Rule View Access Denied

    Hi,
    This has been discussed here, but after trying all possible options it still doesn't seem to be working.
    I am using a rule in a end user task, which throws "View Access Denied to Subject on Rule" error.
    I've set the rule authType to "EndUserRule" and
    <ObjectRef type='ObjectGroup' id='#ID#All' name='All'/>
    for MemberObjectGroups.
    Still it would keep throwing same error. I even used:
    <RunAsUser>
    <ObjectRef type='User' id='#ID#Configurator' name='Configurator'/>
    </RunAsUser>
    Still not success.....??? Any idea what could be wrong?
    I am using IdM Version 5.5
    -Thanks

    Hmmm...
    Seems to be working now...all I did was a restarted the application server??? Tried the same steps again in a different environment, and worked without a restart. Must be something odd with one particular environment.
    -Thanks though for the reply!
    -\

  • Access Denied creating user accounts through vba

    Hello,
    I have a MS-Access application that runs on a Windows 2012 server. My customer logs into the server using RDP. The MS-Access application is started up automatically by means of the environment variable in the user settings. The customer needs to be able
    to create new windows users for this application, simply by clicking a button.  
    The VBA script to create users works, because when I start up the MS-Access application with my own logged on Administrators account, the new users get created. If my customer tries it, he gets 'Access Denied' error. I have added his user account to
    the Power Users group, but that did not solve the problem. I also tried to make him member of the DCOM Users Group, the 'Access Denied' error remains...
    I do not want to give him administrator priviliges, because he is 'just a customer'...
    What do I need to do for this setup to work? I tried altering some DCom settings, but frankly I do not have enough knowledge to feel comfortable with this. Hope anybody can help me out here...
    best regards, Rob

    Is this a standalone server? Only administrators can create user accounts, so there is no work around for that. You could look at something that has the administrator account/password stored and launch PSEXEC or something else in an elevated session behind
    the scenes but that is a security volunerability because the credentials are stored.
    If the account is being created in an Active Directory environment you could delegate permissions to the appropriate OU for your customer.
    Mark B. Cooper, President and Founder of PKI Solutions Inc., former Microsoft Senior Engineer and subject matter expert for Microsoft Active Directory Certificate Services (ADCS). Known as “The PKI Guy” at Microsoft for 10 years.

  • Access denied on first login, then it lets the user in (Fedora Core 5)

    I am getting the message "Access denied by Application security check" the first time I login to the db (dba privs.) from a remote machine. Then I click the link to return to the application and log in again. This time it will let me in. Then I close the browser, open back up and it does the same thing. After doing this a few times it lets me in w/o the message until I rebooted, and then it starts the message again (I rebooted both the server and the client come to think of it). At any rate it is installed on FC5, which I am a little green on, however I did somehow manage to get this far.

    Here is a way to design for scheduler running:
    Import-Module ActiveDirectory
    $path='\\UNCLocation\devshare\*'
    $addn = (Get-ADDomain).DistuinguishedName
    $defaultLocation="OU=Homeless,$addn"
    $dnsroot = (Get-ADDomain).dnsroot
    $log = "C:\Path\To\errorlog.log"
    $enabled=$true
    function Logit($type='INFO',$msg,$p1,$p2){
    $text=('[{0}][{1}]{2}[{3}|{4}]' -f [DateTime]::Now,$type,$msg,$p1,$p2)
    Write-Verbose $text
    $text| Out-File $log -append
    Function Create-Users{
    [CmdletBinding()]
    Param()
    Get-ChildItem $path -Include *.csv |
    ForEach-Object {
    $nu=Import-Csv $_
    $sam = $_.FirstName.substring(0,1).ToLower() + $_.LastName.ToLower()
    if(!Get-ADUser -LDAPFilter "(sAMAccountName=$sam)")
    Logit -msg 'Creating user' -p1 $sam
    $setpass = ConvertTo-SecureString -AsPlainText $_.Password -force
    $userprops=@{
    SamAccouontName=$sam
    GivenName=$_.FirstName
    Initials=$_.Initials
    Surname=$_.LastName
    DisplayName=($_.LastName + "," + $_.FirstName)
    UserPrincipalName=($sam + "@" + $dnsroot)
    OfficePhone=$_.Number
    AccountPassword=$setpass
    Enabled=$enabled
    Path=$defaultLocation
    $location = $_.Department + ".$($addn)"
    If ([adsi]::Exists("LDAP://$($location)")){
    $userprops.Path=$location
    Logit -msg "User $sam will be created inctarget OU:" -p1 $location
    }else{
    Logit -type ERROR -msg 'Target OU not found. User will be created in default'
    New-AdUser @userprops
    Logit -msg 'Created new user:' -p1 $sam
    }else{
    Logit -type ERROR -msg 'Username already exists' $sam
    Create-Users -Verbose
    The code loops through all CSVs found.  If you run it in the scheduler every 2 or 3 minutes it will be pretty fast.
    You will need to add a layer of error handling and logging to get it to work smoothly.
    ¯\_(ツ)_/¯

  • OBIEE access denied for some users only

    Hi All,
    we are using OBIEE 10.1.3.4 version on windows envorinment .The users can access the OBIEE reports using 'PORTALPATH' session varible in RPD.For some of the users are got "access denied" while they are accessing for thir particular dashboard.Eariler these user got access this dashboard with out any errors.We dnt changed in our system anything from last three months.
    We have no idea why we are getting these error for particular users only.Its Prod issue we need to reslove these error ASAP.
    we are getting these error"acess denied for user to path/shared/shared/_test/testdashboard
    Error Codes:09XNZMXB"
    but last one year its working without any issues .From our side we dnt did any changes in production like RPD level,Catalog level and config file changes , we have no idea why suddenly we are getting these kind of error for some users only not for all users.
    Could u please advice me how to reslove this PROD issueASAP.
    Thanks,

    Well its Prod (you have a dashboard called testdashboard in Prod?) anyway - someone might have changed the presentation catalogue permissions on the dashboard. All it takes is for someone to remove 'Everyone' or change a Group permission and it could effect.
    If they changed the Parent folder and cascaded the changes down this might cause this issue.
    You have a folder called 'Shared' - check the groups that the people are in have 'Traverse' , 'Read' or higher. Also chek dashboard permissions themselves from Settings-Manage Interactive Dashboards - Check the Padlock icon.
    Are you users getting allocated into the correct WEBGROUPS ? Is this assisngment done explicitly in the webcat or via an RPD Variable ? Have you checked NQQueryl.log to make sure any init blocks are completing successfully?
    Either persmissions have changed or group memebership is not completing.
    Good luck
    Alastair

Maybe you are looking for