User defined groups authorization

Hi Dear;
is there any possibility to manage the authorization of user defined field or user defined groups in a form?
regards;

Dear Mr Bittar,
Can you check the Expert Empowerment Session:
User unable to modify the UDF form settings
If you go to the following link and write authorisation in the search option the session will appear in the list.
https://websmp108.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000706503&_SCENARIO=01100035870000000183&_ADDINC=011000358700001192682007E&
Kind Regards,
Marcella Rivi
SAP Business One Forums Team

Similar Messages

Not getting alerts even after applied the monitoring policy on user defined group.

Hi,
recently we have installed OEM Ops center 12c for monitoring our oracle servers. I have created a user defined group and applied a userdefined monitoring policy on that group. I have threshold 70% as crtical and 50 % as warning in my monitoring policy.
Some of my servers are having 77% disk utlization and im not getting any alerts for that.
What will be the problem?
When i see the membership of particular group (group -> membership in center pane), im not able to see the monitoring policy name on the monitoring policy column but i have applied policy on that group.
Please help me to resolve the issue.
Thanks,
Veijar

Hi Stijn,
Thanks for the response.
You are right. I was sending personalized iBot to group 'Financial Analyst'. A non-OBI user(Reshmi) belongs to this group.
But still problem has not been completely resolved.Still users in group either Administrator/Financial Analyst not getting alert via mail.
Atleast the users in Administrator group should get alert via mail, since both are defined in rpd.
Now when i send non-personalized ibot to group 'Financial Analyst', All the users other than Reshmi get alert on their dashboard but they don't get alert
via mail.Also Reshmi does not get alert via mail and error file shows error like -
No devices for user: Reshmi.
Now i am not getting the error nQSError: 43001 Authentication failed for Reshmil in repository Star: invalid user/password. (08004)
which i was getting earlier while sending personalized ibot.
I have already defined the Mail tab contents using Job Manager. Also i have selected User Destinations both Interactive Dashboard and Active Delivery
Profile.
Why the users don't get alert via mail? What could be the problem?

LMS 3.2 Common Services User Defined Groups problem

CiscoWorks LMS 3.2 is installed on Windows 2008 64-bit server.
All devices are added into appropriate User defined group in Groups/Common Services.
All groups are fine except that Members of group named Switch-HO-access have been copied also to group named Router-Branch by system for unknown reasons.
At few files we have noticed errors :
" FATAL com.cisco.nm.xms.ogs.server.OGSServer main Exception while OGS Server start up: CTMRegistry::startRegistryServer() : Can't find/start registry server " and
" com.cisco.nm.xms.ogs.util.OGSException: CTMRegistry::startRegistryServer() : Can't find/start registry server ".
What is the reason for copying this devices and is there some other underlying problem?

it seems that the errors you see correlate with regular stopping/starting of the LMS processes (dmgtd) so this would be a normal behaviour.
Can you provide a screenshot of the problem you describe and also the rule for the group Switch-HO-access and Router-Branch

Prime Infrastructure 2.0 Importing user-defined group rules

Dears,
I'm looking for a way to import rules to put devices in a user defined group.
I can see how I can create groups and rules manually, but not how I could export or import those rules.
Is this possible, or on the roadmap?
Cheers,
Michel

In the Cisco Prime Infrastructure 2.0 Deployment Guide under LMS 4.2 Data Migration there is a way to import settings from a "special" backup made from LMS.
This should allow for importing userdefined groups.
Does anyone have tried this yet?
Cheers,
Michel

LMS 4.1 No User Defined Groups shown in Fault Notification Groups?

Hi,
I created some User Defined Groups in LMS 4.1, now I want to apply certain fault notification groups to Event Sets.
Unfortunately the Groups I configured are not in the Group Selector of the Fault Notification Group:
Admin > Network > Notification and Action Settings > Fault Notification Group
Am I missing something?
Thanks for help!

It is not generic, Are you superuser? Any device restictions?
Cheers,
Michel

RME: User defined groups on basis of snmp server-location

Hi,
We have abt 3500 devices in LMS3.2.1, and we want to make user defined groups in RME on the basis of devices configuration of snmp server-location ...
Please advise that it is possible or not?
Thanks

Hi Michel and thanks for the reply.
The "Physical Location" groups magically started working. I had tried to apply a bunch of device update packages a couple of days ago. I thought they all failed but maybe some of them actually applied. I have no idea but the 2 groups with a rule like this one are now populating:
Device.Hostname startswith "XYZ"
However, the groups with the rule below are still failing to populate in the device selector even though if I edit the group the "Objects matching criteria" list contains the correct members:
Device.Admin_responsibility equals "XYZ"
Admin_responsibility is user defined field 1 (Admin => Device Credential Settings => User Defined Fields).
If you mean "dynamic" in that they are supposed to automatically update then yes these are dynamic public groups. I had them defined this way for years in LMS 2.6, though the "dynamic" part never worked. I always had to go into group admin and manually refresh to get the groups to update. I have tried that several times in 4.1 with no luck.
-Jeff

LMS4 - overview about all devices and their user defined groups

Hello,
How is it possible to generate a report to get an overview wheather all devices matches in their intended user defined groups?
For instance this style:
name mgmt-ip user-defined-group-name
Cant find OGS attributes in report generator.
thx for hints, Steffen

Do publish the rules you use to get he devices.
What is the parent group of your devices
Cheers,
Michel

RME User Defined Group

Hello,
i create a group under RME > User Defined Group. (named TEST)
i choosed system.domainname under Rule Expression tab.(net.xxx.com)
and i want when i add a device that has domain name net.xxx.com, it comes in under my TEST group automatically.
p.s : i clicked "membership update" as automatic ....
is not it possible or am i doing it wrong ?

Dynamic groups in RME work nice for me.
You may wish to post the rules you defined to form this group
Also what is the parent of your group?
Cheers,
Michel

LMS 4.2 User Defined Groups Empty after Daemon restart

Hello
I need some help here.
In order to get topology services to run on a non resolvable DNS server I have followed the instructions in the online help and got Topology Services to start. My issue now is that all my userdefined groups are empty and I can not edit them - it gives me a error message.
Checked the parent groups and these are as supposed - the system groups - subnet groups fx are also populated.
What do you advise?
I have read oither posts and some people were advised to restart crmdmgtd as in this thread:
net stop crmdmgtd
net start crmdmgtd
http://https://supportforums.cisco.com/message/3414498#3414498
Should I just follow the same steps? I can not see find this process in 4.2
Thanks Isaac
PS: These were the steps followed in order to make Topology Services to work.
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- The Cisco Prime LMS client must be able to resolve the hostname of the Cisco Prime LMS server to server's IP Address, through DNS.
If the Cisco Prime LMS server is not DNS resolvable, Cisco Prime LMS client can access it with the IP address itself, by performing the following steps:
Open the orb.properties file. Solaris or Soft Appliance: NMSROOT/lib/classpath Windows: NMSROOT\lib\classpath where NMSROOT is the directory where you have installed Cisco Prime LMS. Set the property as follows: jacorb.dns.enable=off Go to Admin > Trust Management > Local Server > Certificate Setup.
The Certificate Setup page appears. Enter the IP Address of the Cisco Prime LMS Server in the Hostname textbox. Populate the other columns as explained in the Online help for Administration of Cisco Prime LAN Management Solution 4.2. Click Apply to generate the self-signed certificate. Restart the daemons. See the Online help for Administration of Cisco Prime LAN Management Solution 4.2 for instructions. You will be able to launch Topology Services with the IP address itself.

Hi Michel and thanks for the reply.
The "Physical Location" groups magically started working. I had tried to apply a bunch of device update packages a couple of days ago. I thought they all failed but maybe some of them actually applied. I have no idea but the 2 groups with a rule like this one are now populating:
Device.Hostname startswith "XYZ"
However, the groups with the rule below are still failing to populate in the device selector even though if I edit the group the "Objects matching criteria" list contains the correct members:
Device.Admin_responsibility equals "XYZ"
Admin_responsibility is user defined field 1 (Admin => Device Credential Settings => User Defined Fields).
If you mean "dynamic" in that they are supposed to automatically update then yes these are dynamic public groups. I had them defined this way for years in LMS 2.6, though the "dynamic" part never worked. I always had to go into group admin and manually refresh to get the groups to update. I have tried that several times in 4.1 with no luck.
-Jeff

Determine if user belongs to Authorization Group.

My requirement is I have a authorization group (BRGRU) and I need to check if the logged in user belongs to that authorization group. Is there any FM for this or a Database table where in I can get list of users belonging to a particular authorization group.

Hi
check the tables
UST12
AGR_1252
and check the Tcode SU21
see the doc about authorizations:
In general different users will be given different authorizations based on their role in the orgn.
We create ROLES and assign the Authorization and TCODES for that role, so only that user can have access to those T Codes.
USe SUIM and SU21 T codes for this.
Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.
If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.
This means you have to allocate an authorization object in the definition of the transaction.
For example:
program an AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT <authorization object>
ID <authority field 1> FIELD <field value 1>.
ID <authority field 2> FIELD <field value 2>.
ID <authority-field n> FIELD <field value n>.
The OBJECT parameter specifies the authorization object.
The ID parameter specifies an authorization field (in the authorization object).
The FIELD parameter specifies a value for the authorization field.
The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/content.htm
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
Authorization : An authorization enables you to perform a particular activity in the SAP System, based on a set of authorization object field values.
You program the authorization check using the ABAP statement AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'
ID 'ACTVT' FIELD '02'
ID 'CUSTTYPE' FIELD 'B'.
IF SY-SUBRC <> 0.
MESSAGE E...
ENDIF.
'S_TRVL_BKS' is a auth. object
ID 'ACTVT' FIELD '02' in place 2 you can put 1,2, 3 for change create or display.
The AUTHORITY-CHECK checks whether a user has the appropriate authorization to execute a particular activity.
This Authorization concept is somewhat linked with BASIS people.
As a developer you may not have access to access to SU21 Transaction where you have to define, authorizations, Objects and for nthat object you assign fields and values. Another Tcode is PFCG where you can assign these authrization objects and TCodes for a profile and that profile in turn attached to a particular user.
Take the help of the basis Guy and create and use.
Reward points if useful
Regards
Anji

How to use user defined contact fields in the intelligent group builder

In Apple Contacts it seems not being possible to build an intelligent contact group using an user defined, additional field. The builder seems to work exclusively with a system defined selection of the basic database fields. Please, tell me, that there is a way ...

Please, can sombody out there help?

How to use User Options and User-Defined Fields in DC Group function?

Dears,
As title, when should I use above fields? I did not see the related information in SAPME help library.
Thanks!

The user options fields are just information fields you can store at the Data Collection Maintenance activity. You can think of these as extra information fields for storage purposes only. I can't give you a use case except to say 'information fields' only.
With regards to the User-Defined fields in DC Group - you can think of these as extra data fields to be collected. They will appear immediately underneath the data parameter they are defined in in the DC Plug-in for the POD. They do not have limits but are just extra pieces of data you may want to collect about the specific parameter.

User has no authorization for function group SWRS

Dear SRM Gurus,
We are facing an issue u201CUser has no authorization for function group SWRSu201D.
Hope the user has no authorization to access function group SWRS and this function group is saying that workflow substitution.
Can you any one have any idea what scenario are we using Workflow substitution?
Is there any Roles need to be assigned?
I would be appreciating if you could let us know more detail on this.
Thanks.
Regards,
Magesh Basavaraj.

Hi,
The authorization object is 'S_WF_SUBST' for substitute role..try to assign this object and check..
Saravanan

I want to set User-define characteristics'group in receiver in pa-cycle.

I want to set User-define characteristics'group in receiver in pa-cycle.
I want to create PA cycle.
My pa structure included User-define characteristics.
When I creat PA cycle, I want to set User-define characteristics'group in receiver in pa-cycle.
How can I do it?

I soved it using set(t-code : gs01)

Authorization for User Table (User-Defined Windows)

Hi Experts
I want to restrict access for specific users to User Defined Tables. Is this possible?
Regards
Nabeel

You can do it by using Additional Authorization Creator Winow
1. Open Additional Authorization Creator Window.
2. Click on 'Add Same Level ' Button
3. On the Right side window, Type in
Authorization ID = 'Activity Subject'
Name = 'Activity Subject'
Option = 'Full/ ReadOnly/ No Authorization"
4. In form ID, press 'Edit Butto' and type Form Id of the UDT
5. press OK to close this window
6. Open 'General Authorization' Screen
7. On the Right Side, navigate 'User Authorization'
8. Scroll down ''Activity Subject' and select the user and Set appropriate authorization('Full/ ReadOnly/ No Authorization")
9. Now Log off and Login with user.
You can see the authorization in effect.
Similarly you can do for any window which are missing in 'General Authorization'

User defined groups authorization

Similar Messages

Maybe you are looking for