User group [$CLASS] not an Org level field in IA, whereas it is in DA

Hi All,
We have an authorization problem that we faced while SAP Upgrade. In the development system while we upgraded all the roles, we did not face any issue. User group field [$CLASS] was actually an org level field in that system and the roles were upgraded based on that condition.
When the Integration system was up and the upgraded roles were transported to IA, we noticed that they ended with a warning. On checking the logs we found out that User group [CLASS] actually was not an Org level value in the INtegration system, whereas it was an org level field in the development system.
Can someone tell me the reason why it is different? Is there any settings we have to change to make User group an org level field in IA. Thanks a lot for your help.
Vijith

Hello, I ran into this also and found these notes to explain why this is suddenly an org value and how to fix it:
http://search.sap.com/notes?id=0001580048
http://search.sap.com/notes?id=0001739055
Basically, GRC 10 add-on makes the user group an org value and the note instructs how to undo this manually, but there is a required pre-requisite because you cannot modify this for SAP delivered fields normally.
You know what else would be nice.... maybe there's a note that explains why Account Type is an org value. It REALLY should not be, IMO.

Similar Messages

Forbid a user group to modify an specific metadata field??

Is it possible to forbid a user group to MODIFY an specific metadata field or group of fields?
I know you can create a new metadata SET and forbid the user group to modify the entire set, but what about groups or fields??
Any help is welcome

it is not possible. I had a sort of work around, when I enabled the metadata group only on the production creation, but then it is not visible in Metadata tab.

When using the camera downloader in Adobe Bridge CS6 with Nikon D5200 we are unable to see previews of the photos and it is very slow to download. The issue occurs under a the users rights, but not under admin level. This is a new issue

When using the camera downloader in Adobe Bridge CS6 with Nikon D5200 we are unable to see previews of the photos and it is very slow to download. The issue occurs under a the users rights, but not under admin level. This is a new issue.

Hi Jdentremont,
Lync client gets user photos by first querying the Address Book Web Query (ABWQ) service on the server, which is exposed through the Distribution List Expansion web service. The client receives
the image file and then copies it to the user's cache to avoid downloading the image each time it needs to be displayed. The attribute values returned from the query are also stored in the cached Address Book Service entry for the user. The Address Book Service
deletes all cached images every 24 hours, which means that it can take up to 24 hours for new user images to be updated in the cache on the server.
To troubleshoot your problem, please follow the steps below:
1. Navigate to
“X:\share\1-WebServices-1\ABfiles\000000000\000000000” folder. (ABS file share)
You should see some photo files in this folder as the following screenshot.
2. Delete all the files in this folder.
3. On test PC, delete local cache files.
%userprofile%\AppData\Local\Microsoft\Office\15.0\Lync\[email protected]
4. Sign-in Lync with the test account.
5. Go back to the ABS file share, check if there is any Photo file in the folder.
Best regards,
Eric
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Class not found: org.springframework.beans.factory.BeanCreationException

I am deploying an .ear file to an Oracle Application Server 10.1.2.0.2. In one container, it deploys correctly. In another conatiner on the same server and configured identically (or at least I believe), I try to deploy the same .ear file but I get the error:
Deployment failed: Nested exception
Resolution:
Base Exception:
com.evermind.server.rmi.OrionRemoteException
Class not found: org.springframework.beans.factory.BeanCreationException; nested exception is:
java.lang.ClassNotFoundException: org.springframework.beans.factory.BeanCreationException. Class not found: org.springframework.beans.factory.BeanCreationException; nested exception is:
java.lang.ClassNotFoundException: org.springframework.beans.factory.BeanCreationException
Anyone would have an idea why? Thanks in advance.

Greetings,
Your error implies that the classpath for the second deployment might be wrong. This cannot be the package if you are deploying an identical ear file. Can you look at the setup for the second container from the admin to see if there is an RMI connection configured incorrectly? Check your opmn.xml file for port info:
<port id="rmi" range="12401-12500"/>and check the server using netstat -a to see if the configured port is open for use before starting the OAS.
-Michael

User Group is not receiving email Sharepoint 2013 & Nintex workflow

Hi I created circular workflow using nintex and sharepoint 2013 , now problem occur that User group did not receive email notification through web portal , sending individual email address working fine but user group is not receiving
any email, not a single group is working now , to clear we used same workflow since last two years and all group received email earlier but now we are facing this issue since last 3 weeks. to resolve this we create new test groups and test but enable
to send.
looking for support to resolve this issue
Regards

This actually sounds like a problem that should be discussed on the Nintex forums, can you try over there?
Kind regards,
Margriet Bruggeman
Lois & Clark IT Services
web site: http://www.loisandclark.eu
blog: http://www.sharepointdragons.com

Central release dependent infos on standard org. level fields

Dear gurus,
Does anyone know whether there is a central note on which fields SAP promotes to org. levels? I could not find one and think it would be very usefull to be able to look into the future.
In saprel 7.02 the are some fields which are now org. levels which would have been usefull to know in advance. We can alsway downgrade them if we dont agree but knowing what is in the pipeline would be very usefull (I can only assume SAP put a lot of thought into them, but I might have mainained them differently in the same role).
An example is the Authorization Group field of s_user_grp...
Cheers,
Julius

Can't answer your question; but thanks for heads up! I'll have to keep this in mind when we upgrade.

Checks users Exists in user group or not?

Hi All,
bool userExsists = SPContext.Current.Web.CurrentUser.Groups.Cast<SPGroup>().Any(g => g.Name.ToLower() == "groupname".ToLower());
Is there ay alternative for findings that user is in group or not? Is it best way to achieve this?

Hi,
To check if a user exists in user group, please use the code below:
string userName = "contoso\\admin";//your user account
string groupName = "SP Members";// your user group
using (SPSite spSite = new SPSite("http://sp")) // your site collection URL
using (SPWeb spWeb = spSite.OpenWeb())
SPUser user = spWeb.EnsureUser(userName);
if (user.Groups.Cast<SPGroup>().Any(g => g.Name.Equals(groupName)))
Console.WriteLine("User " + userName + " is a member of group " + groupName);
else
Console.WriteLine("User " + userName + " is NOT a member of group " + groupName);
Or you can use PowerShell command below:
$w = get-spweb http://my
$gs = $w.SiteGroups
$g = $gs[12]
$user = $g.Users.GetByEmail("[email protected]")
if($user -eq $null){write-host "User Not Found"}
Best regards.
Thanks
Victoria Xia
TechNet Community Support

AD users/groups are "Not Found"

Have some issues with our Mac OS X Server (10.5.6).
I completed the initial setup of the "golden triangle" just fine--and our Open Directory is completely integrated into our Active Directory.
I logged in today into the server today only to find that all of the AD users and groups are listed as "Not Found" in Workgroup manager. Active Directory authentication still works but the server can't seem to pull names from AD anymore. I checked the AD directory though Workgroup manager and it didn't list any users.
However, when I logged in to the Replica and attempted the same steps, the AD users and groups were listed, just like nothing happened. Logged back into the Master and all of the AD users are still listed as "Not Found".
I checked all of the settings and nothing has been changed since last week (and it was working last week). However when I open Directory Utility it says on both the Replica and the Master that the Local Server isn't responding.
Thought that a restart would do the trick but the server is being heavily used at the moment. Is there a way to restart just the LDAP server without restarted the entire server? And has anyone else had this ran into this problem before?

Got it working by clicking twice the checkbox in front of the field "Use UME Unique with LDAP unique".
This updated the value from uid to samaccountname (which it should have read from the config xml file allready)

Restrict metadata field during an update to a specific user group

Hello everyone,
I am having some trouble figuring out the best way to restrict permissions to change some metadata fields for 2 different groups of users.
I have two user groups, A and B. Group A will be checking in documents that the B group will then review for accuracy and quality. Group B will then update an optionlist field called "Status" with either "Recommended" or "Not Recommended".
This is not a workflow situation as the scope requires that all documents are immediately available for searching. I currently have a CheckIn and Search profile for the content permitting read write access to groups A and B. The "Status" field is hidden on the CheckIn page. Can anyone please suggest a good way to restrict the field "Status" on an Update page to just "B" users? Groups A and B should be able to update all fields with the exception of the B restricted "Status" field.
Thanks!
Edited by: user6750815 on Jun 2, 2010 4:11 PM

Hey rMac,
I understand it this way you have one profile for A and B user groups. On this profile Status field is hidden.
If this is your problem you can approach it from two places, while making the rule for hiding the Status field, use rule activation condition. Make it active only for users with Role A . This way even with single profile some of the user with Role B will be able to see the Status field.
otherwise you can put similar code in Restrict Personalization Link where in you make this hidden field editable and compulsory for Users in B.
cheers,
sapan

"Domain Users" group in Active Directory does not belong to any Group Membership in LC

Active Directory user belonging to "Domain Users" group does not belong to any Group Membership in LC, why does it not belong to "Domain Users" group?
Any way to correct this issue, without changing group membership on AD side?
If Active Directory user is member of "Domain Admins" or "Users" then these show same group membership in LC.
Thanks.

If you want to use the Domain Users group for the purpose of representing all the users then you can use the "All principals in domain xxx" group which is created by UM.
Coming back to Domain Users group. For determining group membership in AD UM uses "member" attribute of the group object. "Domain Users" group is treated differently by AD. It is the default primary group for all the users and normally members of the primary group are not specified using the member attribute.So when we sync the data from AD "Domain Users" membership does not get completed.

Message thrown as User group not created

Hi,
When the User tries to access a Transaction Code which is a (Query created from table BSEG) he gets a message that User Group has not yet been created, where as the User Group has been created and can be seen.
We checked the SU53 screen after accessing this transaction and all checks were successful.
Please provide ur suggestions.
Regards,
Priya

Just check if the query is attached is to a User Group or not .
GOTO to SQ02 find the infoset for the query
goto to Environment->User Group .
Please check this and reward if useful.

New user creation in AE- user group not getting assigned

Hi All,
Here is a typical case, wherein when we create a new user with AE for the production system, the user gets created and the roles are also assigned but the user group is not getting assigned. The user group is being fetched from a table from the backend and all that is working fine. Infact in order to test the configurations we even created a new user in the production instance of AE giving the development system as the target system for user creation and in this case the user was successfully created and the user group is also assigned. The problem is arising only when the target system is production system.
Connectors are all working fine, but we are unable to think of a reason. Can somebody help us on this?

Hi Vani,
If you are provisioning the user group using user defaults, check that production system is selected in the user defaults configured. Configuration -> user defaults. You can define any user default system, but for perticuticular user defaults that is applicable define all the systems, in which you want user defaults to be provisioned.
Kind Regards,
Srinivasan

In Infopath - From User Group webservice First & Last Name are not displaying

Hi, I am working on Internet faced Infopath Sharepoint 2010 web application.In Infopath form we used a User Group web service to retrieve the first and last names when opening the form. In Development environment its working fine (Ex:- http://sharepoint2010dev:45/)
then we extend the webapplication with domain name in url.(Ex:http://Domainsp:80/) then the first and last names from User Groups is not working.
Please give your suggestions to resolve this isssue.
Any help is appreciated..!

Hi,
According to your post, my understanding is that the User Group web service not worked when extend the web application with a domain name in URL.
Did you change the URL to the UserGroup web service in the Data Connection Wizard?
As you had changed the URL, I think you should change the URL(http://<site>/_vti_bin/UserGroup.asmx), then check whether it works.
http://blog.ianchivers.com/2011/01/using-sharepoint-usergroup-web-service.html
Thanks & Regards,
Jason
Jason Guo
TechNet Community Support

Users/groups not visible in WGM after migration. (UIDs lower than 500)

I have migrated from a 10.5 to a 10.6 server.
Some of my user & groups are not visible in the WGM. However, the user can login to the system.
I discovered that if I check Workgroup Manager > View > Show System Records, that I can see the missing users and groups. The users and groups all of UID/GID's from 100 to 130.
All of the affected users & groups were created many versions ago, probably Mac OS X 10.1 Server. The accounts that are visible are newer and have UID's starting in either at 501 or 1025. So it looks like overtime OS X server has changed what ID's are used for system vs. users.
What is the proper way to solve this problem? The WGM will let me to manually change the UID/GID, but I am worried about doing this will not change file ownerships.
Thansk!

You are correct, the ACL and or POSIX permissions will not update if you just change the UID of the group or user account. You will need to add the new UID to the directories in question. And be sure to propagate the permissions.
I would take one each group and user account and use it as a test case to discover how much is involved. Document what steps are needed to make the changes and then do them in bits and pieces.

Query for tasks assigned individually to all members of a user group

I am looking for a query that will allow me to create a list view that will show all tasks assigned to the current user (in the Assigned To field), as well as to other members of the user group that the current user belongs to. The scenario is that we want
a student to see tasks assigned to them, as well as to other students in the class. Each class is its own user group. I have seen a lot of examples where the filter shows tasks assigned to the current user and the current users group - that is NOT what I am
looking for.
For example - Todd (me), Fred and John are members of one user group. When I look at this class view, I should see tasks assigned to me, as well as those assigned directly to Fred and John.
Does anyone have a CAML query for this? I am thinking it would need to include the SPGroup element. Thanks!

Hi William,
I've tried this, but it isn't working for me. Should I chnge the Smart Group, to an ordinary one?
Thanks

User group [$CLASS] not an Org level field in IA, whereas it is in DA

Similar Messages

Maybe you are looking for