Users in the admin console

I am trying to define granular access to the admin console to our developers. They
want to see the deployment status for applications, however. Unless I add them
to the Deployers group they cannot see it. I do not want them to have access to
deploy or undeploy but I want them to be able to look at the application components
and see if they are deployed etc.
Are there any ACLs I can add to allow this? Any Roles or Policies?
thanks
Ryan

"Ryan Richards" <[email protected]> wrote in message
news:3f9ed1be$[email protected]..
>
I am trying to define granular access to the admin console to ourdevelopers. They
want to see the deployment status for applications, however. Unless I addthem
to the Deployers group they cannot see it. I do not want them to haveaccess to
deploy or undeploy but I want them to be able to look at the applicationcomponents
and see if they are deployed etc.
Are there any ACLs I can add to allow this? Any Roles or Policies?
In 8.1, mbean access is based on roles so there is not that level of
granularity. You may be able
to write a webapp or ejb that restricts access based on roles and policies
and then performs
a runas with an admin user to get the information from the mbeans.
thanks
Ryan

Similar Messages

Creating users via the admin console

Hi,
I'm trying to create a user via the admin console. The user will have to
authenticate via Membership, and will require a username and password.
However, when creating the user via the admin console it does not allow you
to specify a default password (or by using the command line 'ipsadmin create
user /domain/user.xml', unless there is some XML field specified in the file
to do that? If so, what is it? Specify an attribute in the
"iwtAuthMembership-password"?) After creating a user via the console, I
tried logging in using a blank password and a password the same as the
username, but neither worked. Is this password set as default to something,
and if so to what?
Also, is there some existing means for a user who has already created a
membership account to change their password? If not, then I guess I will
have to develop some code to modify the "iwtAuthMembership-password"
attribute.
Thanks,
Mark

Hi,
After you have created the user via the console, then the user will be added to a particular role.From the console go that particular domain and then to the role under which the user was created.Then select the Users link you can see the users list.From that list select the user for whom a password is needed,then it will lead you to a screen where you can see a link named Authentication.Expand that link and click on the Membership link there you can enter the username and password for the user

Not able to create a user from the admin console.

After entering all the mandatory fields in the form and submitting that it throws a error page with START DATE ERROR

hi Thanks for giving reply
i don't change the code.we are not giving any dates also.
i am using oim 9.0.1 and the application server is jboss-4.0.2
the details we are giving only the mandatory fields in the create user form.
Is there any conflict with the database. and the information is
2007-08-09 12:37:26,237 ERROR [XELLERATE.ACCOUNTMANAGEMENT] Class/Method: tcUserOperationsBean/createUser encounter some problems: maoErrors:Error occurred in Event Post Insert of the OIU object, contact system administrator.
2007-08-09 12:37:26,237 ERROR [XELLERATE.WEBAPP] Class/Method: tcManageUserAction/createUser encounter some problems: End Date Before Start Date
2007-08-09 12:37:29,522 DEBUG [org.quartz.impl.jdbcjobstore.StdRowLockSemaphore] Lock 'TRIGGER_ACCESS' is desired by: QuartzSchedulerThread
thnks
ravi

Changing user profile attributes via the admin console

Hi all,
I created my own login module (like the existing Membership module) which
extends the Login class. It works just fine, and can create user profiles
and allow people to log in. When I log into the admin console and try to
bring up the user profile to edit the attributes for this module [Manage
Domains->(domain)->(role)->Users->(user)->Authentication(authentication
module)] it displays an error stating 'This profile contains no data which
can be administered.' It also does this when I create a user via the admin
console. I know the profile exists (the user can log in, and doing a
'ipsadmin get user (user)' produces the profile). In the login module XML,
all the necessary attributes are set as "userConfigurable=TRUE" with the
right privileges. Looking at the Membership module as a template, I saw it
puts a configuration file in the '/opt/SUNWips/locale' directory which is
used apparently for editing the profiles created by this module. I made a
similar one for my module, but the same error occurs. Does anyone know what
I am failing to do?
Thanks,
Mark

Hi,
After creating your own Authentication module You have to import your "iwtAuth[NewModule].xml" to the profile server.
You can find a sample file for Membership module
" iwtAuthMembership.xml" at "/etc/opt/SUNWips/xml".
Modify "iwtAuthMembership " in the above xml file with "iwtAuth[NewModule] "and import the
"iwtAuth[NewModule] .xml" using
# ipsadmin -import iwtAuthNewLogin.xml
and restart the server.

Sun java system application server 8 custom realm lock the admin console up

Hi:
I implemented a custome realm. After I installed the custom realm to Sun App server 8 PE, I can get into the admin console any more. According to the log, the user is authenticated. However, this user isn't in write group to access the admin console. What would be the user group in a custom realm to access admin console?
In version 7, even you set up custom realm the admin console still not affected by the custom realm. Why is the admin console in version 8 picking up custom realm?
Thanks.

Previous reply was quite misleading - there is no such thing as default admin password for standalone installation of Application Server. Default values only apply to Application Server installation installed through Creator or NetBeans installer.
Otherwise, you have to specify admin user name and password at installation time. Admin username value is defaulted to "admin" so unless you changed it in your installation that should still apply. You had to enter explicit password values.
If you forgot those, you can either uninstall and reinstall or you can take a look at Troubleshooting Guide for instructions on reseting admin authentication:
http://docs.sun.com/source/817-6085/troubleshooting.html#1026910

Error occured while searching for users in OIM admin console.

Hi Experts,
I deployed code from dev environment in to Test environment using deployment manager in OIM and also completed metadata import using weblogic metadataimport utility.Then when itried to search for users in OIM admin console. I am getting the following error.
Error messager:
ADFC-10001: cannot instantiate class 'oracle.iam.identitytaskflow.backing.taskflows.modifyuser.ModifyUserView'
ADF_FACES-60097:For more information, please see the server's error log for an entry beginning with: ADF_FACES-60096:Server Exception during PPR, #12
Did any body faced this issue?
Can u please suggest me on this?
Thanks,
Sri.

I've faced same error !!

How to clean the Admin Console Library of Resources?

Hi,
Could anybody point me how to clean the library of books, pages and portlets of the admin console library? It's full of old elements not in use anymore.
Thanks in advance,
leandro

With reference to steps in
Oracle® Business Intelligence Applications Installation Guide for Informatica PowerCenter Users Version 7.9.6 Part Number E14217-01
Chapter 4, "Installing and Setting Up Oracle BI Applications."
http://download.oracle.com/docs/cd/E14223_01/index.htm
I think I had a similar error at step
"4.6.3 Creating the Informatica Repository Service"
"The repository code page [106: UTF-8 encoding of Unicode]
does not match the code page specified for the corresponding
Repository Service in the Administration Console
[2252: MS Windows Latin 1 (ANSI), superset of Latin1]."
you must create the repository service with a matching code page
- remember that the code page cannot be changed after the Repository Service is created
Service Name = RepositoryService
CodePage = UTF-8 (Unicode)
later on at step "4.6.4 Creating the Informatica Integration Service"
it throws
"LM_36011 Code page mismatch. Service process is running in code page
[ISO 8859-1 Western European] whereas the service is configured
in the Admin Console to run in code page [UTF-8 encoding of Unicode]"
so I had to set the language env variables before starting the service
export LANG=en_GB.utf-8
export LC_ALL="en_GB.utf-8"
export INFA_HOME=/u01/app/oracle/product/8.6.0/etl_1
$INFA_HOME/server/tomcat/bin/infaservice.sh startup
Hope that helps.

DS Web services without the admin console. Is it possible ?

Hi
The client is concerned that they cannot enforce their password policy or integrate it with their Windows AD authentication for the admin console application. In our implementation we are using DS batch jobs with webservices enabled. Is there any way to have the webservices running smoothly without anyone installing/accessing the admin console.
We are using Tomcat. Can we use any options at tomcat level - 'Remote Address Filter' etc ?
If anybody has tried this, I would appreciate it if u can share the details
thanks
Dinesh
p.s. I have explained to the client about the functionality of the Admin console and what type of activities u can do within it. They still would like to explore options of controlling access to admin console since the jobs that are executed have sensitive data.

Hi Werner
Thanks for your reply. Has anyone tried IP restriction at the Tomcat level, any user experience that can be shared, will it affect the webservices WSDL when external applications make a call.
Are there any plans to integrate windows AD or any authentication for the admin console
Dinesh

Cannot access the Admin Consol Tasks

Hi,
When I go into the Admin Screen on SAP BPC I cannot access the Admin Consol Tasks but I can access the Web Admin Tasks and my excel is working fine.
Logoffed and retried, same problem.
Working on Version 5.1 SP4, Excel 2003.
Regards
Dean

Hi,
There can be 2 reasons for you not being able to access the Admin Tasks. I would request you to check the below things.
1. You need to check the Task Profile for your user ID and verify that you have all the necessary accesses.
2. When you login to the Admin screen, make sure that some Application is selected.
Hope this helps.

Can't access the admin console

changing from exchange 2010 to exchange 2013 was a very nice step & it work fine for more than 4 month ...
after a power lose for 2 or 3 time
This is what I get when I tray to access the admin console....
and the web access is not working
only the outlook access is working fine .... but I have to manage the exchange. such ( adding a new user )
it will be nice from any one who can share some idea to fix this
PS. domain is a windows server 2008r2
exchange 2013 on windows server 2008r2
both are on a different machine
thanks to you all

Hi,
Please go to IIS Manager (Switch to Content View) to check the files there:
Expand Sites > Exchange Back End > 15.0.620.29 (my Exchange server is Exchange 2013 CU1). Please check whether there are any file folders under themes and Scripts folder. If there is no folder there, please copy the whole folders "Scripts"
and "Themes" or the entire folder of 15.0.620.29 (cu1) folder from Exchange Installation Path /ClientAccess/ ECP/ CU1 folder in a working machine(the same Exchange version) to the update folder on same location.
Please switch to IIS manager Feature View, go to Exchange Back End > ECP home, open Application Settings in /ecp Home, please check whether the value for “BinSearchFolders” is changed to an invalid value. If so, please change it to:
C:\Program Files\Microsoft\Exchange Server\V15\bin;C:\Program Files\Microsoft\Exchange Server\V15\bin\CmdletExtensionAgents;C:\Program Files\Microsoft Exchange Server\V15\ClientAccess\Owa\bin.
Then run IISReset /noforce from a prompted command window to restart IIS services.
If all above doesn’t work, please collect some error logs for further analysis.
Regards,
Winnie Liang
TechNet Community Support

How to retrieve the admin console password

hi,
How to retrieve the password for the admin console. I have forgotten it. I am
using 8.1
Thanks
Ashwani

Hi,
I don't know of a way to retrieve the administrators password. Are you sure there
is one? I know how to change or reset it from the command line. Then you'll
know what it is :)
I did the following:
%JAVA_HOME%\bin\java -cp %WL_HOME%\WLS\server\lib\weblogic.jar weblogic.Admin
-adminurl localhost:8301 -username system -password patbumpus invoke -mbean Security:Name=myrealmDefaultAuthenticator
-method changeUserPassword system patbumpus password
You can also try -method resetUserPassword and you don't have to know the original
password.
There is a problem with changing the administrator's password. You need to update
the boot.properties file in the domain directory as well which you can do in a
sed script. If you don't, then the server won't boot. Also, there might be issues
with changing the administrator's password and then being able to start managed
servers. I had a problem, but didn't investigate enough to rule out user error.
This is supposed to be all fixed in WLS 9.x.
I know that I didn't answer your question, but maybe something was useful.
pat
"Ashwani Kalra" <[email protected]> wrote:
>
hi,
How to retrieve the password for the admin console. I have forgotten
it. I am
using 8.1
Thanks
Ashwani

Adobe muse - how to upload images in photo gallery in the admin console?

Question from Adobe Muse beginner - I can't figure out how images can be uploaded in a slideshow/photo gallery in the admin console? I can edit or delete images but not upload additional images?

Hi,
May I know which admin console are you talking about.
You are talking about Business Catalyst or Adobe Muse?
Please provide the steps to access the admin console via Muse.
Regards,
Gaurav Aggarwal

"File not Found" error in the admin console for dimension

Hi All,
We are onto the BPC7 MS version and recently we have started facing an error "File Not Found" while trying to access the dimension members from the admin console.
I have checked the "adminapp" folder where all the dimension files should be placed in the system, the files are present in the folder.
The mbr<DIMENSION> tables are also present in the database and have the members intact.
I have also tried with processing the dimensions (NOT processing from the membersheet) and it goes successful, but still face the same "File Not Found" Error.
We have a single appset and a single application.
Regards
Raghav

Hi Sorin,
Where can I check the File path if it is set incorrect?
I am recieving this message for all the dimensions, even when I click on the "maintain dimension members", try to process or even try to copy them i have this pop up showing "file not found".
I have the dimension tables intact at the DB servers and they have the members in them.
Regards
Raghav

Switching off DEBUG messages in the admin console

Hi
I have the problem that I see a lot of debug information on the log when starting the admin console and navigation through the pages. It makes the admin console VERY slow. This must be some sort of low level debug stuff which I'm not able to witch off.
I already made sure that debugging is switched off for the server (AdminConsole->Debug) and no diagnostic options are turned on. I also checked for a debug command line option in the start script.
Some example debug output:
DEBUG struts.util.PropertyMessageResources (PropertyMessageResources.java:284) - Saving message key '.assistant.jms.server.resumeconsumption.title
DEBUG util.logging.Logger (Logger.java:118) - Delegating to RequestDispatcher for URI /jsp/contentheader/Messages.jsp
Thank for any hints!

You could add a dynamic text field to your app, add it to the stage and send notifications for whatever you need to debug.
e.g. Just as you would use the trace("this message "+variableValue); in Flash to debug using the output window.
You would use
textfield_name.appendText("this message "+variableValue+"\n");
or if you were listening for error you could use something like:
private function errorXML(e:Event):void {
textfield_name.appendText("XML Error:"+ e);
I'm not sure how or if you can utilise the Xcode organiser with an AIR app.

Index page not showing in the Admin Console

Hello I have downloaded the J2EE package. It was working fine for a couple of months. Recently though, I had a problem in the admin console. After I login successfully, not all the framesets of the admin page is displaying. The top frameset and the left frameset display perfectly. However the index frameset displayed exception messages. I tried reinstalling my J2SE and J2EE and still, the exception shows up. The following is the stacktrace of the errors displayed:
HTTP Status 500 -
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
javax.servlet.ServletException: java.lang.RuntimeException: java.lang.IllegalArgumentException: http
     org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:286)
     org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
root cause
com.sun.enterprise.tools.guiframework.exception.FrameworkError: java.lang.RuntimeException: java.lang.IllegalArgumentException: http
     com.sun.enterprise.tools.guiframework.view.descriptors.ViewDescriptor.registerChildren(ViewDescriptor.java:198)
     com.sun.enterprise.tools.guiframework.view.DescriptorViewHelper.registerViewDescriptorChildren(DescriptorViewHelper.java:66)
     com.sun.enterprise.tools.guiframework.view.DescriptorViewBeanBase.registerViewDescriptorChildren(DescriptorViewBeanBase.java:112)
     com.sun.enterprise.tools.guiframework.view.DescriptorViewBeanBase.(DescriptorViewBeanBase.java:59)
     com.sun.enterprise.tools.guiframework.view.CCNodeEventHandlerViewBeanBase.(CCNodeEventHandlerViewBeanBase.java:26)
     com.sun.enterprise.tools.guiframework.view.descriptors.CCNodeEventHandlerViewBeanBaseDescriptor.getInstance(CCNodeEventHandlerViewBeanBaseDescriptor.java:37)
     com.sun.enterprise.tools.guiframework.view.DescriptorViewManager.getView(DescriptorViewManager.java:190)
     com.sun.enterprise.tools.guiframework.view.DescriptorViewManager.getView(DescriptorViewManager.java:150)
     com.sun.enterprise.tools.guiframework.view.DescriptorViewManager.getViewBean(DescriptorViewManager.java:58)
     com.sun.enterprise.tools.guiframework.view.BaseServlet.handleException(BaseServlet.java:268)
     com.sun.enterprise.tools.guiframework.view.BaseServlet.processRequest(BaseServlet.java:191)
     com.iplanet.jato.ApplicationServletBase.doGet(ApplicationServletBase.java:465)
     com.sun.enterprise.tools.admingui.AdminGUIServlet.doGet(AdminGUIServlet.java:58)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:748)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:861)
     sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     java.lang.reflect.Method.invoke(Method.java:324)
     org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:246)
     java.security.AccessController.doPrivileged(Native Method)
     javax.security.auth.Subject.doAsPrivileged(Subject.java:500)
     org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:268)
     org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
note The full stack trace of the root cause is available in the Sun-Java-System/Application-Server-PE-8.0 logs.
Sun-Java-System/Application-Server-PE-8.0

Sure thing Lance, here it is:

Users in the admin console

Similar Messages

Maybe you are looking for