Using access groups for documents

Hi, there!
I have groups of users with different access rights. Also I would like to setup documents groups which should be different for show to different groups of users as matrix.
For example:
1) General Policy is a group A, which means shown to anybody who has an access to corp portal.
2) SOP ID123 is a group C, which means shown to selected tiny groups of users
3) Confidential attachment to specification belongs to a group D, which granted access to 3 users only, including to CFO
Can I use such matrix approach or it is difficult to implement?
Or as an idea - more simple way just to create different libraries and manage access on this level?

Hello Alex,
I think the best solution is to create separate libraries, to separate permission.
But if you want to have the documentation in the same library, you can take another approach. Try to create a folder, or a document set, to separate the documents. Then assign permission to each folder/docset as needed.
finally, you can create a view to display all documents without folders. this way you can have the same view for all users, but users will only see what they have access.

Similar Messages

  • What's the  uses of "group" in "Document Numbering".

    What is the uses of "group" in "Document Numbering"?
    How can we link various "groups" to different "user"?
    How can I set, if I want some user to be restricted to a particular series?
    Pl Reply asap.
    Khushwant

    Hi Khushwant
    The solution is In the authorisation form,
    Go to the following module: Administration >System Initialization>Authorisations -->General Authorisations.
    In the Authorisations form select the simple user on the Left collumn and on the right of the form go to Administration --> System Initialization --> Series
    There you can determine the user's authorizations on particular series.
    Hope this was more helpful
    Regards
    George

  • Limited access group for some switches only

    Hi ,
    We have around 80 x cisco 3750 switches using AAA Windows Radius server and AD as authentication for IT users login.
    How do we setup a limited access group which allow them to access some switches ONLY?
    Any advice is very much appreciated.
    Thanks
    Qle

    Well its Prod (you have a dashboard called testdashboard in Prod?) anyway - someone might have changed the presentation catalogue permissions on the dashboard. All it takes is for someone to remove 'Everyone' or change a Group permission and it could effect.
    If they changed the Parent folder and cascaded the changes down this might cause this issue.
    You have a folder called 'Shared' - check the groups that the people are in have 'Traverse' , 'Read' or higher. Also chek dashboard permissions themselves from Settings-Manage Interactive Dashboards - Check the Padlock icon.
    Are you users getting allocated into the correct WEBGROUPS ? Is this assisngment done explicitly in the webcat or via an RPD Variable ? Have you checked NQQueryl.log to make sure any init blocks are completing successfully?
    Either persmissions have changed or group memebership is not completing.
    Good luck
    Alastair

  • OIM OES Integration to use LDAP groups for policy making

    Hi ,
    I am trying to make policy for the OIM application using OES. i want to use my LDAP groups as principals to control the access in OIM. How it can be achieved
    Thanks
    Edited by: user10660448 on May 21, 2013 1:35 AM

    Note that you can use the internal LDAP that comes with WebLogic, for your users and groups if you want.
    When you have multiple domains, you have a problem with this set-up as the internal LDAP is coupled to
    a specific domain. This means that users you created in one domain are not visible in the other. When using
    a separate LDAP that contains the users. You can configure in each domain an authenticator that points
    to the LDAP. In this way you can share to user accross multiple domains.
    When you are planning to use one domain you can stick with the internal LDAP if you want.
    An example set-up (that uses access manager not identity manager) can be found here: http://middlewaremagic.com/weblogic/?p=7819,
    which might help you in how to proceed.

  • Use DSAdd Group for adding several groups at the same time

    Good Afternoon!,
    As is written in my book:
    "By leaving the DN parameter empty, at which point you can type the DNs one at a time at the keyboard console of the command prompt. Press Enter after each DN. After the last DN, press Ctrl+Z, and then press Enter"
    Now I'm trying and this is what is happening:
    PS AD:\ou=groups,dc=contoso,dc=com> dsadd group -secgrp yes -scope g
    cn=test,ou=groups,dc=contoso,dc=com
    cn=test2,ou=groups,dc=contoso,dc=com
    cn=test3,ou=groups,dc=contoso,dc=com
    ^Z
    dsadd failed:´cn=test2,ou=groups,dc=contoso,dc=com" is an unknown parameter.
    type dsadd /? for help.
    What is what i'm doing wrong??.
    Thank you!

    Hi,
    Have you tried this in a CMD prompt instead of using PowerShell?
    Don't retire TechNet! -
    (Don't give up yet - 12,575+ strong and growing)

  • Can i use Access 2000 for my JDBC program?

    I tried to run a JDBC program from a book and it worked. The problem is, it uses an outdated "Informix" database. I want to do it in Access 2000. Is it possible?
    Please give me a sample code if you have guys.
    Thanks
    Moses

    You have to create a DSN (Data Source Name) in Windows first. You name that DSN, and that name is what you use in your url (url = db connection string).
    Say you have Students.mdb.
    You create a DSN that points to that file and name it "studentdb", or whatever name you like (do this from the odbc data sources item in the windows Control Panel).
    You format your url in the format "jdbc:odbc:<DSN name>". IN this case, your dsn name is "studentdb", so the url would be "jdbc:odbc:studentdb". You were supposed to replace "myAccessDSN" with the name of your newly created DSN.
    The other two arguments are for username and password, which typically aren't needed for Access dbs.
    So in the end you execute the following:
    Connection con = DriverManager.getConnection("jdbc:odbc:studentdb","","");

  • Using reference pages for document revision tracking

    I'm hearing a goofy idea at work about using Frame 7 reference pages for revision tracking on a document. I think the idea is to create a reference page and put a revision tracking table on that page.
    My impression is that reference pages aren't for users to muck with very much. Template updates could affect them, future Frame upgrades could affect them, etc.
    Is anyone else out there doing something similar and does it work?

    I can see a problem with your approach if you import formats from one file to many files. You can easily overwrite the revision information.
    Say you make a reference page called "REVS" for all your book chapters and begin populating the revisions. At some point in time, somebody imports the formats (including reference pages) from chapter 3 to all the other files in the book. All the reference pages named "REVS" will be overwritten with the chapter 3 revision information.
    A way ensure against overwriting would be to give a unique name to each file's revision page (REVSch1, REVSch2, etc.); however, you may end up with multiple, unused, outdated reference pages in each file. They won't cause any harm (except maybe causing confusion when updating the rev info), but may bloat your file size.

  • Using dynamic groups for j2ee security

    Hi all,
    I have my realm setup in server.xml and my standard and sun-specific deployment descriptors setup for j2ee security.
    Everything seems to work fine for groups defined via uniquemember attributes (all users are specified), but I'm having trouble with dynamic groups (defined with the memberurl attribute)
    How do I configure my realm in my server.xml to get this working?

    Hi,
    I got an official answer from SUN.
    "Dynamic Groups" are not (longer) supported with SJS AS 7!
    It will probably be supported with SJS AS 8 SE.
    If you have a iPlanet 6.5 application that is running with dynamic groups, just wait a little bit before you migrate.

  • How to associate more than one security group for UCM documents?

    When checking in a document we are only able to associate one security group to documents. In our case, a particular document can be seen by more than one group e.g a document can be seen bu both finance and marketing groups.
    How can we associate more than one group for documents?
    Our requirement is related to search. We want to display the documents to the end user based on the security group that is associated with the document. We are planning to use IDM and have all the groups/roles that are possible in the end site (also delivered by same ldap) available in UCM so that when checking in the documents we can associate desired groups who can see these documents.
    Regards,
    Pratap

    One thing before all, is that I suggest that you think through your security model before implementing it in UCM. You should ask yourself questions like :
    - Is security really based on department ?
    - Why two departments need to have access to the same category of document ?
    - Is it really security that I need or classification ? Is it a problem if Accouting have access to Finance or you just don't want Marketing documents in a finance related search ?
    - Maybe what you want is that finance guys to have access to marketing document.
    Without a clear business security model, it's hard to find a UCM security model as it is impossible to associate 2 security groups to one document.

  • How to use Bapi BAPI_ACC_DOCUMENT_POST for g/l account document posting

    Hi all,
    I am using BAPI_ACC_DOCUMENT_POST bapi for g/l account documents posting.as I am first time using BAPI in my program.can anyone give details about how to use this BAPI for document postings.what importing parameters need to be passed , which exporting parameters need to be passed and which tables need to be used.  
    Thanks in advance.
    Regards,
    Harshada

    Moderator message - Please search before asking - post locked
    Rob

  • OIM 9031: Can I create an access policy for Organization

    In OIM I can provision resource objects both to Users and Organizations.
    To automate resource provisioning I can add users to groups and assign an access policies to these grouos.
    But I can link access policies only to user groups which makes it useless when I want to automate resource provisioning to organizations.
    How can I use access policies for OIM organizations?

    access policies are used to provision a standard set of resources to users belonging to a particular group when on boarded or moved to that group. Access policies are always defined on groups in the idm space and never on orgs. There is no concept of membership with organizations.

  • Authorization for Document type in FB60.

    Hello everybody,
    On executing FB60 transaction code,  i want to control the document type entry means
    we have basically 2 types of document V1- Pune vendor bill and V2 Mumbai Vendor bill.
    I have to give V1 document type authorization only for pune location user and V2 for Mumbai location user.
    I had check the object in FB60 but I can't  find the authorization object for document type.
    I tried by creating test role name z:test and assign transaction FB60 in that role. when I assign this role to
    test user he can post both the document type invoice.
    So please suggest  me how to give the authorization for the V1 and V2.
    Thanks

    Hello Ganesh!
    I believe that authorizations object F_BKPF_BLA is what you're looking for. To use it, however, you will first need to define an authorization group for document type you want to protect. This is done in transaction OBA7; select the document type you want to protect, go into details view and define a value for "Authorization Group" field (this is freely defined, you can enter any value you want).
    After you've done this, a check will be performed on auth. object F_BKPF_BLA with the authorization group value you defined for the document type and activity.
    (I've never implemented this in our system, but I'm fairly certain that this will work.)

  • Product heirarchy vs material groups for sales

    Hi,
    Can I make use of the material groups(5 in toatl in sales view1) to generate report for seeing the value/sale of any material instead of using product heirarchy ?
    If I have created a 3 level heirarchy then how best I can use it to see in a report for any level.
    Is there any standard report availble to track my sales/inventory needs based on product heirarchy ??
    How can I track my purchases/open orders based on the employee resonsible for that material.i.e without having any HR module how can use the or create the staff of my company engaged in purchasing or for that matter selling also.
    May be I can use Purchasing group for each employee.But then I need to use the same employee as Sales person.
    How can this be achieved or any better option ??
    Thanks in advance.
    Regards,
    Manoj

    Redundant.Has been reposted in MM forum.Do not reply here

  • How to create an objectkey for documents

    Hi gurus,
    I try to create an object key for documents (to read the classification). I tried using FM  BAPI_OBJCL_GET_KEY_OF_OBJECT but there is only one field for Objectname.
    I tried different ways to execute the FM but the reurnparameter always tells me "Class type 017 requires additional objects". Can someone tell me how to use this FM for
    documents or is there any other way to create such a Objectkey (via RFC)?

    Hi,
    As far as I understand you dont create Object key for documents. These are created by system depending on you doc no, doc part, doc type, doc ver.
    You can find object key in table DRAD.
    Hope it helps.
    Regards,
    Siddhesh S.Tawate

  • Filter groups for outbound Vendor master , customer master idocs

    I need to create Vendor , Customer IDOCS CREMAS and DEBMAS only when the user changes the company code . I do not want the IDOCS to be produced when any other fields change.
    I am able to achieve the same using filter groups for Cost Center but not for Company Code.
    Thanks,
    Teresa

    try BD52,

Maybe you are looking for