Using the SDK to check if user security role membership

Is there any way to check if a user is in a particular security role using the SDK?
I ask because I am considering adding a web based ticket search by ID/key word look-up web service since this function is not part of the Self-Service Portal.  I am looking into what it takes to maintain the system's security model or at least limit
the information given to the users.  I am thinking that affected users might get some ability to modify their tickets.
I've already built a web portal hosting complex forms for several of our teams where the Self-Service Portal was too limited to collect necessary information.  The forms portal already uses the SDK to submit work items directly into Service Manager.
This would be a welcome extension of the web site's capabilities.

Hi,
You may try powershell, here are two PowerShell scripts that use
SMLets to reveal interesting information about user roles in SCSM, please refer to it:
https://gallery.technet.microsoft.com/Service-Manager-SCSM-User-ebcdfcd6
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

  • Setting password expiry using the SDK

    Without using the iDS console, meaning just by using the SDK, could I set the period for password expiry?
    Since the userPassword is a multi-value attribute, how can I differentiate between which is the password for signing-onto the server and which are passwords for other applications?

    If you mean to configure the password policy using the SDK, a Modify operation for the base object "cn=config" and replacing the value of "PasswordMaxAge" attribute will work.
    If you intend to set a specific expiration time for a specific user, you should not do this and let the server set the expiration time based on the configured password ploicy.
    For more information on the password policy configuration, you can refer to the Administration Guide.
    Also, although userPassword is multivalued, the pasword policy as currently defined in the Directory server suppose that the userPassword attribute contains only 1 value. If the password contains more than 1 value, the result of the password policy is undefined.
    And there is no way to differentiate between passwords.
    Regards,
    Ludovic.

  • Why yahoo/gmail retrieval and facebook app so so slow when in WIFI. But using the internet to check for emails and facebook is fast using the same WIFI connection??

    Why yahoo/gmail retrieval and facebook app so so slow when in WIFI. But using the internet to check for emails and facebook is fast using the same WIFI connection??

    Hi SandyS_VZW,
    Yes tried resetting the wifi connection and problem still persist.
    Here it is...to make it clear. Connected thru the same wifi at home...
    -> emails (yahoo/gmail) and facebook WEBSITES are working fine and fast when using/accessing thru a browser (chrome/samsung browser) - no problem with this.
    -> emails (yahoo/gmail) and facebook APP is soooooo sloooww (thru the App). Slow I mean comparing it to using their browser/websites... news feeds/emails refreshing so quickly but not when using the APP installed in Samsung Galaxy Note 4. Slow like - It will take around 5-10minutes just to get your emails and news feed refreshed.
    THIS HAPPENS ONLY WHEN CONNECTED THRU A WIFI which has a speed of 10-20mb. It is not happening when connected to the network data/plan.
    My wife has the same Samsung Galaxy Note 4 (coming from different provider at&t) - same setup (emails, fb app), same wifi connection, but she's not experiencing anything like it.
    Not sure why, I dont want to believe that while connected to a WIFI, Verizon is restricting anything and ******* me off to make me switch to my data plan connection everytime - which is Unfair!
    Was there a known issue similar about this case?
    thanks,

  • How do I use the same profile for two users on the same computer

    I use my laptop both at home and at work. And in each venue I use a different user log on. But I wish to have firefox use the same profile for each user log on. How can I get firefox to point to the same profile for each user?

    Note that only one user (Firefox instance) can use a profile folder at the time, so if you would switch the Windows user to another account then you would first have to close Firefox.
    * http://kb.mozillazine.org/Creating_a_new_Firefox_profile_on_Windows
    * http://kb.mozillazine.org/Shortcut_to_a_specific_profile
    * http://kb.mozillazine.org/Using_multiple_profiles_-_Firefox
    * http://kb.mozillazine.org/Bypassing_the_Profile_Manager

  • How do you remove the filename/path using the SDK

    I have a program that uses the Adobe Acrobat SDK . It creates aPDF file from a HTML file that gets created after the program cruches some data. It can create the PDF file fine but how do I get it to do it with out the file name and path in the lower left corner. We insert the created PDF file into another document and do not want to show the data on these created pages.
    Have searched through this site and can not see it mentioned.   HELP !!!

    I am not the programmer, he is out of the office today.
    What I see happen is that our program is used to create a database of the content of a multipage PDF file (an old doucment that has been scanned and OCR'd), the program then outputs the data as a HTML file (not the Adobe SDK).
    This HTML file is then converetd into a PDF file and attached to certain subsets of the original PDF file, its does a whole bunch of splitting and recombining of the document into the sections we need. It does this fine, no problems at all. All of this is done using our program and the Adobe SDK.
    The issue is that the PDF file (generally just one page) that gets created from the HTML file includes file name and file path at the lower left corner of the page. We are looking for the commands within the SDK that can turn the feature/function that creates this text on/off.
    As the Adobe Acrobat on this machine is used for many different jobs, some that require this text to be shown on other documents that are created (by using Acrobat itself and not the SDK) we really don't want to have to open Acrobat itself everytime we want to run this process.
    The SDK seems to have commands for pratically everything else, we were hoping it also has the commands within it that we can then program to not create this one area of text when converting the HTMl to PDF file from within our program..
    I hope that comes across OK
    PS
    I just ran a test creating a PDF file froma  webpage, and I can see the field Place Headers and Footers on a new page. I have tried creating the page with and without the Headers and Footers, that works fine. But can this be done just by using the SDK and if so where is that command located.
    Message was edited by: MichaelEastick

  • HT4314 I have tried to log into clash of clans on my iPad and it just keeps going to a new game rather than the one saved on my iPhone. I have been using the game centre and same user name and password ?

    I have tried to log into clash of clans on my iPad and it just keeps going to a new game rather than the one saved on my iPhone. I have been using the game centre and same user name and password ?

    I have the same problem.. EXACTLY. .  When phoning Apple Support they had trouble understanding my problem and couldnt find any type of solution. No one seems to take responsibility for GameCenter issues. The assistant escalated the problem but no one could find an answer. .
    The only idea was to set up a new apple id, hence a new GameCenter account. . But that would loose all the itunes data. Anyone got ideas ?

  • How to remove file attachments using the SDK

    I am looking for ways to programmatically remove file attachments from work items.  If I recall correctly, the system only keeps the file for as long as the relationship exists, so that, in theory, the file is deleted from the database a soon as the
    relationship is removed.
    I found this
    Using the SDK to Create and Edit Objects and Relationships Using Type Projections
    Is this the only way or are the other, simpler ways for deleting relationships and/or file attachments?
    Is this something I could do with the Orchestrator Remove Relationship activity?
    A little background on this question: I have multiple different teams with varying data retention requirements for Service Requests.  My longest requirement is 3 years (audit) while most teams only require 90 days.  I was looking to add in some
    jobs for some more aggressive file attachment grooming to keep the database smaller.
    Thanks.

    The relationship is defined as a membership/containment relationship. So, yes, if you delete the relationship, the file attachment (and the associated blob) are deleted as well.
    Based on the background you described, I'm assuming you identify a bunch of work orders whose files you want to delete if they're older than X. So, for instance "Work Items with Y team; delete file attachments older than 90 days", "Work Items
    with Q team; delete file attachments older than 3 years". Is that right?
    If so, you don't necessarily need to delete relationships specifically...you can simply delete the file attachment objects which will delete the relationship, the file attachment object, and the associated blob (the file itself in the database).
    Using the SDK, you will not need type projections for this. You'll only need the work item object(s) (an incident or service request or whatever), the GetRelatedObjects<>() method, and an IncrementalDiscoveryData object.
    So, after you get all of the appropriate work items, you can use the following snippet to delete their file attachments if the attachments meet your age requirements
    //Connect to the management group
    String strMySCSMServer = "<my mgmt server>";
    emg = new EnterpriseManagementGroup(strMySCSMServer);
    IncrementalDiscoveryData idd = new IncrementalDiscoveryData();
    ManagementPackRelationship relWorkItemHasFileAttachment = emg.EntityTypes.GetRelationshipClass(new Guid("AA8C26DC-3A12-5F88-D9C7-753E5A8A55B4")); //System.WorkItemHasFileAttachment
    //Get the work item's related file attachments using it's Id
    Guid myWorkItemGuid = new Guid("<some work item guid>");
    IList<EnterpriseManagementObject> lstFileAttachments = emg.EntityObjects.GetRelatedObjects<EnterpriseManagementObject>(myWorkItemGuid, relWorkItemHasFileAttachment, TraversalDepth.OneLevel, ObjectQueryOptions.Default);
    //Loop through each file attachment
    foreach (EnterpriseManagementObject emoFile in lstFileAttachments)
    //Determine its age
    DateTime AddedDate = (DateTime)emoFile[null, "AddedDate"].Value;
    TimeSpan FileAttachmentAge = AddedDate.Subtract(DateTime.Now);
    //Prep the file attachment for deletion if it's old enough, in this example, older than 90 days
    if (FileAttachmentAge.Days > 90)
    idd.Remove(emoFile);
    //Submit the deletions to the database.
    idd.Commit(emg);

  • Dynamic Image issue using the SDK CrystalReportViewer in a Web Farm

    Hello,
    Well it's the classic dyanamic Red X image problem with a twist. We have the CrystalReportViewer control coded into an ASPX web page using the BOE XI R2 SDK.
    The problem is everything works fine (after all the usual Red X image fixes) when only one of the servers in the farm are running. It's when two are running, by using Process Monitor, I can tell NetScaler is splitting up the HTTP calls so one server may have the temp image created and of course the other one doesn't.
    Therefore, if you're lucky enough for one server to handle most of the load, image comes up fine. Otherwise, the report renders, but you get Red X for the image.
    I have seen an article about a registry key (CrystalImageDir) that allows you to enter a network share as the temp folder. The problem is, we are using Windows Integrated Authentication for the intranet site so you're faced the two hop authentication hurtle, leading to access denied on the UNC network path.
    Anyone using the SDK in a .NET application using multiple web front end servers?
    Thanks!
    Horus

    By the way, I'm hearing that NetScaler can handle sticky sessions. However, since a report with dynamic images is really a GET request for the report, then a bunch of sub-GETs to grab the images, what URL would you set the sticky session for?
    For example, if the web page containing the CrystalReportsViewer was:
    https://coolapplication.mycompany.com/Site100/ReportApp/ViewReport.aspx
    Then report the viewer would contain links to something like:
    https://coolapplication.mycompany.com/Site100/ReportApp/CrystalImageHandler.aspx?dynamicimage=cr_tmp_image_5671d67a-4f5d-4ab1-b3c8-0d2561ee64f3.png
    So which URL/page gets load balanced? Or is that not how LB works?
    Thanks!
    Horus

  • How can I use the SDK(cs5 or cs6) draw a dot matrix bimap

    how can I draw a dot matrix bitmap?
    I want to use the SDK to draw a dot matrix bimap,like, Please someone help?Thanks a lot!

    I've moved your question to the InDesign SDK forum.

  • Using the Audit Provider to log ejb security events

    I would like use the audit provider to log security events for ejbs that use container managed security. Specifically I want to record the name of the ejb being accessed, the method the user is accessing, the time of the event and the user name of the user who is accessing the ejb.So far I have created an ejb that has method-permissions defined in the ejb-xml file. I have a number of users with different levels of permissions and the security is working.I have also installed the example Audit class that is shipped with weblogic.I am getting Audit indo in the log file, but I do not get any ejb info being logged.Is it possible to use the Audit provider that weblogic provides to audit ejb security events? Do I need to do something special to make this work?Please help, I can not find any documentation about what the audit provider logs.

    Actually I never tried to login into the provider, but I understand you just need the keys.
    Try this code, it works for me (some pieces are missing, but this is the core)
            Provider provider=null;
         provider=new SunPKCS11(providerFile);   // providerFile is a String
         Security.addProvider(provider);
         KeyStore store=KeyStore.getInstance("PKCS11");
            char[] pin=pinAsString.toCharArray();   
         store.load(null, pin);
            PrivateKey key=(PrivateKey)store.getKey(alias, null);
            Certificate[] chain=store.getCertificateChain(alias);
            .....Using this approach I managed to read all the information from the provider (aliases, certificates, ...). I'm not sure that's what you needed, but I hope it helped.

  • Excel opens and does not close when using the OI classes for some users...

    Hello Experts,
    I am using the OI classes(i_oi_container_control, i_oi_error, i_oi_document_proxy, i_oi_spreadsheet) to transfer Excel data to my itab. The problem we are encountering is that for some users the excel automatically opens and does not close. But in my case it is not opening so it is fine in my case. In my code I am already using the 'CLOSE_DOCUMENT' and 'RELEASE_DOCUMENT'.

    Viraylab,
    Check by any case you set the parameter register_on_close_event of the method init_control? Dont set the parameter as it will look for the corressponding custom code in your program. Also try with the method release_all_documents.
    Regards,
    Kiran Bobbala

  • I am using the wrong language to access a secure website. How can I change it to English?

    I am trying to access my university account from a computer in Germany and while I can access some features, such as e-mail, it is not allowing me access to my secure faculty account. The message I am getting is that I am using the wrong language, i.e. German, to access my account. How can I change the language to English, since the computer automatically uses German.

    Put the link of the website into Google translate at [http://translate.google.com/#de|en|], then click the translate button. You will then get a link on the right hand side of the page which will take you to a translated version of the page.

  • How can I use the same contacts for two users

    MY wife and I are using the same account. I want to give her a seperate log in account (user). All is working fine excempt for "contacts". These are at the moment empty. How can I get our contacts also in her new contact list.
    Are there any other things I should also look for, in executing this exercise

    Hi Iemke Kuijper!
    I have two articles for you that will help you achieve this goal. First, here is an article on exporting your contacts files and importing them:
    Contacts: Export and import your contacts
    http://support.apple.com/kb/PH11586
    This next article will help you get the contacts file from your user account into your wife’s user account:
    OS X Mountain Lion: Share files with others who use your computer
    http://support.apple.com/kb/PH10636
    Thanks for using the Apple Support Communities!
    Cheers,
    Braden

  • Not using the most recent checked in version of the web app DLL in Release build

    Hi folks
    Got some peculiar behaviour - I have three build configurations set up within VS2K13 for Debug, Release and DebugOnLive.
    There are some basic XML transformations to update emails, db-settings etc - all very simple and working.
    Needed to do a DebugOnLive build to test an emergency fix and everything built fine.  Tested on the pilot site, saw the fix was working and proceeded to rebuild for Release.
    Everything seemed great except the web-app DLL with the fix in that was used for the release build was not the latest version even though the pilot build had used the latest version.  I had to recheck in the DLL to get it to use the updated version!
    Is this behaviour 'by design' - it seems peculiar you would have to re-check in to change the build if all you are doing is swapping some settings?  You are fixed - all you are doing is building for a different configuration or am I misunderstanding?
    mmacneill123 (MCP)

    Hi Mmacneill123, 
    Thanks for your reply.
    You said that “the issue is that I have already checked in the changes…”, and you said “if I check in before 
    EVERY build, everything works fine!” too.
    You’re using the default build process template in your build definition? You configured these 3 configurations in your build definition to build your solution 3 times?
    If you remove that DebugForLive configuration, only configure Debug and Release in your solution and build definition to perform build, everything will works fine?
    After you changed the configuration from “DebugForLive” to Release, please check in on your solution first, then queue build definition to build your solution. After you changed the configuration each time, please check-in on your solution first,
    then perform build.
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Can I use the SDK on a PC to develop applications for the iPad, iPhone, etc

    I was thinking about paying the $99 a year to join the developer program because I want to download the SDK and try creating applications for the iPhone and iPad; however, can you download the SDK and use it on a PC or does it require that you have a Mac in order to do development work? The xcode4 and interface builder feature looked rather nice but I didn't know if I were to sign up and download if it would all run on my PC (Windows 7)or not.

    It will not run under windows, and you need an Intel-based Mac running Snow Leopard to use it. Have you looked at the Mac Mini?
    http://store.apple.com/us/browse/home/shopmac/family/macmini?mco=MTQzMDMxODY

Maybe you are looking for