What role is required to 'nominate' a user using BPM API's?

I see an exception while nominating a user using SAP API's. Log as below:
Caused by: com.sap.bpem.tm.exception.InvalidAuthorizationException: User Test1 is not allowed to perform action NOMINATE on task 3v67h898881811e4bae5000000ddc0f1
Nominate works fine if the user is assigned "Administrator" role. Is there an alternative role which can be assigned as we cannot give end user admin access.
Thanks in advance
Regards
Vidya

There is a standard user 'SAP_BPM_Service'. You can assign the 'SAP_BPM_SuperAdmin' role to perform all possible actions related to BPM.
what you are trying to do is nominate a user for a particular task For this, you will have to assign roles to the person who is currently logged-in. So standard user does not come into picture.
Refer this link for details of Task Delegation.
Refer this link for all possible roles and authorizations related to BPM processes and tasks.
API or no API, assign 'SAP_BPM_SuperAdmin' to the user.

Similar Messages

  • How to access Task details using BPM API for substituting user

    Hi Expert,
    I need one help, we have a requirement, in which I wanted to access the BPM task details of a user which is substituting user using BPM API.
    Substituting user's name is not exist in Potential owner of Task. That’s why Using method "getMyTaskAbstracts(Status)" we cant acess those task which assigned by Substited user.
    Kindly let me know if there is any way, we can get task details of the task which assigned by substituted user to substituting user.
    Regards
    Div

    Pl use this api.
    getTaskAbstractsForMySubstitutedUsers.There are couple of variations u can use.
    Thanks
    Manish

  • What roles are required to use Guided Procedures?

    Hi ,
    What roles are required to use Guided Procedures?
    Thanks
    Srinivas.K

    Hi,
        Refer this block  https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/3603. [original link is broken] [original link is broken] [original link is broken]
        This blog is very useful to u and in this blog she is explained what roles to needed for Guided Procedure.The Composite Application Framework role is used for the Guided Procedure in the Portal.First create the user and then assign the CAF role for that user.This is way to obtain the Guided Procedure for that user.
    Thanks,
    satheshkumar.R

  • Provisioning OIM user using OIM APIS

    Hi All,
    Could anyone help me out on how to provision a User using OIM APIS.
    Thanks and Regards,
    Vaasu.

    public class GetGroups {
    tcUtilityFactory utilFactory = null;
    tcSignatureMessage moSignature = null;
    tcUserOperationsIntf moUserUtility = null;
    tcResultSet userResultSet,userSet = null;
    ConfigurationClient.ComplexSetting myConfig = ConfigurationClient.getComplexSettingByPath("Discovery.CoreServer");
    final Hashtable env = myConfig.getAllSettings();
    Map v = new HashMap();
    public void UserGroups(String userid) {
    try {
    System.out.println(" I am in TRY");
    moSignature = tcCryptoUtil.sign("xelsysadm", "PrivateKey");
    utilFactory = new tcUtilityFactory(env, moSignature);
    moUserUtility =
    (tcUserOperationsIntf) utilFactory.getUtility("Thor.API.Operations.tcUserOperationsIntf");
    v.put("Users.User ID", userid);
    userSet = moUserUtility.findAllUsers(v);
    long user_key = userSet.getLongValue("Users.Key");
    System.out.println( " Group Name " + grpName );
    } catch(Exception e){
    e.getMessage();
    Like that
    moobjIntf =
    *(tcObjectOperationsIntf) utilFactory.getUtility("Thor.API.Operations.tcObjectOperationsIntf");*
    Map objmap =new HashMap(0;
    objmap.put("Objects.Name", "AD User") \\ just hardcoding this AD User you can pass it as variable also
    tcResultSet moResultSet = moobjIntf.findObjects(objmap);
    long obj_key = moResultSet.getLongValue("Objects.Key");

  • What roles are required to run the export import?

    Hi,
    I want some info on roles are required to run the export import.
    I have done the following in sys user:
    GRANT EXP_FULL_DATABASE TO IMP_TEST
    GRANT IMP_FULL_DATABASE TO IMP_TEST
    But Doing the above command the IMP_TEST will get all priviles (also the system tables)
    Is there any mechanism to restrict the user to export and import only the tables not anything?
    Thanks and Regadrs

    Hi!
    If you create a user like this
    CREATE USER imp_test identified by password;then the user will be able to import or export only its own schema. If you grant the exp_full_database and imp_full_database roles to this user like you did then the use will be able to export or import the hole database (with SYS schema). But as far as I know you can't set any more restrictions to the user.
    yours sincerely
    Florian W.

  • What role is required to open and execute query in BE query designer

    Hi,
    Am new to BE, need to know what role should i be assigned with to open and execute  a query in query designer.
    OPEN dialobox displays "NO role availabe".
    Is this a problem of role assignment or am i missing some steps
    thanks
    srikanth

    IN Enterprise portal plz check whether these roles are present or not.
    pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.ip.bi/Roles/com.sap.ip.bi.business_explorer_showcase
    pcd:portal_content/com.sap.gm.cnt/core/VCRole
    pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.ip.bi/Roles/com.sap.ip.bi.bi_showcase
    pcd:portal_content/administrator/content_admin/content_admin_role
    pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.ip.bi/Roles/com.sap.ip.bi.business_planning_showcase
    pcd:portal_content/every_user/general/eu_role
    in BW front end , you have to create role with the auth objects S_RS_COMP, S_RS_COMP1, S_RS_MPRO, S_RS_ICUBE auth objects.
    include the t-codes if necessary. RSRT you can include.
    Hope this would help you.

  • How to assign roles to users using WL api?

    Hi,
    We have a requirement to allow creation of new users through application screens and assign groups and roles to those users.
    My users will exist in external LDAP server while my groups and roles will exist in embedded LDAP server. Using WL APIs i am able to create users and add them to groups using the code peices given below:
    ========================================
              userProviderControl.createUserSimple(form.userID, form.password);
              groupProviderControl.addUserToGroup(ocnGroup, form.userID);
    ========================================
    How do i assign roles to this new user programatically?
    If i add a role from console (Home > Realm Roles > Summary of Security Realms > myrealm > Realm Roles -> Global Roles) and edit role condition to add this newly created user then i it works fine. I want to achieve the same i.e. edit role condition programatically.
    Any help will be greatly appreciated.
    Thanks,

    Problem Solved !!!
    The data-type conversion needs to be performed in the SPML2 Person Form. Add a Field called waveset.roles and map it to the SPML2 attribute name being used in ur client. It's best done through a rule.....
    If anybody is facing similar problem and need more details....please email me @ [email protected]

  • To get the Roles, Worksets, iviews assigned to portal user using webdynpro

    Hi..
    I need to display the roles, worksets, pages and iviews that are assigned to a particular portal user using WebDynpro.
    I tried to search in SDN and found a few blogs on this... but all are for DynPages. I could not find any inputs on how to achieve this in Webdynpro.
    I am listing down the blogs for your reference :
    1) /people/prakash.singh4/blog/2005/07/28/browse-roles-folders-pages-iviews-assigned-to-a-user-ep6-sp9-and-higher
    2) /people/prakash.singh4/blog/2005/09/06/create-a-sitemap-for-your-portal
    Please provide me your suggestions on how to display the roles, worksets, pages and iviews that are assigned to a particular portal user using WebDynpro.
    Thanks and Regards,
    Sayan Ghosh

    Please use following code to get all roles assigned to user:
         IWDClientUser wdUser = WDClientUser.forceLoggedInClientUser();
         IUser user = wdUser.getSAPUser();
         String strRoleID = "", strRoleDesc = "";
         IRoleFactory iRoleFactory;
         iRoleFactory = UMFactory.getRoleFactory();
         // Get All the Roles of the User
         Iterator iteratorRoles = user.getRoles(true);//prtRequest.getUser().getRoles(true);
         // Loop through all the Roles
         while(iteratorRoles.hasNext())
              strRoleID = iteratorRoles.next().toString();
              try
                   strRoleDesc = iRoleFactory.getRole(strRoleID).getDescription();
                   wdComponentAPI.getMessageManager().reportSuccess("Role: "+strRoleDesc);
              catch(Exception e)
                   wdComponentAPI.getMessageManager().reportException("Exception e: "+e, false);

  • How to get permission of a sharepoint list for a user using REST api

    Hi there,
    I have a requirement where i need to check the access permission of a user against a List or Library only using REST api from my remote salesforce app. [I already have access token and I am able to view list, add item etc..]
    Say for example, I have to send the list name and user name, and get the result as Read, Write, Contribute(Manage), None. I need to display what permission does that user have for that List.
    How do I achieve this. Please help me.
    Thanks in advance.

    Hi,
    For High and low bits, we can create a new SP.BasePermissions object to use like below:
    function success(data){
    var permissions = new SP.BasePermissions();
    permissions.set(SP.PermissionKind.manageLists);
    var hasPermission = permissions.hasPermissions(data.d.EffectiveBasePermissions.High, data.d.EffectiveBasePermissions.Low);
    Here is a detailed article for your reference:
    http://www.lifeonplanetgroove.com/checking-user-permissions-from-the-sharepoint-2013-rest-api/
    Thanks
    Best Regards
    Jerry Guo
    TechNet Community Support

  • What is the problem when opening jpg files using Desktop API

    Hi, i would like to open jpg, or gif files using Desktop API, and the application crashes.The Desktop API is supported by my OS, because txt files, or file directories can be opened, mails can be sent, browsing is also supported.
    Only jpg and gif, and i think other picture formats cannot be opened.
    Obviously ACDSee and other picture viewing programs are installed in my computer.
    The corresponding application code can be found at the bottom of the page of http://www.awprofessional.com/articles/article.asp?p=661371&seqNum=2&rl=1
    my code:
    if(Desktop.isDesktopSupported()){
    Desktop desktop=Desktop.getDesktop();
    try
    desktop.open (fileToOpen);
    catch (IOException ioe)
    JOptionPane.showMessageDialog (frame,
    "I/O problem");
    catch (IllegalArgumentException iae)
    JOptionPane.showMessageDialog (frame,
    "File doesn�t exist");
    fileToOpen is obviously a File.
    Thx for the help in advance.
    Message was edited by:
    javahelps
    Message was edited by:
    javahelps
    Message was edited by:
    javahelps
    Message was edited by:
    javahelps

    My file association for jpg files is correct, if i click on a
    jpg, ACDSee starts immediately.Although I am a long time Windoze non-user, I vaguely remember that there's a difference between correct file-type association being set and some application starting at a mouse click on a file icon. I also vaguely remember Windoze file-type association mechanism uses a few action-types. Java Desktop should expect a specific action-type for the association.

  • What roles are required with OWB?

    What are the different roles or skillsets required to implement OWB (developer, DBA, analyst, modeler)? What are most of you seeing as far as management of the OWB in general? I'm afraid this is another one of those "the DBA does that" things. What are your experiences. Thanks.

    It's just nothing like developer, dba, analyst , modeller and etc. For OWB, someone needs to have work experience in Oracle SQL, PL/SQL (your term developer), Managing Non-Schema objects, understanding & managing Privileges and roles from sys level to down at user level (DBA), define the source building the mart (modeller). SOme ONE has got good DBA(OCP) with strong PLSQL is the one will be verygood in OWB...

  • Adding New Portal User using PLSQL APIs

    I am trying to use the PLSQL APIs to add a new user based. Please let me know if I am on the right track. I am using Portal 3.0.8
    1) At the portal30_sso schema, I used wwwsso_ls_private.ls_create_user and it works.
    2) At the portal30 schema, I used wwsec_api.add_portal_user and it works.
    3) I used the activate_user api and it works.
    4) Still can't log on using my user name and password. The message is "Error: Authentication failed. Please try again. (WWC-41419)"
    Please help.
    null

    Here are the steps I have taken to set up Self Registration using the PL/SQL API
    1st Solution...
    1) At the portal30_sso schema, I used wwwsso_ls_private.ls_create_user and it works.
    2) At the portal30 schema, I used wwsec_api.add_portal_user and it works.
    3) I used the activate_user api and it works.
    4) Still can't log on using my user name and password. The message is "Error: Authentication failed. Please try again. (WWC-41419)"
    2nd Solution
    1st Solution...
    1) At the portal30_sso schema, I used WWSSO_API_USER_ADMIN.create_user and it works.
    2) At the portal30 schema, I used wwsec_api.add_portal_user and it works.
    3) I used the activate_user api and it works.
    4) Still can't log on using my user name and password. The message is "Error: Authentication failed. Please try again. (WWC-41419)"
    Here is a code sample of step 1.
    declare
    v_user portal30_sso.sso_user_type;
    v_err number;
    begin
    portal30_sso.wwsso_api_user_admin.create_user
    p_username => 'NEWUSER2',
    p_password => 'PASSWORD',
    p_error_code => v_err
    end;
    It would really help me out if I can get a response to see if it is possible or not to create a self-registration feature for Portal. Thank you for your help.
    null

  • Check user is valid user using DI API

    Hi all,
    I want to create custom form in screen painter.
    In this i will have User name and Password.
    After entering this credentials i want to check whether entered user is valid user or not

    h plz Check it
    Encryption/Decryption of Password
    True Modal form with UI API!

  • EMail Notification for the Newly Created users using UME API

    Hi ,
    In my application ,the user creation is handled by custom Admin module which uses the UME APIs. Upon creating the user, we need to send a notification mail to the user's email id which he provided in the Add new user form.
    <b>Is there any direct APIs available to notify the user via email. I hope the Standard user creatin module in User Administration also uses the same UME APIs.</b>
    Please let me know the possibilities.
    Appreciate your help.
    <b><b>Sample Code:</b>
         <b>IUserFactory mUserFact = UMFactory.getUserFactory();
         IUserMaint mUserMaint = mUserMaint = mUserFact.newUser(aUser.getLogin());
         IUserAccountFactory mAccountFact =UMFactory.getUserAccountFactory();
         IUserAccount portalAccount = null;
         mUserMaint.setDisplayName(aUser.getLogin());
         mUserMaint.setXXX();
         mUserMaint.save();
         mUserMaint.commit();
         portalAccount = mAccountFact.newUserAccount(aUser.getLogin(), mUserMaint.getUniqueID());
         mAccount.setPassword("XXXXXX");
         aUser.setPassword(mPassword);
         mAccount.save();
         mAccount.commit();</b></b>
    Thanks and Regards,
    Sekar

    Hi,
    I have used the Java Mail API directly send the notification upon new user creation.
    Thanks and Regards,
    Sekar

  • What priviledges are required for a user to take rman back

    Hi ,
    I want to create a database user, which i will use for takie database backup using RMAN.
    what roles , i should assign to this user.
    Can anyone help me please in this regard.

    User must have SYSDBA privilege.
    Check Connecting the RMAN Client to Databases.

Maybe you are looking for