Where do I see Sharepoint user with no group or permission in the UI ?

Hello All -
The powershell cmdlet 'New-SPUser' has only 2 mandatory parameters UserAlias and Web. Group and PermissionLevel are not required.
This means I can create a user with no group or no permission level. However UI does not allow this to happen, it forces you to select either one (group or permission level).
My question is where do I see the user in UI which was created using powershell without any group or permission level ? The reason I ask is UI when it displays user, a group is always selected.
Thanks!

You should be putting the "_catalogs/users/detail.aspx" section into your url. For example if you were to go into your site settings page your url might start as:
"http://manju.sharepoint.domain.com/sites/manjuTest/_layouts/settings.aspx"
and it should become:
http://manju.sharepoint.domain.com/sites/manjuTest/_catalogs/users/detail.aspx

Similar Messages

Where we can see receipt date with reference to Schedule lines in SA

Hi,
where we can see receipt date with reference to Schedule lines( not with reference to Items) in Schedule Agreement
Thanks in advance.
Best Regards,
Kapil.

Table EKET is schedule line table and it consists only the Scheduled and statistical delivery dates, the Open and GR Qty but not the receipt date against the schedule lines. The receipt dates are stored in the EKBE (History per Purchasing Document) tables but this dates are stored against the Purchase doc item number but not the schedule line no.
System generally fills the scedule lines in the chronological orders based on the GR qty.
RJ

Just bought a 3TB Time Capsule for a small office. Will have 4 users with MacBooks. What would ne the best setup for time machine individual backups and internet sharing in a secure way?

Just bought a 3TB Time Capsule for a small office. Will have 4 users with MacBooks. What would ne the best setup for time machine individual backups and internet sharing in a secure way?

Set up each Mac for Time Machine backups in the normal way. Time Machine will keep each backup separate on the Time Capsule, so users will only be able to see the backups of their own Mac.
Yes....there are convoluted workarounds that might allow one user to see the backups of another.....IF...they know the administrator password of the "other" Mac.
As far as Internet sharing, all users will have access to the Internet if they have a wired or wireless connection. If a Mac connects using wireless, it is possible to limit the time that they are allowed to connect to the network.
For example, you might limit the ability to connect to the wireless from say each Weekday from 8 AM to 6 PM.
With a wired Ethernet connection, you cannot limit access times to the Internet.

New files created with no group-write permission

We have OS X set up in Standard configuration.
We have one workgroup. When someone creates a new file in this workgroup, it is saved with permissions of "Username: Read/write", "Workgroup: read only", "Everyone: read only".
How do I change this to something sane? (i.e. Username: Read/write, Workgroup: Read/write, Everyone: No access)
Thanks in advance.

+When someone creates a new file ... (it gets POSIX) permissions of "Username: Read/write", "(group): read only", "Everyone: read only".+
This is perfectly normal.
*Two Permission Models* First, you probably already know that Mac OS X uses two models for permissions when determining effective access for files and folders. The two models are Standard POSIX (UNIX) permissions and Access Control Lists (ACLs).
*POSIX Permissions* POSIX permissions are very simple, and have some limitations. They consist of three "fields": an owner field, a group field, and an everyone else field. (There's also a special permissions field, but we'll skip that for this discussion.) The POSIX owner is always a user; it cannot be a group. The POSIX group represents one group, and the everyone else field covers any user who is neither the owner nor a member of the chosen POSIX group.
POSIX uses three bits to describe the access returned for each field. There is a bit for read, one for write, and one for execute (for folders, this means traverse, or see contents). Thus, there are eight possible POSIX permission combinations:
*POSIX Access Type ................... Binary Bit Representation ........... Decimal Bit Representation*
No Access .......................................................... 000 ......................... 0
Execute Only ...................................................... 001 ......................... 1
Write Only .......................................................... 010 ......................... 2
Read Only .......................................................... 100 ......................... 4
Write & Execute (Drop Box folder)....................... 011 ......................... 3
Read & Execute (Read-only folder) ..................... 101 ......................... 5
Read & Write ...................................................... 110 ......................... 6
Read, Write, and Execute (Read/write folder)...... 111 ......................... 7
It's helpful to know these decimal representations, because they provide a quick shorthand for describing POSIX access. Typically, we use the decimal shorthand like this: (decimal bit representation of the POSIX special permissions field)(... of the POSIX owner field)(... for the group field)(... for the everyone field). Thus, a combination like owner read, write, and execute, group read & execute, and everyone else read & execute is 0755: Special permissions are 0 (000 binary), owner is 7 (111 binary - read, write, execute), group is 5 (101 - read and execute), and everyone is the same as group (101).
*How POSIX Access is Determined for a Connecting User* In determining POSIX access to a file or folder, a user can only be "given" the access of POSIX owner, POSIX group, or POSIX everyone. The system first checks to see if the connecting user is the POSIX owner; if so, the user gets the permission bits assigned to the owner field. Otherwise, the user's primary group is compared to the POSIX group assigned to the file or folder; if they match, the user is given POSIX group access. If that fails, then the POSIX group is queried for a list of member users to see if the connecting user is a member of that group; if so, the user is given POSIX group access. If all three fail, then the user is given access assigned to everyone else.
*How POSIX Permissions are Set for Newly-Created Files and Folders* When new files or folders are created within a parent, the following determines their POSIX permissions:
1. The POSIX owner is the user who creates the file or folder.
2. The POSIX group is set to the group of the folder's parent.
3. POSIX permission bits (owner, group, everyone else) are set by the umask. The umask is 0022 by default, so default POSIX bits are 0755 (0644 for files) - owner read, write, group read, everyone read.
If the POSIX permissions were the extent of the permissions model, then we would have to either modify the umask (on each client) or adjust the server's behavior via an Inherit Permissions scheme. The first option is insecure, because you cannot just modify the umask for a particular server's share point - it would apply system-wide on the client computer, even for local files. The Inherit Permissions via POSIX was the method used by Mac OS X Server 10.3 and earlier.
Fortunately, you don't have to do either. That's where ACLs come in to play:
*ACL Permission Model* Access Control lists are just what you'd expect: a list of entries that describe what a user or group can or cannot do. Unlike POSIX, you can have a virtually unlimited number of ACL entries (or ACEs). Each ACE can apply to just a single user or a whole group of users. ACLs support two modes of operation, Allow or Deny, along with 24 unique controls arranged in four categories:
*Category ... Controls for Files Only ....... Folders Only .......................................................... Files & Folders*
Read ............... read and execute .............. list and search ........................................... readsecurity, readattr, readextattr
Write ............... write and append .............. delete_child, add_file, add_subdirectory .... delete, writeattr, writeextattr
Administer ............................................................................... ...................................... chown & writesecurity
Inherit ............ file_inherit ......................... directory_inherit, limit_inherit .................... only_inherit
*How ACL Access is Determined for a Connecting User* Since each ACL entry can be either Allow or Deny, the system makes two "tallies" for the connecting user: one for applicable Allow ACEs and one for applicable Deny ACEs. An ACE applies to a connecting user only if the ACE is specifically for that user or if the user is a member of the group to which the ACE applies. The tallies are created by adding all applicable ACEs for each Allow/Deny category. Thus, the ACLs return two things: a list of deny controls and a list of allow controls.
*How ACLs are Inherited to Newly-Created Files and Folders* When new files or folders are created within a parent, the following determines their ACL permissions:
1. If the file_inherit control is part of any listed ACE, that ACE is applied to newly-created files therein.
2. If the directory_inherit control is part of any listed ACE, that ACE is applied to newly-created folders.
*How ACLs and POSIX Permissions Work Together* The access level returned from POSIX and the two ACL tallies are combined in the following way to determine the effective permissions:
*Effective Permissions = (POSIX Access) + (ACL Allow tallies) - (ACL Deny tallies)*
For each unique connecting user, the effective permissions will be calculated in the previous way.
*Solving Your Problem* You can easily use effective permissions to your advantage to solve your problem. Simply enable ACLs on the volume that houses your troublesome share point, and add a new ACL entry for the desired workgroup, granting it all read, write, and inherit controls. This way, when users create new items in the share point, they automatically inherit that ACE. You'll also have to propagate permissions for all items that are already inside of the share point after you've added the ACE.
Here's an easy way to do both with an ACE granting writers_group read/write/inheritance on some share point using chmod form the command-line:
sudo chmod -R +a "writers_group allow readattr,readextattr,readsecurity,list,search,read,execute,\
writeattr,writeextattr,delete,deletechild,add_file,addsubdirectory,write,append,\
fileinherit,directoryinherit" /path/to/share_point
Hope this helps!
--Gerrit
Message was edited by: Gerrit DeWitt

Where can i see which user(s) has access to Discoverer Admin or desktop?

Hello
I am new to a company. Where can i see which employees have access to Discoverer Admin and / or Desktop editions?
So i want to know 2 things:
1. Who are the discoverer users in the company?
2. What reports do they have access to?
thank you
Edited by: iandekoker on Feb 20, 2009 2:46 PM

Hi,
If the user has Discoverer Administrator/User installed on there PC then they will have access to the tools. They will also need Admin or Desktop access to the Discoverer EUL. You can install the Discoverer V5 Business Area and run the EUL Management workbook to see all the Discoverer users, what privileges they have and which workbooks have been shared to the users/roles. See metalink note 556932.1 for details of how to install this Business area which is shipped with Discoverer Admin.
Rod West

Why do I see multiple users with the same name as an output of "users"

Recently, I found a peculiar thing when I typed "users" in the terminal. There were three users with the same name. After restart(power went down) I now see only one user there. Is this normal and why it can be happening? Why are there duplicate users sometimes?

alphaniner wrote:
Well now I'm confused. My xterm (xfce4-terminal) has that option disabled but I still get a user entry for each tab.
OT: you can run who to get a better idea of what each user is associated with. Eg. with Xorg on tty1 and terminal open with two tabs:
$ who
testing tty1 2013-12-11 08:55
testing pts/0 2013-12-11 08:55 (:0.0)
testing pts/1 2013-12-11 15:51 (:0.0)
Oh there is another option on mine besides "Run command as a login shell" called "Update login records when command is launched" I have them both disabled. Check for a second option maybe.

Initial Load - AS ABAP - getting only user with a group

Hi,
when i start initial load, i just get users with groups. Is that standard?
Br,
Philip

First of all - you'll need to familiarize yourself with the database for effective learning and debugging. I'm talking about the MS-SQL or Oracle-DB where you installed the IC-schema. It often helps me to understand whats going on behind the scenes.
Secondly - I read some of your posts - I would advise you to install the dispatcher and everything on the server where the DB is hosted - at least as long as you're in development. The MMC can still be on your local pc/laptop, although some things won't work well there (Import, Dispatcher-Status, ...). This'll ease things a lot I suppose.
About the service-user... SAP delivers a role you can import into PFCG (SAP_BC_SEC_IDM_.SAP-File in misc-folder of installation media). This role should be sufficient for your communication user, is updated every now and then and contains only the necessary permissions. Maybe you'll have to extend it (Z_SAP_) in case you want to read special tables not supported by the SAP framework (e.g. license data).
I can hardly believe that the current role assigned to your user only has permissions to users with groups != empty
By now I have no clue why you only see users in IdM with groups assigned in SU01... look up the SQL-table I mentioned if there are more users.
BR
Michael

I deleted a user with a lot of files but the memory of my MacbookAir wasn't freed

I deleted a user with a lot of files (more than 200 Gb) thinking that it should free some space, I took the option "remove all files from this user", the user was removed, but the space wasn't freed. I still have those 200 Gb blocked. How can I free that space?

Select the icon of your startup volume ("Macintosh HD," unless you renamed it) in the sidebar of a Finder window, and open the Info window. How much space is Available? Specify gigabytes (GB) or megabytes (MB).

Listing of Users with associated Groups

Is there an easy way to generate a listing of APEX users and their associated groups? I know how to get the current user and how to determine what groups they are part of, but am looking for a simple query I can run to generate a complete list of Users and their associated groups.
Thanks

if you want to return the application groups that a user is assigned to, you can use the WWV_FLOW_GROUP_USERS intersection table. For example;
SELECT group_name
FROM wwv_flow_group_users
WHERE user_id = (SELECT user_id
FROM wwv_flow_users
WHERE user_name ='MRITTMAN')
would list out all of the groups that the user 'MRITTMAN' belongs to
So to get all users and their groups, remove the where clause..
(You will need read rights to the view, some dba's deny read rights to these objects in the name of security..)
Thank you,
Tony Miller
Webster, TX

When I use Tab Groups, can I have some tabs that are always open together with a group, and just switching the groups that are besides the "always showing" tabs?

I like to have some tabs always open, like for example the facebook page, while others I need only occasionally, like Ebay / Work / Fun (which I could put into Tab Groups). So I was wondering if it is possible to have the following configuration:
Always open Tabs (e.g. Facebook, Myspace) and then next to that ONE of the Tab Groups (e.g. Group Ebay Stuff and Group Work Stuff and Group Fun Stuff)
or alternatively have TWO Tab Groups open at the same time, like Group A and Group B, and then switch to Group A and Group C, then Group A and Group D, then Group A and Gourp B again.

Hmm, well you can right click a tab you want always open and click "Pin as App Tab". I personally don't have much experience with Tab Groups, I'm just learning how to use them.
Hope this helps!

Turkish characters are distorted with firefox wheras I can see them OK with IE.

I have a website in Turkish .
"http://www.siirparki.com/fihrist.html"
Turkish charactes ,such as ç, ı, ş, ö,ü etc sometimes show as ? or some strange charactes. I can see them perfectly well with internet explorer. Also the page is distorted, so the bacground image repeats. Again, there is no problem about this when I use IE. I get complaints from my visitors also.
Thanks for your concern in advance.

You're welcome
The server currently sends that page as Windows-1252, so you may want to change that encoding to ISO-8859-9 if that is how you saved the page.
It would probably be better to save the pages of your website in Unicode and re-upload the files.

How do I create admin console users with full access to configuration and the directory in every instance?

I want to be able to create directory user ID for the iPlanet administrators. They should be able to access the admin console and all the instances created. They should be able to configure each instance and directory. I was able tocreate Admin Server Administrators but they were only able to modify the directory(tab) and not the configurations(tab). Any help would be greatly appreciated!
Thanks.
Keith

Hi Keith,
In o=netscaperoot, edit the static group called cn=Configuration Administrators, ou=Groups, ou=TopologyManagement, o=NetscapeRoot - this group contains the admins peer to your config admin. Since the console is quirky and doesn't let you add in users not in netscaperoot, just click advanced and put in the full dn of whoever you want in by hand, e.g., uid=scarter, ou=people, dc=mydomain,dc=com as a static member. then rebind to the console with the full dn and passwd, and away you go :)
james

Workflow to populate "Assigned to User" with AD group of the "Assigned to User" is empty or Null to user is empty.

I am updating roles and would like to use the [me] and [my group] tokens for views. I am planning on updating all the templates to specify an ad group in the "Assigned to User" field that corresponds to the appropriately selected support
group. I would like to avoid having the "Assigned to User" blank (this could happen either via using a generic template, or when re-assigning workitems) so I think I need a workflow to remediate any workitems that have no Assigned to Users.
There does not seem to be an easy way to do this just with a workflow configuration. Do I need to create a workflow with the authoring tool? Can I create a workflow that will compare a support group (enumeration?) and assign an appropriate
AD group?

probably the easiest way to do this would be to create a console workflow that runs on create (or update, if you want this to be reoccurring) and checks for the looks for the Display Name of the Assigned to user. This would only be populated if there was
a legitimate user, and would be null otherwise.
you could create console workflows for each support group (i.e. If Supportgroup = NumberA and AssignedtoUser.Displayname is blank) that applies a template that contains the correct user or group for that support group enum.
other options are available, so let us know what you're ideal conditions are.

Where do I find Adobe User Manuals and books in PDF for the iPad?

I'm standing in line waiting to get the new iPad 2 and have been looking for Adobe user manuals, classroom in a book series et. al., and nothing seems to be available for download to the iPad.
Is this true for now? When will ebooks from adobe become available?
I can't believe there is nothing yet.
I must be looking in all the wrong places, Amazon, Adobe site, Google... nothing.
Please help,
TIA,
Ken

Classroom in a Book is published by Peachpit/Pearson. I went to them to ask and here's what I got:
http://www.amazon.com/s/ref=nb_sb_noss?url=search-alias%3Ddigital-text&field-keywords=%22cs5+classroom+in+a+book%22&x=0&y=0
Also, we sell all of our current books on Peachpit.com as
watermarked PDFs, which users can easily transfer to their iPad (or just about
any other device that supports PDF). Of course, that also applies to any Help
file or other documentation PDF that a user might download from Adobe Help and
Support.
Also see this screenshot for CIBs in the iBookstore.
(You have to search for something like "CS5 Classroom in a Book").

Create a portal user with a specific Organizational Unit in the OID??

I would like to split my portal users by Organizational Units in the OID.
e.g.:
ou=country1, cn=user1
ou=country1, cn=user2
ou=country2, cn=user3
is it possible?
is it possible trough the administer tab of Portal?
Any experience ?
feedback??
Thanks
Didier

I think it is feasible.
But not through Administer tab.
Use your own api to add users (DBMS_LDAP.add_s + WWSEC_API.add_portal_user)
cn=user1, ou=country1, cn=user_search_base
cn=user2, ou=country2, cn=user_search_base
or maybe try to change dynamically user_create_base, I don't know if it is possible or not

Where do I see Sharepoint user with no group or permission in the UI ?

Similar Messages

Maybe you are looking for