Which permissions required to reset users' password

Hi,
I am trying to find out which 'group permissions' are required in order to reset password of any user in OIM. (by a user that is not xelsysadm)
I gave 'Update' right on 'Users' object but it didn't help. The following exception occurs ;
ERROR,03 Jun 2009 16:43:48,153,[XELLERATE.SERVER],Class/Method: tcDataObj/eventPreUpdate Error :Data Object Update Permission denied
ERROR,03 Jun 2009 16:43:48,160,[XELLERATE.APIS],Class/Method: tcPasswordOperationsBean/setXelleratePassword encounter some problems: Error occurred while setting user password.
ERROR,03 Jun 2009 16:43:48,161,[XELLERATE.APIS],Class/Method: tcPasswordOperationsBean/setXelleratePassword encounter some problems: Error occurred while setting Xellerate Password
ERROR,03 Jun 2009 16:43:48,161,[XELLERATE.APIS],Class/Method: tcPasswordOperationsBean/setXelleratePassword encounter some problems: Error occurred while setting user password.
Thor.API.Exceptions.tcAPIException: Error occurred while setting user password.
     at com.thortech.xl.ejb.beansimpl.tcPasswordOperationsBean.setXelleratePassword(Unknown Source)
     at com.thortech.xl.ejb.beans.tcPasswordOperationsSession.setXelleratePassword(Unknown Source)
     at com.thortech.xl.ejb.beans.tcPasswordOperations_rq3jhy_EOImpl.setXelleratePassword(tcPasswordOperations_rq3jhy_EOImpl.java:213)
     at Thor.API.Operations.tcPasswordOperationsClient.setXelleratePassword(Unknown Source)
Does anyone know the correct permission set ?
Kind regards,
Ece

Hi,
There is no specific permission to change the password. Change password is also an update operation.If want to give user an update permission then you might have to do following.
1.Suppose you want to modify user A belongs to Organization A.
2.The user that want to Modify user A is User B and its belongs to group Group B.
3.You need to go to Manage Organization->Search Organization A->Administrator and then you need to Add Group B into it.
4.Now all the user of Group B can create/modify all the users in Organization A.
Regards
Nitesh

Similar Messages

Reset user password, ORA-20001 error

Hi all,
I want to include a facility on an application for users to reset their password if they forget it. I've found the apex_util.reset_pwd function which looks perfect.
However in order to run it I have to be logged in as an admin user. This doesn't seem to work here, as by definition the user won't be logged in at all because they've forgotten their password! Trying it returns this error :
ORA-20001: User requires ADMIN privilege to perform this operation
which makes sense as I'm not logged in.
I've had a look over this forum can't seem to track down an answer so any help is appreciated.
Thanks,
Steve

Steve,
The use of Application Express user accounts for "real" user populations is the least satisfactory solution for this and other reasons. This facility is provided to get developers started with an out-of-the-box user account management solution but should be replaced with enterprise-level solutions such as SSO or LDAP when applications are deployed on a larger scale.
Scott

Resetting User Password by calling an external Web Service

Hi, 

We have an external Web Service, which handles Active Directory related activities. We would like to use this service to help users reset their passwords. We created a Portal Service from the external Web Service's WSDL. We have exposed the methods we require from this Web Service and are able to call these methods by creating Abstract Portal Components. We are currently testing the exposed methods via the Portal Component Starter and Viewer.

The current logon.par has a ResetPasswordPage. The corresponding form within the JSP is submitting data to the following string:
 
inPortal?proxy.getAlias("RPWFS"):logonBean.getLogonURL(proxy, null)
 

From what I can understand, the proper action URL will be returned by the method getAlias("RPWFS"). However, I am unable to find the definition of "RPWFS" in the PAR file.

Questions: 
<li>
What does "RPWFS" stand for? Where is this defined?
</li><li>
Would it be possible to modify the ResetPassword JSP file in the logon.par so that upon data submission, the Portal Service is called?
</li><li>
Where can I find documentation on JSPDynPage and DynPage (and how to create and edit the above-mentioned items)?
</li><li>
Is there any documentation on the functions used in the logon.par? For example, what is IAccessToLogic? Where is this defined? What does it do? Is there a library where we can search for information on this kind of stuff (like MSDN for Microsoft and API docs at java.sun.com)?
</li>
 Thank You.

Is there any documentation on the functions used in the logon.par? For example, what is IAccessToLogic? Where is this defined? What does it do? Is there a library where we can search for information on this kind of stuff (like MSDN for Microsoft and API docs at java.sun.com)?
Possible Answer:
https://help.sap.com/javadocs/NW04S/SPS09/ep/index.html 
While some packages are listed on this page, many other packages are missing (eg. com.sap.security.core.logonadmin.IAccessToLogic)

Full Reconciliation resets user password on resource?

I am new to IDM and thus have limited expertise, I would appreciate if you guys can help me out.
I would like to import all the users from LDAP resource through Full Reconciliation. Everything works well except that Full Reconciliation actually resets all the user password (I wonder why IDM does this). Does anyone know how can I remove this feature?

I have found out that it was not reconciliation that does the reset password, but Enable User workflow that I have defined in Per-account Workflow which resets the password.
Sorry for the misundersrtanding.

Cannot reset User password

The other user on my iBook got locked out of his account, accidentally typing the wrong password. When I go into Users, even as an admin, I cannot reset the password. The button is shaded out as is the short name, the only field avaiable is the User name.

Look at these links.
Here's the instructions if you have the discs.
*Mac OS X: Changing or resetting an account password*
http://support.apple.com/kb/HT1274?viewlocale=en_US
*Changing your administrator password*
http://docs.info.apple.com/article.html?path=Mac/10.4/en/mh655.html
 Cheers, Tom

Reset Users Passwords

Hi,
I have added the following code for resetting the password of an account, but it appears to not work.
               IUserAccountFactory accountFactory = UMFactory.getUserAccountFactory();
               String uniqueId = accountFactory.getUserAccountByLogonId("611867").getUniqueID();
               IUserAccount account = accountFactory.getUserAccountByLogonId(uniqueId);
               IUserAccount mutableAccount = accountFactory.getMutableUserAccount(account.getUniqueID());
               mutableAccount.setPasswordChangeRequired(false);
               mutableAccount.save();
               mutableAccount.commit();
When user logs in they don't recieve the change password screen.
If you can help I would appreciate it.
Points will be awarded.
Kai

i think this line should be true;
mutableAccount.setPasswordChangeRequired(true);
/Reward if helpufl

Reset user password using Apple ID

I have a problem with resetting a forgotten administrator password in OS X Lion.
I know that it is possible to reset the password with the Apple ID by typing in a wrong one 3 times at the login window.
But what if I have allowed automatic login and there´s no login window at all? For example, if the system is for any reason asking me for my password later and I am typing in a wrong one 3 times, will I now have the possibility to use the Apple ID to reset it? Is there any other way to use the Apple ID to reset the password (apart from booting into recovery mode)??
Hope you are getting my point! Thanks for your help!

See
http://osxdaily.com/2011/08/24/reset-mac-os-x-10-7-lion-password/ and
http://osxdaily.com/2011/09/19/change-password-mac-os-x-10-7-lion-without-knowin g-current-password/

Permissions required for an user to create a View in Oracle 10.2.0.1.0

Hi,
I am facing one serious issue with Oacle 10.2.0.1.0.
I have an user (Atlas) created with below permissions.
grant connect to atlas;
grant resource to atlas;
grant create public synonym to atlas;
grant select any dictionary to atlas;
grant query rewrite to atlas;
I will create my database schema on this user Atlas. All my scripts are executing properly with Oracle 9i and 10g version 10.1.0.2.0. But when it comes to Oracle 10g version 10.2.0.1.0 the views creation is throwing an error saying that Insufficient Priviliges.
I didn't get why this error is coming.
What previliges does an user should require for creating a view in Oracle 10.2.0.1.0 version?
I have installed Enterprise version of Oracle 10.2.0.1.0. Please suggest me with this.
Thanks
Rao

CREATE VIEW was taken away from connect or resouce in 10.2.x. It has to be explicity granted... Not sure what this has to do with XML per-se :)

How to know the system generated password when reseting users password?

Dear All,
I have reset password using "genarated new password" in the portal from User admin,but dont want to send a e-mail notification to end users, instead of that i want to know the system generated password.
But system doses't shows it.How can I tell what the password is and give it to the user?
I have a All super admin rols.
Pleas guide.
Thanks in advance.

Basically you can't! If you tell it to generate one, then that's only sent to the user. Why not enter your own random password or let the user pick their own through some sort of self service function?

Which permissions required for using CAF External Service Configuration?

Hello,
I have written an application service which invokes an external RFC. To this end, I have imported the desired RFC as external service and wrapped it as an application service.
However, when invoking this application service I get an error message that the external service has not been configured. I have learned that I have to use CAF's External Service Configuration tool.
Unfortunately, this tool complaints that I don't have the required administrator permissions. This happens even when I log in with the administrator account.
What do I do wrong?
Best regards
Alexander

I just have found the required role. It is role SAP_CAF_ADMIN.

How to prevent user password being reset to the same password?

Hi,
As you all know, domain admin has the power to reset user password. Let's think of the following scenario:
if an admin lets a user reset his password to use the same string, this action means he could nullify company policy on password which requires user's last N passwords being recorded in the history.
We could very well imagine that the admin reset his own personal password in order to bypass company policy.
I have asked partner forum to see if there's a way to prevent such thing, but the reply I got is "No".
I wanted to know if anyone of you have any idea to prevent such thing from happening?
Or if it's possible to get the hash value of users past N password to see if he's always using the same password?
Thanks in advance for your ideas.

Good rules is better alternative to complex policy.
Combine password history with time interval between changes.
Regards
Milos
You don't understand what I mean.
He knows exactly what you mean.
check out this link below:
http://technet.microsoft.com/en-us/library/cc757692%28v=ws.10%29.aspx
Enforce password history
The Enforce password history policy setting determines the number of unique new passwords that must be associated with a
user account before an old password can be reused .
The possible values for this Group Policy setting are:
A user-defined number from 0 through 24.
Not defined.
Discussion
Password reuse is an important concern in any organization. Many users want to reuse the same password for their account over a long period of time. The longer the same password is used for
a particular account, the greater the chance that an attacker will be able to determine the password through brute force attacks. If users are required to change their password, but nothing prevents them from using the old password or continually reusing a
small number of passwords, the effectiveness of a good password policy is greatly reduced.
Specifying a low number for Enforce password history allows users to continually use the same small number of passwords repeatedly. If you do not also set Minimum
password age, users can change their password as many times in a row as necessary in order to reuse their original password.
If you set Enforce password history to a number greater than zero, users must come up with a new password every time they are required to change their old one. This
improves security, but it can increase the risk that users will write down their passwords so they do not forget them.
If you set the value to the maximum of 24, it helps to ensure that vulnerabilities caused by password reuse are kept to a minimum.
For this policy setting to be effective in your organization, configure Minimum password age so that you do not allow passwords to be changed immediately. Enforce
password history should be set at the level that combines a reasonable maximum password age with a reasonable password change interval requirement for users.
Location
GPO_name\Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy\
Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
IT Stuff Quick Bytes

Can user Reset the Password without Administrator help in MS Exchange server 2013

Hi Team
IT is possible for user to reset the password
in MS Exchange server 2013 without Administrator help? (by getting mobile verification code how we get in Gmail ,& Outlook )
if it is possible ,kindly send me the configuration URL to my Mail ID [email protected] & [email protected]
Thanks & Regards
Dinesh.s
+91 9566958700

You would have to assign Admin role permission to users in EAC.
To understand this concept in more depth, I would refer you at this well described article : http://www.mustbegeek.com/reset-user-password-in-exchange-2013/
Or, you may use any third party like, (http://www.selfservicepasswordreset.org/) that seems to be an appropriate approach in your environment. This tool allows end-users to perform self password reset
and self account unlock from any computer in the network through a web-browser or directly from the login screen without any assistance from the administrator. Administrator can configure strong policy for automatic account unlock and automatic reset
password at a specified time for any particular domain OU's.

UME Actions - Manage All User Passwords

Hello everyone,
I am trying to create a role for our service desk to be able to manager users and be able to unlock them and/or reset their passwords. So I created a role with the identity management iview and gave the role the assigned action "Manage_All_User_Passwords". On <a href="http://help.sap.com/saphelp_nw04s/helpdata/en/5f/670db7939b8e48999d65f8a05ad611/frameset.htm">sap help</a> it says of this action:
"Provides permissions required by a user to change the password of other users independent of company. This also enables the user to view all user profiles."
Now the problem comes in with users in different companies. Any user I assign this role to is only able to search for users in their own company. Is there some other configuration I need to do or permissions I need to change to be able to manage the passwords of users in different companies?
We are running NW04s SPS10
Thanks for any help,
Chris Bahr

Yonko,
The role's assigned to my test user are all user created. There are no other assigned actions that would interfere. I have not assigned the delegated user admin role as this would give more power to the user than we want. What we are going for is a role for our support people to be able to unlock and reset people's passwords. So we just want them to be able to be able to unlock and reset the passwords of all users in all companies, which I assumed manage all user passwords would do, but I am obviously missing something.
Best Regards,
Chris

Server user password fails daily

I have a server with Windows Server 2003, and seven workstations with Windows 7.
Among the items the server hosts is a folder to which Everyone has full access and permissions. On every workstation is a shortcut to that folder. My staff requires daily access to it.
That folder has a simple password, which everyone knows. However, when they click their shortcut to that folder, it asks for a username/password, which it doesn't accept. Once I reset the password on the server (the SAME password), then the shortcuts
work, without the username/password box.
What server settings could be causing this, and how can I ensure my staff has daily, free access to this folder?

-->which Everyone has full access and permissions
-->Once I reset the password on the server (the SAME password), then the shortcuts work, without the username/password box.
reset the password, no password and username poped up? no need to type...?
everyone has full control permission, why also need username and password...? did you mean still want to configure as original settings so need to type name/password?
Best,
Howtodo

Java code to reset UNIX password

Hi I need to reset a password of remote UNIX machine through java.
Please give me clues/commands by which i can implement this .
If you have any info about command interfaces that unix gives on some ports for resetting by connecting through a socket you are most welcome.
My OS is HP-UX but other OS tricks are also expected.
NB. I have admin password in my hand , I need to reset another users password

thomas.behr,
You might be right person to answer me ,
Tell the command or methods for that . No I'm not the right person to answer you. I do have no knowledge on System Administration at all.
My question was meant for you to elaborate on why you think you need or why you want to use Java to reset user passwords. It just did not cross my mind that you might be trying to write a system administration tool in Java, since such tools are highly OS specific AFAIK.

Which permissions required to reset users' password

Similar Messages

Maybe you are looking for