WLCS USer/Group Management

Hi,
I am having a problem with the WLCS3.1 UserManagement part.
The application we are buildin basically consists of two pieces, Internet
and extranet( site
accessible to our customers/partners by logging in).
The internet part has couple of forms that our prospect customers submit and
this user profile information gets stored in Oracle.
The second piece isour extranet, which works in sync with our Customer
Relationship Management appliction. The users information is put into
Netscape DirectoryServer(NDS) by our CRM application ans we just use it for
authentication and single sign on into both the application.
Since the User Management system works in conjunction with the WebLogic
Server's security realm (which happens to be LDAP for us), we cannot store
user/groupes anymore into oracle by using JSP taglibraries.
My question is, if we can store just the user (and password) in NDS LDAP and
the
GROUP and profile in WebLogic and personalize the content based on this
info.?
If so, what is the best workaround for this..
Any help is greatly appreciated.
Thanks
-sarath

Hi Tracy,
Are you trying to create property sets?
If you are trying to create a user/group property set, then you do that with the EBCC tool. See the "Site Infrastructure" tab and
use
File --> New --> Site Infrastructure --> User Profile to create a new one. See "Creating a Property Set Definition" at
http://edocs.bea.com/wlp/docs70/dev/usrgrp.htm#998997 .
Tracy Ward wrote:
How do you assign Property sets in the user group management - the set shows in users and groups - but not in the management window--
Ture Hoefner
BEA Systems, Inc.
4001 Discovery Drive
Suite 340
Boulder, CO 80303
www.bea.com

Similar Messages

  • User Dataslice Management

    Dear Experts,
    I need a way to let users to create, activate/deactivate, delete Data Slices without using the modeller. I tried to use the above FM via abap but I wasn't able to do it, is there any standard SAP solution to do it? or any workaround I can use?
    RSPLSDS_PLDS_CHANGE
    RSPLSDS_PLDS_CHECK
    RSPLSDS_PLDS_CREATE
    RSPLSDS_PLDS_DELETE
    RSPLSDS_PLDS_EXISTS
    RSPLSDS_PLDS_LOAD
    RSPLSDS_PLDS_ROLLBACK
    RSPLSDS_PLDS_SAVE
    Thank you.

    Hi Tracy,
    Are you trying to create property sets?
    If you are trying to create a user/group property set, then you do that with the EBCC tool. See the "Site Infrastructure" tab and
    use
    File --> New --> Site Infrastructure --> User Profile to create a new one. See "Creating a Property Set Definition" at
    http://edocs.bea.com/wlp/docs70/dev/usrgrp.htm#998997 .
    Tracy Ward wrote:
    How do you assign Property sets in the user group management - the set shows in users and groups - but not in the management window--
    Ture Hoefner
    BEA Systems, Inc.
    4001 Discovery Drive
    Suite 340
    Boulder, CO 80303
    www.bea.com

  • How do I get system users/groups to appear in the Workgroup Manager list?

    When I open the Workgroup Manager and select the Users tab, it only shows users set up in the Workgroup Manager -- same when I browse Groups. But, I also have a couple system users/groups set up not in the workgroup manager, but through the OS's System Preference interface for Users.
    Is there a way to automatically have System users appear in the Workgroup list?
    I also can't add users to System groups, since the groups also won't appear in the Workgroup Manager (like adding a user to the group Admin or Staff -- default system groups).
    I'd just like the option to "show System users and groups" somewhere.
    Thanks.
    Patrick

    Hi
    If I understand your post correctly then launch WorkGroup Manager and select Preferences from the WorkGroup Manager Menu. Enable the Show "All Records" tab and inspector option and click OK. In the Users/Groups/Computer tab you should now see the addition of another icon - it looks like a bullseye. Select this and under the filter field selecting 'AccessControls' will show you a long list. Scroll down and select Users. Now go back to the Users tab and you should see all users visible and invisible. You’ll see the same thing for Groups.
    You will see different Users and Groups depending which directory node you are in. In the LDAP node you should only see Directory and System Administrator as well as VPN MPPE Key Access User in addition to any user you have created within that node. In the local Net Info node you should see users such as Amavisd User, Clamav User, Cyrus IMAP User etc. You’ll also see UIDs and GUIDs amongst a wealth of other information if you select a user or group and select the Inspector tab.
    You can modify record attribute and values as well as adding your own. You can even use WGM in the same way you would use Net Info Manager locally if you wish.
    Tony

  • Is there a way in 10.8 Profile Manager to assign certain users the sole right of adding/removing users to user groups?

    Hello,
    I want to assign certain network users the ability to login via browser to the profile manager for 10.8.x server and add/remove other users from user groups.  Think teachers managing their class rosters, if the class was a group and the users their students.  I do not want any other admin funtionality beyond that for them.
    Suggestions?

    Well thank you for being so polite.  Yes, on looking on my 10.8 server, I have the same thing.  How annoying.  I have no idea how to answer your question.  If the management abilities are no longer in Workgroup Manager then there's a change that the server doesn't pay any attention to the settings, so manually changing settings in LDAP won't have any effect either.
    At least I can verify that it's not just you who gets that result.  I wonder what happened and how we're meant to do this now.

  • Nested AD User Groups in Workgroup Manager not working in Mavericks

    The setup is the traditional Golden Triangle, so Active Directory for users and groups, Open Directory for Managed Preferences. Both Apple clients and server are running 10.9.0
    While I can successfully manage the Mac's via OD computer groups, the OD user groups with nested AD groups no longer appear to work. If I nest an AD user it works fine, but not the AD users group.
    This is a new AD and new OD, no migrations. This is a setup I've done countless times over the years, but since Mavericks has been introduced, I can no longer make this work.
    Any help would be greatly appreaciated.
    Thanks,
    Alex Price

    Hello
    I have been having the same problem, when adding an AD Group to an OD group the users in the AD group are not managed, but if i add the user to the OD group it works fine, (with about 5000 active users this is not an option) this has been a problem with 10.9 and has not been fixed with 10.9.1, i assume we need a update to Workgroup manager?
    Maverick server is useless at the moment, cant upgrade the clients to Maverick if i cant manage them, are Apple just tring to make my job more difficult than it needs to be, i was happy that they provided Workgroup Manager for Mavericks because Profile Manager is simple not an option, but it would be good if it worked properly, its not a small problem so you would think apple would make it a priority.

  • AD security groups listed in user groups in Config Manager however not listed when selecting values for the "System Resource - System Group Name" query

    Morning All,
    We are in the process of setting up our SCCM 2012 infrastructure and are experiencing issues with our device collection querys based on AD security groups.
    I can see the security groups are being updated per adsgdis.log - i can see the computers that are members of the groups in AD are being recorded in the same log. Issue is when we build the device collection query - click the value button for the string,
    only 2 of the 18 AD security groups are displayed.  These are 2 AD groups we setup initially to test.
    We have since added several additional yet they only appear to populate as user groups in config manager.
    The same goes for additional OUs that we have created with AD.
    When i click the value button only the initial 10 OUs that were created are populating in the list of applicable OUs.
    We have the discovery methods Group Discovery & System Discovery enabled and set to search the parent OU recursively
    I'm wondering if there might be an SQL issue with this as it initially worked but stopped...
    Additionally we added an OU recently that now appears in in the Values options in the query but the ones added previously and additionally after are not showing up....
    Any help is appreciated.
    Thanks,
    Jeff

    Given the adsgdis.log lists the new pc and the group it's assigned to it appears the AD group discovery is working.
    Have the following excert from the adsgdis.log
    INFO: Processing discovered group object with ADsPath = 'LDAP://************.****.COM/CN=Software - Microsoft Project Professional 2010 x64,OU=Software,OU=US-West,DC=*****,DC=com' SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT 10/4/2012 7:08:13 AM 8180
    (0x1FF4)
    INFO: DDR was written for group '*****\Software - Microsoft Project Professional 2010 x64' - E:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\userddrsonly\asg8ud94.DDR at 10/4/2012 7:8:12. SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT 10/4/2012
    7:08:13 AM 8180 (0x1FF4)
    INFO: DDR was written for system 'THURMANWIN7VM' - E:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\adhh8419.DDR at 10/4/2012 7:8:12. SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT 10/4/2012 7:08:13 AM 8180 (0x1FF4)
    Here you can see it processes the new members in the Software - Microsoft Project Professional 2010 x64 group and captures Thurmanwin7vm as a member.
    I did find some log entries that reference permission issues with objects in the SQL database and have opened a case with MS to get that looked into.  Hopefully that will be where the issue lies.

  • Philadelphia VFP User Group--Tuesday, April 14--"Document Management within Visual FoxPro"

    The Philadelphia VFP User Group meets Tuesday, April 14 at 7:00 PM in room 104, DeVry University, 1140 Virginia Drive, Fort Washington, PA. As usual, feel free to bring some dinner and come as early as 6:30 PM.
    This month, member Jim Connolly will speak on “Document Management within Visual FoxPro.”
    Abstract: I created programs that will create an electronic filing system. The programs read the bar codes from the invoices and files them in electronic storage. This allows the end user to view the documents with a single click in the app. I will show the
    class how to setup the bar code reader and to accept individual scans for easy access. There are some recommended programs that will assist in the process. I will present them along with the Fox Pro program.
    We need speakers for upcoming meetings. Please let Jim ([email protected]) know if you have something to share with the group.
    http://vfpphilly.blogspot.com/

    The Philadelphia VFP User Group meets Tuesday, April 14 at 7:00 PM in room 104, DeVry University, 1140 Virginia Drive, Fort Washington, PA. As usual, feel free to bring some dinner and come as early as 6:30 PM.
    This month, member Jim Connolly will speak on “Document Management within Visual FoxPro.”
    Abstract: I created programs that will create an electronic filing system. The programs read the bar codes from the invoices and files them in electronic storage. This allows the end user to view the documents with a single click in the app. I will show the
    class how to setup the bar code reader and to accept individual scans for easy access. There are some recommended programs that will assist in the process. I will present them along with the Fox Pro program.
    We need speakers for upcoming meetings. Please let Jim ([email protected]) know if you have something to share with the group.
    http://vfpphilly.blogspot.com/

  • Administration Portal user and group managent performace issue

    Hi
    I have implemented a custom IPlanet LDAP authentication provider which provides
    a realization for the needed authentication, group and user management interfaces
    (UserReader, UserEditor, GroupReader, GroupEditor).
    The authentication provider itself seems to work fine, but I think I found a possible
    performance problem in the WebLogic Administration Portal, when I studied the
    authentication framework by remote debugging. Response times (with just one simultaneous
    user) are quite long (over 8 seconds) with 40 groups on the same hierarchy level
    on the Users, Groups and Roles tree. I'm developing with P4 processor and 1 Gb
    ram (512 Mb allocated for WLS)
    After little debugging I found out that every time a node in the group tree is
    dlicked isMember() method of the authentication provider gets called n * (n -1)
    times, where n is the number of visible groups in the hierachy tree. '
    What happens is that for each group, the membership of all the other visible groups
    is checked by the isMember(group, member, recursive), method call. Even the usage
    of a membership cache in this point didn't speed up the rendering noticeably.
    By placing a break point in the isMember() method and studying the call stack,
    one can see that all the isMember() calls are made during the rendering performed
    by the ControlTreeWalker. For example if there is 40 groups visible in the tree,
    the isMember() method gets called 1600 times. This seems quite heavy. With a
    small number of groups per hierarchy level this problem might not be serious,
    but in case where there would be over 30 000 customer companies using the portal
    and each having their own user groups, it could be an issue.
    The problem does not occur with WebLogic console and browsing of groups and users
    (using the same authentication provider) is fast with it. When a user is selected
    from the user list and the Groups tab is checked, the Possible Groups and Current
    Groups list boxes will get populated. When debugging this sequence, one can see
    that only the listGroups() method of the authentication provider is called once
    per list box and the order of method calls is of order n (rather than n^2 which
    is the case with the Administrator Portal).
    Has anyone had similar problems with Administrator Portal's performance?
    Ville

    Ville,
    You're correct about the performance degradation issue. This is being
    addressed in SP2.
    Thanks,
    Phil
    "Ville" <[email protected]> wrote in message
    news:[email protected]...
    >
    Hi
    I have implemented a custom IPlanet LDAP authentication provider whichprovides
    a realization for the needed authentication, group and user managementinterfaces
    (UserReader, UserEditor, GroupReader, GroupEditor).
    The authentication provider itself seems to work fine, but I think I founda possible
    performance problem in the WebLogic Administration Portal, when I studiedthe
    authentication framework by remote debugging. Response times (with justone simultaneous
    user) are quite long (over 8 seconds) with 40 groups on the same hierarchylevel
    on the Users, Groups and Roles tree. I'm developing with P4 processor and1 Gb
    ram (512 Mb allocated for WLS)
    After little debugging I found out that every time a node in the grouptree is
    dlicked isMember() method of the authentication provider gets called n *(n -1)
    times, where n is the number of visible groups in the hierachy tree. '
    What happens is that for each group, the membership of all the othervisible groups
    is checked by the isMember(group, member, recursive), method call. Eventhe usage
    of a membership cache in this point didn't speed up the renderingnoticeably.
    >
    By placing a break point in the isMember() method and studying the callstack,
    one can see that all the isMember() calls are made during the renderingperformed
    by the ControlTreeWalker. For example if there is 40 groups visible inthe tree,
    the isMember() method gets called 1600 times. This seems quite heavy.With a
    small number of groups per hierarchy level this problem might not beserious,
    but in case where there would be over 30 000 customer companies using theportal
    and each having their own user groups, it could be an issue.
    The problem does not occur with WebLogic console and browsing of groupsand users
    (using the same authentication provider) is fast with it. When a user isselected
    from the user list and the Groups tab is checked, the Possible Groups andCurrent
    Groups list boxes will get populated. When debugging this sequence, onecan see
    that only the listGroups() method of the authentication provider is calledonce
    per list box and the order of method calls is of order n (rather than n^2which
    is the case with the Administrator Portal).
    Has anyone had similar problems with Administrator Portal's performance?
    Ville

  • Managing user groups

    Hi, I have just begun to look into Connect as an LMS solution for an upcoming project. I will have a number of user groups - different clients (companes) that I will want to have organized with access permissions. is there an area in Connect where I can manage this? For example can I add 50 people in company A to a preset list and then push an eLearning module/lesson to them?
    If there is a manual you could direct me to that adresses this that would be great as well.
    Best, Steve

    Sorry Just found this, you can delete this thread - sorry! :-)
    Steve

  • Cannot Manage User Groups for sampleportal

    Hi:
    Hopefully someone has seen this and has a solution. We've installed the sampleportal
    application and have begun to add portal pages and new portlets as a proof of concept.
    We're trying to entitle a portlet to a specific User Group. The groups exist.
    However, clicking on the User Group Mgmt. link yields a NullPointerException. Trying
    to edit a user brings up the Edit User Attributes page with the link to edit the
    password, but another NullPointerException for the Property Sets and Properties associated
    with REAPVisitor1 Edit portion.
    Hopefully someone has an idea. Any help would be appreciated!
    Thanks,
    Chris
    The error text for the User Group Mgmt. is:
    An error occurred:
    java.lang.NullPointerException:
         at com.bea.portal.admin.visitor.servlets.jsp.taglib.GetPropertiesTag.doStartTag(GetPropertiesTag.java:95)
         at jsp_servlet._tools._portal.__edit_user_group._jspService(__edit_user_group.java:1061)
         at weblogic.servlet.jsp.JspBase.service(JspBase.java:27)
         at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:265)
         at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:200)
         at weblogic.servlet.internal.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:241)
         at com.bea.p13n.appflow.webflow.servlets.internal.WebflowServlet.doGet(WebflowServlet.java:168)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:265)
         at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:200)
         at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletContext.java:2495)
         at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2204)
         at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:139)
         at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)

    Chris,
    Please report this to the support, so that this can be looked into.
    Thanks
    Subbu
    Chris Wolfe wrote:
    Hi:
    Hopefully someone has seen this and has a solution. We've installed the sampleportal
    application and have begun to add portal pages and new portlets as a proof of concept.
    We're trying to entitle a portlet to a specific User Group. The groups exist.
    However, clicking on the User Group Mgmt. link yields a NullPointerException. Trying
    to edit a user brings up the Edit User Attributes page with the link to edit the
    password, but another NullPointerException for the Property Sets and Properties associated
    with REAPVisitor1 Edit portion.
    Hopefully someone has an idea. Any help would be appreciated!
    Thanks,
    Chris
    The error text for the User Group Mgmt. is:
    An error occurred:
    java.lang.NullPointerException:
         at com.bea.portal.admin.visitor.servlets.jsp.taglib.GetPropertiesTag.doStartTag(GetPropertiesTag.java:95)
         at jsp_servlet._tools._portal.__edit_user_group._jspService(__edit_user_group.java:1061)
         at weblogic.servlet.jsp.JspBase.service(JspBase.java:27)
         at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:265)
         at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:200)
         at weblogic.servlet.internal.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:241)
         at com.bea.p13n.appflow.webflow.servlets.internal.WebflowServlet.doGet(WebflowServlet.java:168)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:265)
         at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:200)
         at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletContext.java:2495)
         at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2204)
         at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:139)
         at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)

  • Restricting Queries in HR: Compensation Management User Group

    I am trying to restrict the Infoset /SAPQUERY/HR_XX_CM_03, which contains salary/compensation queries, assigned to User Group /SAPQUERY/H0, from being accessed by anyone.  In SQ03, user group /SAPQUERY/H0, there are no users assigned but users with access to SQ01 can select the user group /SAPQUERY/H0  and access the queries tied to infoset /SAPQUERY/HR_XX_CM_03.  Why are users able to access the infosets of the user group when no users are assigned to the user group?

    Turns out that security authorization for access to SQ01 had an S_QUERY value of 02 which allows for full change.  With this value the user group/user assignments done via sq03 did not work.  Setting S_QUERY to 23 allows for user group assignment to restrict access in sq01

  • BPC 7.5 - Domain User Group Not Work - Configuration Server Manager

    Hi Guys,
    I install BPC 7.5 from NW. From the PC client only work ok with the same user OWNER the BPC .NET. In  Server Manger -> Option
    -> Define Systems User Group, add the follow data:
    - System user group name= Domain Users
    - Domain Type=Active Directory
    - Domain Name = BAIRES
    Is correct the Syntax? or need use the form OU=xxxx?
    Thanks.

    Ok, thanks, and So I have other problem. I need Add User from different Domains, How configure this?
    Tks

  • OIM 9.1.0.2 - User group permission conflict issue

    Hi Gurus,
    IHAC who have faced a strange behavior about permission conflict.
    User has been assigned to a user group (ANALISTA DRSI) who have permission to disable resource of the users he administrates. The user group has been assigned to resource's administrator.
    The same use has been assigned to other user group (ANALISTA ADM DRSI) who have other permission. The user group has been not assigned to resource's administrator.
    If the user has been only assigned to ANALISTA DRSI user group the user is able to see records on Rogue Account report. If the customer has been assigned to both ANALISTA DRSI and ANALISTA ADM the user is not able to see the record on Rogue Account report. He got a display error message (You do not have permission). Both user groups have the Report menu item assigned.
    My question: if the customer is assigned to a user group who have permission to see the reports, should not the user is able to see the report even though he is also into the other group who do not have permission?
    Is there conflit in the OIM???
    Any tip will be very appreciated.

    Orgnaization > Manage > Select Org in which users are getting created > Administrative Group (Drop Down) > Select Group for which users are not coming.

  • Welcome to the new Oracle User Group Community

    Welcome to the new Oracle User Group Community. Whether you landed here via the redirect from the previous community site - IOUC.org - or navigated here directly, welcome. This new platform brings new community features to enhance the way you connect with user group peers and with Oracle, as well as make it easier for you to find information through a more intuitive interface. We invite you to provide your feedback on the new site. Log in using your OTN Forum credentials and join the discussion here. If you do not yet have OTN Forum log in credentials, navigate to http://community.oracle.com/community, click on the "Register" link in the upper right corner of the page and create your account.
    We look forward to hearing from you.

    Hi Kashif,
    Glad you like the new Community. Communication among user group leaders works a little differently on this site than on the previous site. Rather than having communication focus around e-mail distribution lists, communication now is focused within the site itself. The intent is that this will provide users the one place to come for information, rather than having to sort through lots of e-mail threads. That doesn't mean that e-mail is completely out of the picture though. Users can opt-in to receive e-mail notifications when an individual piece of content is changed, or when content is posted to a space. Look for the "Receive email notifications" link under "Actions" to start receiving notices. To stop receiving notices, go back to the same content/space and click "Stop email notifications".
    Your Relationship Manager will be talking with you and the other leaders in your region over the next few days and weeks regarding how you and your group of leaders want to communicate.
    Best regards,
    Oracle User Group Team

  • Unable to assign the user in user group through SQ03

    Hi All,
    When I tried to assign a  user to one user group from SQ03 the tick mark is disables can't assign the user.
    This is happening only to one of the employee only. Others i can mark tick.
    Please advice.
    Imran

    Hi
    Please check if the user has authorization to that query....
    For example if the user is a PA administrator & you are trying to assign this user to a user group which is Time Management ( Time Infosets), then the tick will be disabled.
    This case was encountered in our firm too.
    Please check & revert.
    Regards,
    Megha

Maybe you are looking for