on 11-27-2009 9:15 AM
I am loggedin IDM UI with the user Administrators.
I see the tab "Self Services" and "Monitoring", bit i don't see the tab "To Do - Manage - View Reports - Hostory".
In the Tab "Self-Service" i have assigned 4 privileges to the administrator account : MX_PRIV:WD:TAB_DO , TAB_MANAGE,
TAB_HISTORY and TAB_REPORT.
But in the right side in "Assigned" are the 4 privileges in status pending?
Have you any idea what I did wrong ?
Thanks.
Hi
Which worklfow-task did you use to assign these privileges? Maybe it has an Approval-Task defined or uses the entry type MX_PENDING_VALUE which causes the privileges to be "Pending"
What you could do to achieve your goal:
1) In MMC, click on your ID-Store, click on "Add User" and assign Manager privleges to the new user. Be sure he also exists in your AS Java/UME/Datasource.
2) Temporarily change the Workflow-Task "Change own data", add attribute MXREF_MX_PRIVILEGE. Then you can also self-assign privileges like MX_PRIV*
Delete the pending assignments before you do a reassignment.
Hope I could help.
Regards
Michael
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Michael,
i don't have workflow-task.
I have a problem about create user with assign manager privileges. I have a following error abou create user with manager privileges :
Error:
-
Method: Create user
Source: OraOLEDB
Error: 80040E2Fh (-2147217873)
Description: ORA-00001: unique constraint (MXMC_OPER.PK_MXI_VALUES) violated
ORA-06521: at "MXMC_OPER.MX_UTILSETATTRIBUTE", line 1447
ORA-06521: at "MXMC_OPER.MX_UTILSETATTRIBUTE", line 1791
ORA-06521: at line 1
-
so i can add user Administrator without manager privileges.
How can I assign the user Administrator with manager privileges ?
OS : HP UX 11.23 - Netweaver 7 /SP20 Java Stack - IDM 7 SP3 - Oracle Server 10.2.04
Windows XP - MMC - Oracle Client 10.2.0.1
About the oracle-error: Do i need to install Oracle Client 10.2.04 ?
I have no experience with Oracle, sorry. But I suppose you tried "Add User" with username "Administrator" which already exists in your IdentityStore?!
What you can do to assign already existing user Administrator with Manager-privileges is:
Create a workflow task "Add Privilege"; entry type MX_PERSON, attributes MSKEYVALUE, MXREF_MX_PRIVILEGE & what you like; Access Control, Add, Allow access for Logged in User, Name: Administrator, On behalf of User or IdStore-entry.
Then you will have this task in WebUI/Self-Services and you can assign the desired privileges to this Administrator-User.
Also I would recommend to import the "SAP Provisioning framework" which has a lot of pre-configured WebUI-tasks.
Hope this helps.
Regards
Michael
Hello,
by import the "SAP Provisioning framework" i have the following error:
27.11.2009 13:34:49 :I:Creating task '61/Start Privilege Task (Ordered Group)'
27.11.2009 13:34:49 :I:Creating task '62/Start Trivilege Task'
27.11.2009 13:34:49 :I:Creating task '43/Initiate Parent Status'
27.11.2009 13:34:49 :I:Creating task '66/GRC Role (De)Assignment'
27.11.2009 13:34:49 :I:Creating task '67/GRC role (de)Assignment'
27.11.2009 13:34:49 :I:Creating task '68/Process (De)Assignments'
27.11.2009 13:34:49 :I:Creating task '69/Set Repeat TaskId'
27.11.2009 13:34:49 :W:Insert failed for
columns: WAITBEFORE,WFUSEADVANCEDSEARCH,RETRIES,WAITAFTER,MXPROTECTED,WAITDELAY,WFINWELCOME,INCLUDEDISABLEDENTRIES,BOOLSQLTYPE,USECONTEXTVARS,HARDPROVISION,WFFLAGS,ALLOWMULTIEVENTS,REPORTTASK,TASKID,ACTIONTYPE,TASKGUID,WAITRETRY,WFNODENYBUTTON,WFSAVEOPTION,RETRYDELAY,TASKTYPE,WFDISPLAYORDER,TASKNAME,ENABLED
values:[0, 0, 1, 0, 0, 30, 0, 0, -1, 0, 0, 0, 0, 0, 63, -1, F36F89D9-55A8-420B-835F-142FA2878C90, 0, 0, 2, 30, 1, 4, Pending Operation Failed (Ordered Group), 1]
27.11.2009 13:34:49 :F:Could not inserts tasks
27.11.2009 13:34:49 :I:Rolling back
User | Count |
---|---|
87 | |
10 | |
10 | |
9 | |
7 | |
7 | |
6 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.