Bishop Calc - 11.1.2.2 - giving groups/users access to run a set of rules

Similar Questions

• How do I give users access to the addition of other users and groups in weblogic * without * giving administrator rights

  Hello

  Before opening a SR Oracle for the same problem, just wanted to put it out there to see if we can provide a non administrator user access to the Weblogic administration Console so that it can log and ONLY add users and groups, but not change any setting in the administration console. We offer a personalized access? All grain specific to be accessible?

  Please don't give me the links where it says "give read-only access", giving "monitor."

  read only user cannot add new users/groups in the administration console. The administrator credentials can be provided to that user. It just has to be able to connect, go to security domains > myrealm and add new users and groups. nothing else.

  Please let me know.

  Thank you

  Dan

  Thanks Christian.

• Bishop Calc - how not to use the GUI interface

  Hello
  
  New on Calc Mgr. How the call where I can just type in my Business Rule and do not use the GUI? Can't seem to find it.
  
  Thank you

  I think that you are referring to formulas that you would write in EA

  In Calc nursery, find your application, go to the database under the APP and expand it as well.

  You should see "Scripts" under there. Right-click on 'Scripts' and select 'new '. White screen will appear and write exactly as you would in the EA.

  Save the Script, then you must attach the script to a rule (you can simply use a shell if you wish). Save, validate, and deploy

  GL

• "Cannot access working group on some computers running XP - ' < name of working group > is not accessible. You might not have permission to use this network resource ".

  I have a home with 4 PC network - one of them is running Windows 7 Home Premium (with homegroup disabled) and others running XP Pro.  The XP machines is called 'Server' and the server and the computer services browser running and set to automatic.  Two other computers, called "Notebook" and "Dell", as well as the machine Windows 7 have no file and sharing printers enabled and have specifically the Server service is disabled.

  My problem is that one of the two XP client machines cannot access the working group.  Let me be clear about this: I open Windows Explorer and click on "My network places"-> "entire network"-> "Microsoft Windows network", there is then a second 5-10 break and then my workgroup name is displayed.  When I click on the name of the Working Group, there is another ~ 10 second pause and then I get a message that says error " is not accessible.  You might not have permission to use this network resource.  Contact the administrator of this server to find out if you have permissions.  A device attached to the system does not work. ', where is the name of my group to work for other days, after some of the computers are restarted, I find that the XP client has absolutely no problem with that; but the other now has this same problem.  In other words, the problem going on between two XP clients.

  Let's analyze: I have Windows on all PC firewall and any other firewall program.  I tried to disable the Windows Firewall and my anti-virus (temporarily), program without effect.  This may not be a problem with the way I've set up my actions because the error occurs when I try to click on the task force rather than a shared resource.  This cannot be a problem with a specific XP client because at different times, each of the two PCs worked perfectly without any changes of configuration made between the two.  It could be a problem with the server settings; but I don't see what it could be.  I tried editing

  HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters and changing

  IRPStackSize from 21 to 45, then 50.  I also tried to change the size of 2 to 3.  I restarted the server and the client XP and had no effect.

  I don't have the same account of user configured on all three machines.  However, this cannot be the issue because the problem occurs when I click on the task force, before the server name is still displayed.  In addition, each of these two XP clients have connected with their existing user accounts at times.

  I tried the Wizzard of configuration network running on all four machines, without effect.  I tried a lot of things, most of which I can't remember.  I'm at the end of my mind.  Help, please.

  JW,

  Thanks for the continued support.

  By the advice of IPCONFIG, I looked at the registry for all computers and found EnableProxy wasn't there.  According to the documentation by default to 0, which is what we want.  However, I added it to all the computers and left it set to 0 and restarted the computer.  The node Type still said 'unknown '.

  Thanks for the info on the master browser.

  The ""Network location cannot be reached"when you access actions."
  the article talks about Windows 2003 Server and none of the symptoms mentioned relate to this situation.

  The "network adapter advanced troubleshooting for Windows workstations" is on hardware troubleshooting.  I think that it's probably not a problem because the computer has no trouble to access the internet, which is not possible if the card network are not working.

  I went through the AutoCorrect entry to reset the TCP/IP stack, even if the article describes symptoms such as difficulty to access the internet...  And...  THIS MARKET!

  After re-booting, the PC that was in trouble can now access the working group.  All other PCs can always too (have not tried to restart all over again).  AWESOME!  I can't thank you enough!

  I re-post if the syptoms happen; but for now, we can consider this issue RESOLVED.

  Thank you 1 million,

  Adam

• Peer networking grouping service is not running is the message. How to operate?

  I have two computers at home and have installed a printer on a wireless.  I tried to install another printer wireless in another part of my house but keeps printing one already installed.  I received a message ' peer networking grouping service isn'g running. "  If it could fix the problem, and if so, how can I get the service running?

  I finally got

  1. right click on the three services

  a peer network group)

  (b) peer network identity Manager

  peer name resolution c)

  one after the other.

  (2) rear right clicking on go properties-> logon.

  (3) name of the same profile for all three abuse (passwords must be retyping your own).

  then restart all of the services of three.

  Finally cool off homegroup...

  you will find no error :)

  It worked for me, thanks.

  1. I started by selecting 'peer network identity Manager.
  2 and clicked on the tab log.
  3. then select the bubble for "this account" not "sys local VAC.
  4. then click on the Browse button.
  5. then advanced down to the left.
  6. then find now on half right.
  7. Select "LOCAL SERVICE".
  8 then Ok outside.
  I was asked to restart the service before amendments would change, but I jumped until after I changed the other two services.
  Repeat steps one although 8 to peer name resolution and peer network group in that order. (I don't know why it makes a difference, but it worked for me)
  9 restart the peer network identity Manager
  10 start of peer name resolution
  11 start grouping of network of peers
  It worked for me and I've been hunting for days. Thank you very much to all the world. And a big thanks to rajanaveen.

• Groups, users, and Provisioning information Migration using LCM

  Hi all
  
  I need to migrate groups, users and their configuration information from one application to another application with dev server itself. Can someone tell me how can I do this using LCM. I'm getting confused in the options available under applications-> Foundation groups-> Shared Services in LCM.
  There are many options available as the native directory
  Groups a) (b) users) c d) Native directory roles->-> assigned roles planning-> "App name".
  
  So, what options to choose to migrate groups, users and their configuration information.
  
  2ndly the application names are different because they are on the same server. In what files I need to change the name of the application (files will be created just by making export FCL like Group.csv etc)
  
  I'm working on 11.1.1.3 version. My requests are classic planning apps.
  
  Thank you
  Ashu

  It is possible to copy the provision by right-clicking a Shared Services planning application and select "Copy Provisioning" and then select the application to copy the commissioning to.

  If you want to do through LCM > Foundation > Shared Services > native Directory > planning > PlanningAppName

  ExportSecurity/ImportSecurity planning utilities are only for export/import of planning permissions.
  This can be done using LCM > select the planning application > Security > access permissions

  See you soon

  John
  http://John-Goodwin.blogspot.com/

• How to give some access to the system without giving local administrator access?

  Hello

  I'm looking for advice on how I can accomplish the following tasks without giving certain groups of rights of a local administrator on the server.

  • Ability to query the status of all Windows Services
  • Access WMI
  • Ability to read all the event logs
  • Ability of the State to the query of all services
  • Activation of remote PowerShell commands

  I need to give this kind of access to the servers are Windows Server 2008 R2, Windows Server 2008 Std Edition and Windows Server 2003.

  Advice and guidance would be greatly appreciated.

  Thanks in advance.

  Hello

  The question you have posted is better suited for the TechNet forums. Please post your question here.

  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

• Calc script user access to

  Hello

  Can you please tell how to give access to a script specific to an individual user in Essbase calc. We have a 11.1.2 EMP. Shared service I configured access to the server and access to the group to which belongs the user, but the user does not have access to the script especially calc Calc.

  Thank you

  You have assigned access of shared services through the option "assign access controls? You can see this option if you right-click on the Application in the Shared Services (should be under EssbaseCluster-1)

  Kind regards

  Santy

• Residential group cannot access with Tesco security... Help

  Another person had and solved the same problem?  My home group has worked well with Norton 360 and then I got tesco broadband, and part of the package is the security system.  Now I can't use at all Homegroup.  Help, please.

  Hi Angie,.

  1. what operating system is installed on the computer?

  2. have you temporarily disable Norton 360 and check?

  3. have you temporarily disable the security for Tesco and check?

  If you have installed Windows 7, then refer to these items and check if that helps.

  Home Sweet homegroup: http://windows.microsoft.com/en-in/windows7/help/home-sweet-homegroup-networking-the-easy-way

  Homegroup: frequently asked questions: http://windows.microsoft.com/en-in/windows7/homegroup-frequently-asked-questions

  Thank you.

• Creating a Group Policy Script to run malicious software removal & Defrag?

  I want to create a group policy in Active Directory to run the Microsoft software removal tool quietly in the back on the ground on the desktop users and quarterly to run a Defrag. Does anyone know how to do this and how did you set up? If someone could just point me in the right direction, I would appreciate it!

  Hello

  I suggest you to send this request in Technet forum for better support.

  Here is the link:

  http://social.technet.Microsoft.com/forums/en-us/category/windowsxpitpro

• Adding version 9.0.2 PS6110 to a group with one Member running 8.1.3

  I have an existing PS6210 running Firmware PS 8.1.3 production. It is the only member of the group, eqlgroup. We have acquired a PS6100, I spun it and it is a member of his own group, eqltestgroup.

  The PS6110 is currently running Firmware PS 8.1.4 and I want to update 9.0.2 before adding it to the production group, eqlgroup (to save me the task of updating the thing with data of production on this subject).

  Can I upgrade the firmware of the PS6110 to 9.0.2 and then add it to the production group? Eqlgroup will accept the PS6110 after the update? Or do I have to update the 8.1.4 PS6210 (if I don't update the PS6110) or the version 9.0.2 (if I update the PS6110 in 9.0.2)?

  Honestly, I really want to test myself, but I don't want to do this kind of thing on the production orders. Your advice is very much appreciated,

  All members of a group must run on the same level FW. Only during a short period of time, a mixed configuration is allowed.

  If you do not add the PS6100 in your production group, I suggest to update your EQLs 8.1.4 first production.

  BTW. something you should consider... mixture of 10G and 1 G units within a group or the connection to the host even Cluster may not be the best idea.

  Concerning
  Joerg

  PS: for us the 9.x fw comes at the beginning and we stay quiet 8.1.x sometime

• Sync phone to PC Client/Server applications use what security group to access the files on PC Win 7

  Programs of client server that connects to the computer from a phone and store data on the PC as the synchronization programs have what user ID and are able to write to the disk by security group file permissions. Users authenticated Internet Explorer, system, administrators, customer ID current user appears on the phone and must be enabled (admin) and the password entered to connect.  If the customer is logged as administrator? How can there be two users with the same user id?  One by the PC and the other on the phone.  If the phone connects the PC as a user in this group what id permissions?

  Question 2: If I agree a technician to fix it to my PC and fix it, what is it connected as? and what group permissions is using?  How to protect against the connection later?

  Thank you

  This issue is beyond the scope of this site and must be placed on Technet or MSDN
  http://social.technet.Microsoft.com/forums/en-us/home
  http://social.msdn.Microsoft.com/forums/en-us/home

• AAA - group restrict access to log on to all the NDG one excpet

  I recently created a group of users to only be able to close and unshut interfaces using the aaa allow config-commands and have all the groups concerned etc... implemented and applied. Now, my problem is that new users can now log in to any device on the network (can not do something else that see the worm and show logg) I need to prevent them from accessing anything else the group I've specified in group settings.

  OK, so you have a group of admins who should be limited to a single NDG devices work?

  Create an IP address based in the Group NAR relavent ACS, make a "permit" and specify the name of the NDG, this group is allowed access.

  If a user in that group tries to connect to any other device they will be filtered.

  Mounira

• Group residential access from other computers is read-only.

  Two machines, home network, both running Win7 Pro 64.

  Both machines have multiple accounts.  On the machine at the bottom are the accounts under the name of Tom, Dick and Harry.  (Not really, but they are good examples, yes?)  On the machine of the floor are the accounts under the name of Tom and Dick.

  Tom is the main user on the machine at the bottom.  Dick is the main user on the machine on the floor. Tom & Dick should have permission to read/write to all files in the home group (two machines).  Harry, as an ordinary member of the residential group should only have read permission.

  If I right click on the Tom's Documents folder on the machine of dDwnstairs, I see the following permissions:

  Homegroup: read; Tom: Owner; Dick: Read/write

  Yet, when Dick tries to access to the file of the machine on the floor, Dick read only privileges.  Specifically, if she tries to drag a file on homegroup--> Tom (BOTTOM)--> Documents folder, Dick Dick receives a "Destinatino folder Access Denied" dialog box that says: "You must be authorized to perform this action."  Dick can see and navigate to the folder without problem.

  If Dick logs into his account on the box at the bottom, it can read/write files of Tom as expected.

  Is there a way to associate the account in the box on the floor with the account on the box at the bottom, so that file permissions are identical regardless of the situation?

  Correct, both accounts must be related. And I'm also unclear on the declaration of help text, maybe I'm missing something.

  Regarding the setting up of a working group, you are right that the steps are VERY similar. The difference is when you're on a homegroup, the system uses the credentials of home group and not the credentials of the account from your system to connect to a share. So in theory, if you remove all systems in residential group and configure the network in the way that you said in your original post, you should be able to share normally with the permissions that you set up.

  Just remember, when you're on a homegroup, the system uses a called hidden user accountHomegroup$. When it connects to a share on another computer, it is not identified asTom, it connects asresidential group $. This is obviously different from a working group that uses the credentials of the current user to connect (Tom).

  Let me know if I answered your question, I think I have everything! :)

  Cody C
  Microsoft Answers Support Engineer
  Visit our Microsoft answers feedback Forum and let us know what you think.

• ISE ERS user access to some groups?

  Hello

  I am trying to create a simple operational interface for ISE 1.4 for the helpdesk people add mac addresses from endpoint to endpoint internal DB via REST.

  I would like to have the filtered helpdesk access (so that they can only create endpoints in a group given, not all groups), but it seems that the RBAC in ISE control for users of the RHS is all or nothing.

  I created a Custom Data Access Menu permissions then defined that a user in a group ERS Helpdesk would have access to it. On RBAC policy, I can not only specify a data access authorization, the system always makes me choose a permission to access the Menu as first option.

  If so I said that to the endpoint Group X, to access the data for a group of ERS Custom Data Access, the ERS user gets access denied to the DB.

  Only when I put the user on the RHS Admin by default, the default Super Admin Data Access group, it is able to have access to the DB.

  I would like to ask if anyone of you has managed to control the data set that is at HIA outside access or read access and if so, how.

  Thank you

  Gustavo Novais

  PS: ERS debug logs:

  2015-09-19 09:38:47, 172 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-#--> getPathInfo = PAPFilter.doFilter / endpointgroup
  2015-09-19 09:38:47, 172 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getMethod = GET
  2015-09-19 09:38:47, 172 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getRequestURL =https://10.1.156.136:9060 / ers/config/endpointgroup
  2015-09-19 09:38:47, 172 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getRemoteHost = 10.2.10.63
  2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> passing the filter!
  2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-#--> getPathInfo = AtnAtzFilter.doFilter / endpointgroup
  2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getMethod = GET
  2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getRequestURL =https://10.1.156.136:9060 / ers/config/endpointgroup
  2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getRemoteHost = 10.2.10.63
  2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter: adminName = RHS
  2015-09-19 09:38:47, 174 INFO [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-AtnAtzFilter 401Blocked: user is not authorized to access the requested resource.
  2015-09-19 09:38:47, 175 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-# RateLimitFilter Servlet => continue with the response of the RHS, the current number of bucket: 49
  2015-09-19 09:39:15, 992 INFO [admin-http-pool279] [api.services.server.role.RoleImpl] -: admin:455184AE2B954C78C9EAD7AAECD913F8:-extract the list of roles for entityFQN Information: NAC group: NAC
  2015-09-19 09:39:20, 328 INFO [admin-http-pool295] [api.services.persistance.dao.UserDAO] -: admin:455184AE2B954C78C9EAD7AAECD913F8:-update of user as user name information: NAC Group: NAC:ers
  2015-09-19 09:39:20, 330 INFO [admin-http-pool295] [api.services.persistance.dao.MappingDAO] -: admin:455184AE2B954C78C9EAD7AAECD913F8:-creating new mapping with rolebundle ' Global: Default "context" Global Context context: Global ' user ' NAC Group: NAC:ers' role ' NAC Group: NAC:RBACGroups:ERS Admin»
  2015-09-19 09:39:20, 333 INFO [admin-http-pool295] [api.services.server.mapping.MappingImpl] -: admin:455184AE2B954C78C9EAD7AAECD913F8:-removing users from role with the name ' NAC Group: NAC:RBACGroups:ERS filters under contextFQN "Global Context context: Global", bundle Global role: by default "with transactional 'false' is
  2015-09-19 09:39:34, 682 INFO [ers-http-pool732] [cisco.cpm.nsf.impl.UserIdentityManagement] -:-the internal authentication method to check if the policies in correspondence of the user groups duration is 7
  2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-#--> getPathInfo = MaxThreadsFilter.doFilter / endpointgroup
  2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-# MaxThreadsFilter.doFilter--> getMethod = GET
  2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-# MaxThreadsFilter.doFilter--> getRequestURL =https://10.1.156.136:9060 / ers/config/endpointgroup
  2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-# MaxThreadsFilter.doFilter--> getRemoteHost = 10.2.10.63
  2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-# RateLimitFilter Servlet => continue with the request of the RHS, the current number of bucket: 49
  2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-#--> getPathInfo = PAPFilter.doFilter / endpointgroup
  2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getMethod = GET
  2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getRequestURL =https://10.1.156.136:9060 / ers/config/endpointgroup
  2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getRemoteHost = 10.2.10.63
  2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> passing the filter!
  2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-#--> getPathInfo = AtnAtzFilter.doFilter / endpointgroup
  2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getMethod = GET
  2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getRequestURL =https://10.1.156.136:9060 / ers/config/endpointgroup
  2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getRemoteHost = 10.2.10.63
  2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter: adminName = RHS
  2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter: = RHS adminName is Admin ERS

  He does not seem to have many options when it comes to control access to resource api ers, I ended up doing my own local map in my web application to ad vs access groups groups endpoint.