Only read access to UGM

Hello
By looking at the documentation, it is not possible to create read-only access in the UGM. The use case would be to have a member of the team support desk to be able to check the status of a user account and also check the role and group membership. The permissions described in the documentation seems to suggest that with the level of permissions that allow access to the MFU, users woud still be able to create requests for change, which is not necessarily desirable.

Thank you
Drew

If you don't add all the roles, but give the user access UGM (user-> access-> site-> MFU access), then they will be able to view, but not edit or export users/groups.

also, if you use an environmental strategy of export/import, import environment should not allow editing, regardless of the permissions granted.

M

Tags: Oracle Applications

Similar Questions

  • How to assign only read access to a user for HFM App

    Hello

    I have a doubt like the United States, the actual process of the stripe to assign a user as the read access only for request of HFM. I am new to this and I know that this need be done through HSS. Could then someone let me know the process

    Please ask you to close the post if it seems your problem.

    Thank you

    ~ KKT ~.

  • only read access to the user

    Hi friends,

    I use the oracle 10.2.0.3 version.

    I have an asguser of the user who needs read access to the objects a bit. After I gave read access, he is able to access but must specify the schema_name.object_name. How can I make the user directly access the object without the schema name.

    Kind regards

    DBApps

    985871 wrote:

    Hi John,.

    The user will access them through an application. I don't think we can put a session level trigger.

    Kind regards

    DBApps

    Why not?  The trigger to run when a connection is established.  He does not know the application, and the application does not know about the trigger.

    As for your original question, the only alternative is a synonym.  When a given user is a reference to an object (like a table), oracle assumes that the object belongs to the user.  So, if the user wishes to make reference to an object that belongs to another user, their only choices are

    (1) to qualify the name of the object with the name of the owner

    (2) have a synonym that equates the name synonymous in the name of full object

    (3) change the session as John described.

    You asked about the creation of another user.  How do you think it would solve the problem?

    In the end, classic, manual, the most often used solution is a synonym.  I really don't understand why you seem to reject that.

  • Administration tool only read access

    I was wondering if there is a single read access to the administration tool.

    What I'm trying to do is to test the Build repository with best practices, given that this repository is live and made by a group of developers.
    As I recently joined and wanted to know what resources I need to view and test the repository.
    I was wondering if there is a read access only to the administration tool, not sure this subject and also do I BI oracle installed on my local machine to view the repository.

    If not, is there a way where I can get to see the repository without having the privileges to make any change or save changes to online or offline repositoryin mode

    Thanks Deva...

    Published by: UOOLK on June 1, 2012 02:48

    Hello

    Yes.you need to install obiee customer admin tool.there is no browser web access (xml medta dictionatiory option available - you must activate it, then using it)

    Dictionary of metadata in obiee 11g (access via a web browser)
    http://whatisobiee.com/generate-and-deploy-metadata-dictionary-in-OBIEE-11g/
    http://gerardnico.com/wiki/dat/OBIEE/metadata_dictionnary

    obiee11g admin client tool download you obiee dashboard home page its
    https://ipaddress:9704/Analytics/saw.dll?bieehome (start... Download desktop BI tools) else
    You can download from oracle using RTO a/c
    http://www.Oracle.com/technetwork/middleware/BI-Enterprise-Edition/downloads/bus-intelligence-11g-165436.html

    Thnaks
    Deva

    Published by: Devarasu on June 1, 2012 18:43

  • Need to give rights of folder only read access without copyright

    I installed windows server 2008 in my data center. We created a folder on the local drive and shared. In the same folder we provide access to records to access read-only without copyright. Now I got permission to play in the same folder, but the user able to adapt file from within the same folder.

    Hello

    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the Technet Forums. You can follow the link to your question:
    http://social.technet.Microsoft.com/forums/en-us/categories/

  • Only read access to the ACS

    Is it possible to configure read-only access in the TAS.

    New to ACS and said this is not possible.

    If so, can you point me to a doc or better yet, some examples of configuration.

    Thanks in advance

    Unfortunately, it's OK, access resolution is at the page level.

    Mounira

  • Grant only read access to view Manager

    My client wants access to the Manager of the view through a browser " " https://view-Server/Admin/

    They have no access to the servers and I want to just give them read-only rights to see who is online at any time.

    I can't find anything outside by adding them to the administrators. They have rights in the region.

    Thank you

    Johan

    Currently, I do not think it is possible, once you have access you have full access.  Although 4.5, I heard that the administration is moving to permission based which should fix this.

  • Assignment only read access to the payroll

    Hello

    I have a requiremnt; Payroll users should not change the assignemnt screen values expecailly Organziaiton, group of people, job, position, name of the payroll, Traghetti. How to make read-only access to the screen of the assignment. But they need to get to the screen from people and they need to run fast compensation.

    How to do it.

    Concerning
    SAI

    You can also use personalization at the block level and mark of responsibility allowed insertion / update authorized as false.

  • Only read access to the ACS for a specific group

    All the

    I use an ACS with version (5.5.0.46.8). There is a group within the company requesting access RO to GBA.

    This group is already created in the user and groups of banks of identities/EXTERNAL/AD/directory

    In all of the elements/device/order Admin policy, I already have a set of SHOW command created

    I have looked in policies/Acess Network Services access authorization / Default / access but am a little lost after that.

    Please inform promptly.

    Looks like 'show' and 'sh' problem in the command set.

    If you pass for full access with it. It work?

    Remove 'sh' him then use some commands specific complete show.

    Let me know the results!

  • How to give read access to the users in IOM 10 g only

    Hello
    I created a new group readonlyaccess in IOM 10 g. I have given-menu item 'Element menu to manage users' group. Dmade a user member of this group. Now when I login with this user, I am able to see the users menu-search item, but when I search users, then no results of the search are displayed. I'm not able to figure out where I am doing wrong or what Miss me.


    Please let me know if we can give only read access for end-users to IOM 10 g.


    Thank you
    Kalpana.

    Refer to this:

    {: identifier of the thread = 2148294}

    -Marie

  • Grants to only read the schema

    Hi all

    We want to create read only one schema with dynamic read-only access to a source schema.

    We knew that the steps to create read only schema, but we would like to know, how grant us only read access for new objects created in the source schema?

    Let's say, test pattern source today has 100 items. We have created reading scheme (test_ro) with select on / execute on for all 100 objects in the schema source (test).

    After a week, another 30 new objects are created on the test. Now how we automate reading only grants for these 30 new items to read only one schema (test_ro) of the schema of the source (test)?

    Thank you in advance...

    Thank you

    Dinesh.

    A simple approach could be like below. Readonly_role is a user-defined. You can add any number of privileges in the execute stmt.

    create or replace trigger .AUTO_ASSIGN_GRANT_READONLY
         after CREATE on .schema
          declare
          l_str varchar2(255);
          l_job number;
          begin
          if ( ora_dict_obj_type = 'TABLE' )
          then
          l_str := 'execute immediate "grant select on .'||ora_dict_obj_name ||' to READONLY_ROLE";';
          --execute immediate 'grant select on .'|| ora_dict_obj_name ||' to READONLY_ROLE;';
         dbms_job.submit( l_job, replace(l_str,'"','''') );
         end if;
         end;
      /
    

    I copied this over the internet a few years back and I modified to suit my needs...

    The unknown author is the one who should take the credit.

  • Create a privilege level which only allows access to view orders

    Hello

    I would create a level of privilege that would only give access to commands show for some users. What would be the best way to do this?

    I should use the privilege mode level level control for all available commands, or is there a better way to do this?

    Besides, could we manage this level of privilege to a Radius server.

    Thanks for your help

    Stéphane

    Well, I think that the best way to achieve this is to use GANYMEDE with command authorization feature.

    On the RADIUS server configuration (only for the command, read access only)

    http://www.Cisco.com/en/us/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml#scenario2

    These commands are required on an IOS router or switch to implement permission to order via an ACS server:

    AAA new-model

    AAA authorization config-commands

    AAA authorization commands 0 default group Ganymede + local

    AAA authorization commands 1 default group Ganymede + local

    AAA authorization commands 15 default group Ganymede + local

    GANYMEDE-server host 10.1.1.1

    RADIUS-server key cisco123

    These commands are required on ASA/PIX/FWSM to implement permission to order via an ACS server:

    authserver Protocol Ganymede + AAA-server

    authserver AAA-server 10.1.1.1

    AAA authorization command authserver

    However, if you strictly want to use radius server then please try the below list attribute for a single user or group.

    Service-Type = NAS Prompt

    http://www.ietf.org/assignments/RADIUS-types/RADIUS-types.XML#RADIUS-types-4

    This may not work for ASSISTANT Deputy Ministers.

    HTH

    Kind regards

    Jousset

    The rate of useful messages-

  • You will need to create an account only read in vcenter for acess... It is an AD account

    Any script for the need to create an account only read in vcenter for access... It is an AD account? Thank you

    I guess you must assign the ReadOnly to an account Active Directory on a specific entity in your vCenter.

    If Yes, you can do something like this

    $cluster = get-Cluster-name mycluster

    New-VIPermission-body $cluster - role ReadOnly-main "DOMAIN\account."

  • Read access to the members of scenario in Smart View

    Hello

    In the current context of Hyperion Planning, we want to revoke write access to some scenarios (for example real) after loading data in the month is complete. Say I want to allow the user to enter data only for the current month i.e. Ms FY13.

    I would update the Member properties of scenario as follows: start month = Sep, end month = MS, start year = FY13 end year = FY13. When I access scenarios through forms, this allows me to enter data only in the MS FY13 and other months seem to be read-only. It's quite OK.

    However, if I can access the same scenario via Smart View or add Essbase in, I can modify or write data throughout all the months of the scenario. The scenario properties do not come to play. How this situation can be treated.

    I want to update the (real) script to be read only for all months except one after loading the actual data at the beginning of the month.

    Start the month setting end months of planning is there only when access you it through a programming interface. (Which you already did).

    You can get this out-of-box like you can not affect safety on the period, what you can try is (I did not try, so it may or may operate Word) try to modify the filter for a user (in environmental assessments) and add year period combination.

    If it works, then you need to add a mechanism where after each planning security update this update goes into Essbase.

    Concerning

    Celvin

    http://www.orahyplabs.com

  • Execution of the BR on the members of read access

    Hello

    In my planning application, there are a few users who read to some cost centers and write to others.

    I have a form online click right on running a BR. The problem is, given that the user can select a cost center to which he or she has read access they can also launch a BR with this selection. Is there a way to prevent the user so that they can only run BR via the form when a cost center is selected write access?

    Thank you!

    You could use in composite form. Create a dummy form with combination of single member of all dimensions and disable deleting, so it would show a single cell is editable or read-only. Place it on top of the composite as well as the main one. You can check the status of the cell in the fictional form of assess js. You can hide this form or use it as a form of comment that is on top. You would not have to create blocks in this case.

    See you soon,.
    Alp

Maybe you are looking for

  • iPhone & Phonak Compilot Air II

    Today I had an air compilot 2 audio stream to my hearing aids Phonak V90, it works really well, I'm really impressed, it's so clever how it works, to be a bit picky, but the sound of radio streaming live sounds a little hail, I'd love to me in order

  • delete imovie and reinstall

    Hello world I needed space on my mac so I deleted iMovie. When I bought my book mac pro, the app has been included as a result free.Now I would use it but I have to pay for it... I don't understand. Does anyone have a solution? Thank you Maxim

  • Dosen't work drive Equium L20-198-IO device error

    HI I HOOPE SOMEONE WILL HELP ME I HAVE THIS LAPTOP FOR 6 MONTHSEVERYTHING WAS OK UNTIL NOW, MY DVD DRIVE IS NOT WORKING AND I SEE A MESSAGE"THE REQUEST COULD NOT BE PERFORMED BECAUSE OF AN I/O DEVICE ERROR HELP PLEASE

  • Cannot scan with my Photosmart 7510. Installed any printer software

    Windows 7 64 bit After 10 hours on the phone with HP support, service Cloud and a HP escalation Manager, I can do everything except Scan. After that the escalation of HP Manager allows a 'scrubber utility' to completely remove all previous, all HP pr

  • Problem: I can't activate windows vista even with "phone activation".

    Hello worldI just re-formatted my computer and now I am asked to activate windows Vista Edition Home Premium x 32.I try to activate it, but I want to take this message: your product key is already in use!I try the phone activation but when I call it