Question about permissions on vCo 4.2.1

Hello

I'm having a problem where the user can see more information and vCo should be possible on his account.

I have a user named "Test" with a vm folder named 'Test' read-only permissions and execute permissions on the workflow 'Research vm'.

When I run this workflow I would expect to find only vm in this folder.

The workflow includes following the code to search for the virtual machine:

XPath = "xpath:name [begin with(.,'"+ pattern +"')]; var

machines virtual var = new Array();

VM = VcPlugin.getAllVirtualMachines (null, xpath);

This workflow returns however each vm you are looking for on the vCenter server when run with the test account, as he is an admin account.

For example it returns the virtual computer object with vm-1177 as id and can see all the information and even to launch new tasks.

When I navigate to https://vCenter/mob/?moid=vm-1177 with the test account all fields are disabled.

My guess is that the only controls vCo if the user has the Execute permission but running the workflow with the admin account.

Or I do something wrong? And it is even possible to check if an account is authorized to obtain certain information?

I found this article in the Ko, but he has not answered my question: VMware KB: introduction to security Orchestrator

Thanks in advance

Thibaut Noben

The results received by this workflow will depend on how you have configured vCenter plug-in... If a session shared, then the results of the workflow (regardless of who is connected to vCO) will be based on the credentials used for the session shared to vCenter... If each user is configured, then results are supposed to based on the credentials of the logged-on user because those are those sent to vCenter.

Tags: VMware

Similar Questions

  • question about permissions in EBS12

    I installed the EBS12 oracle user and the user of the application is applmgr, they are both members of the Group
    When I see the privileges, now I see that the installation did oracle the owner of the application of all the scripts which iam also assume to be present as applmgr.
    I know that I can fix this by changing the mode, but I want to understand why this happened.
    I read on the Internet that I should start the applications under the account of the application manager so that what is my goal.

    Thank you

    [applmgr@OEL6EBS12 ~] $ id
    UID = 504 (applmgr) gid = 502 (applmgr) groups = 502 (applmgr), 501 (dba)
    [applmgr@OEL6EBS12 ~] $ ls - ltr/home/oracle/ebs/inst/apps/VIS_oel6ebs12/admin/scripts
    172 total
    drwxr-xr-x 2 oracle dba 4096 3 April 00:54 msc
    drwxr-xr-x 2 oracle dba 4096 3 April 00:54 ieo
    -rwx - 1 oracle dba 5933 3 April 00:55 adstpall.sh
    -rwx - 1 oracle dba 6077 3 April 00:55 adstrtal.sh
    -rwx - 1 oracle dba 7368 3 April 00:55 adalnctl.sh
    -rwx - 1 oracle dba 16550 3 April 00:55 adcmctl.sh
    -rwx - 1 oracle dba 1558 3 April 00:55 adautocfg.sh
    -rwx - 1 oracle dba 7274 3 April 00:55 adexecsql.pl
    -rwx - 1 oracle dba 15404 3 April 00:55 adpreclone.pl
    -rwx - 1 oracle dba 2248 3 April 00:56 gsmstart.sh
    -rwx - 1 oracle dba 2372 3 April 00:56 java.sh
    -rwx - 1 oracle dba 8394 3 April 00:56 adapcctl.sh
    -rwx - 1 oracle dba 8892 3 April 00:56 adformsctl.sh
    -rwx - 1 oracle dba 8151 3 April 00:56 adoacorectl.sh
    -rwx - 1 oracle dba 8159 3 April 00:56 adoafmctl.sh
    -rwx - 1 oracle dba 7419 3 April 00:56 adopmnctl.sh
    -rwx - 1 oracle dba 10322 3 April 00:56 adformsrvctl.sh
    -rwx - 1 oracle dba 6584 3 April 00:59 jtffmctl.sh
    -rwxrwxr - 1 oracle dba 6641 3 April 00:59 mwactl.sh
    -rwxrwxr - 1 oracle dba 6645 3 April 00:59 mwactlwrpr.sh
    [applmgr@OEL6EBS12 ~] $
    [applmgr@OEL6EBS12 ~] $ adapcctl
    -bash: /home/oracle/ebs/inst/apps/VIS_oel6ebs12/admin/scripts/adapcctl.sh: permission denied
    [applmgr@OEL6EBS12 ~] $

    Sami wrote:
    so, if I understand it its ok to launch applications as the user oracle?

    Yes.

    Thank you
    Hussein

  • Technical questions about X 1 carbon Touch base

    Please forgive me, I'm still recovering after the shock and frustration generated by dealing with Lenovo Tech Support.

    I recently received my X 1 carbon Touch and I have tried to understand some - I think - fundamental questions.

    As you know, to win 8, Lenovo doesn't have a custom recovery solution / owner. However, there are a score of Lenovo recovery on the machine. I'm /assuming/ this, somehow, can be used through the default / built-in mechanisms of recovery Windows, but I want to know exactly how without necessarily experiencing myself with it.

    In addition, the computer seems to be equipped with a mechanism of alternative stand-by, fast recovery called Intel or something like that. It is enabled in the BIOS and apparently makes use of a hidden partition of ~ 8 GB on the SSD. However, I find no indication of this mechanism working. There are no settings that I could find in Windows. I changed the BIOS to 'Immediately' setting in order to test the functionality, but put the computer to sleep does not seem to generate behavior that is somehow different from regular sleep.

    In any case, I would like advice or information on my questions above. I understand works the thing of recovery fast in order to decide if I want to recover the partition or not. I would also like to know my options I should never need re - install the delivered factory OS without actually crossed the steps. I would also if someone could tell me the best way to get support from Lenovo.

    / * I called Lenovo technical support with these issues. The person sponsor and those to whom I then was sent to had no idea what I was talking about. They had difficulty understanding terms like partition, standby, sleep, resume, and even software/hardware and implementation. It was suggested that my computer may be Intel and Lenovo not... They seemed to really come from an age of the computer. I asked to speak with someone who would have some basics of the machine that Lenovo delivered to me. I find it reasonable. At that time, I was told to talk to a knowledgeable person, I have to pay a fee. Seriously?

    */

    elfstone,

    To find out how to work the various Windows recovery methods, please see this Microsoft Web site:

    http://Windows.Microsoft.com/en-us/Windows-8/restore-refresh-reset-PC

    The sole purpose of the recovery partition is to work with the "All delete and reinstall Windows" function of Windows 8.  If you have specific questions about the factory recovery that you can't get items from Microsoft, let me know.

    Regarding the plan of hibernation from Intel, as you noted, it takes a partition dedicated to your SSD which cannot be used for other purposes.  The only parameter in Windows is inside the application of arrangements of Lenovo in the power section.  Lenovo calls this function "in waiting for 30 days.  The only thing you can do is it turn on or off.  Here's how works "waiting for 30 days:

    1. When you close the lid, or otherwise put the system into standby mode, the system of standby for 3 hours.

    03:02 hours, the system will wake up and check things like not attached AC, wake-on-LAN not activated, USB device not attached, etc..  If conditions permit, the system will enter wakefulness of 30 days for example deep sleep.  If the system returns in normal mode to 'sleep'.

    3. deep sleep means that the content of the memory is written on the special hibernation on the SSD partition.  It is very similar to the traditional hibernation except what happens faster using methods of BIOS instead of Windows methods.  But this isn't anywhere near as fast as normal sleep/recovery.

    4. the system out of deep sleep when the cover is opened or when you press the power button.

    You have found the BIOS settings, but in fact they are ignored when Lenovo settings (and package of dependence of the Lenovo parameters) are installed on the system.  I don't really know why this design choice has been made.

    Personally, I don't see value in 30 days standby, not enough value to want to give up my expensive SSD 8 GB.  I exclusively use sleep/recovery.  The battery will last several days.  And if I'm going to be away from the computer for a long time, then I'll just stop it.

  • Question about license Photoshop Lightroom 6

    Hello

    I want to buy Photoshop Lightroom 6 (not subscribing to CC) and I have two questions:

    1. Can I install this program (not seen that a single permit for me as user) on my main computer and my wife's cell phone (even if it's his computer, only I'll be the user of the software)? I found somewhere in the questions that yes I install Lightroom on both computers unless I am the only user of the program, but then I found that in the EULA and he kept of wondering if I understand though.
    2. If I buy the "Lightroom 6", do all the updates from Lightroom 6? For example, I buy today and I get the most recent version available, for example Lightroom 6.4... and what happens if in a certain period of time, the 6.5 version comes out? I get this update too? I'm not situation that Lightroom 7 came out which is obvious to me that you buy a new product update.

    Thank you very much for your help.

    Kind regards

    Marcin

    Marcin salvation,

    1. Can I install this program (not seen that a single permit for me as user) on my main computer and my wife's cell phone (even if it's his computer, only I'll be the user of the software)? I found somewhere in the questions that yes I install Lightroom on both computers unless I am the only user of the program, but then I found that in the EULA and he kept of wondering if I understand though.

    Yes you can install it on two computers. Be sure to buy the license for several Platforms.Refer frequently asked questions about using Photoshop Lightroom with creative cloud

    If I buy the "Lightroom 6", do all the updates from Lightroom 6? For example, I buy today and I get the most recent version available, for example Lightroom 6.4... and what happens if in a certain period of time, the 6.5 version comes out? I get this update too? I'm not situation that Lightroom 7 came out which is obvious to me that you buy a new product update.

    Yes, you will get the last continues version.and will get updates on this topic. (Future update releases 6.5,6.6 and so on). You may see Lightroom FAQ (frequently asked Questions)

    Kind regards

    Assani

  • I have a question about the license.

    Hi , I have a question about the license.

    I'm going to play a game online non-commercial (real property services). And I'll use an Adobe Photoshop to make a picture. In this case, can I use single license (non-commercial)? If there is no problem, is it normal that I have use a student permit? Just for non-commercial and not business.


    Thank you.

    Yes, it's fine.

    You can even use a student for commercial work permit to make money while you are studying...

  • A question about external authentication with PHP OCI8 using a portfolio store

    Hello
    SQL> SELECT * FROM v$version;
    
    BANNER
    --------------------------------------------------------------------------------
    Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
    PL/SQL Release 11.2.0.1.0 - Production
    CORE     11.2.0.1.0     Production
    TNS for Linux: Version 11.2.0.1.0 - Production
    NLSRTL Version 11.2.0.1.0 - Production
    
    SQL> 
    OS: Linux Fedora Core 17 (x86_64)
    PHP Version: 5.4.14
    Apache version (httpd): Apache/2.2.23 (Fedora) 
    I have a question about OCI8 connection to the Oracle server via portfolio, which I understand is a good practice because we do not have to hard code the users password. I'm trying to read pages 117 and 118 of the book The Underground PHP and Oracle manual online to learn how to set up a portfolio. I proceeded by steps as explained in these two pages (except that at the end I connect, as a normal user, not a privileged user) yet, apparently PHP does not detect the user.

    Here's what I write in my script
    $connection = 
                    oci_connect 
                        (
                            "training", 
                            "", 
                            "php_ora_usr", 
                            "AL32UTF8"
                        );
    the training is the name of the user that I use in my PHP scripts to connect to the oracle database and the password is mypassword (is not true, just for the purpose of this thread :)) the code above gives me the following error:)
    Warning: oci_connect(): ORA-01005: null password given; logon denied in /var/www/html/myscript.php on line 91
    
    Fatal error: Connection step: ORA-01005: null password given; logon denied in /var/www/html/myscript.php on line 13
    But if I also provide the password which is,
    $connection = 
                    oci_connect 
                        (
                            "training", 
                            "mypassword", 
                            "php_ora_usr", 
                            "AL32UTF8"
                        );
    Obviously it works, but at the same time, this means that my wallet is not operational.

    So I'll write here, step by step, how I did according to the instructions contained in the pages 117 and 118 of the above mentioned book and I would be grateful if you could kindly tell where I made the mistake (s)

    The following text was performed under my oracle linux (so the dbagroup)

    Step 01:_
    I created and provided the password for the directory of portfolio
    mkstore -wrl /home/oracle/wallet_dir -create
    Step 02:_
    I created an entry for my oracle user that will be used in my PHP scripts to connect to oracle
    user: training
    password: mypassword
    mkstore -wrl "/home/oracle/wallet_dir" -createCredential php_ora_usr training mypassword
    I also checked that the entry was actually created for my user in the portfolio
    $ mkstore -wrl "/home/oracle/wallet_dir" -listCredential
    Oracle Secret Store Tool : Version 11.2.0.1.0 - Production
    Copyright (c) 2004, 2009, Oracle and/or its affiliates. All rights reserved.
    
    Enter wallet password:                
       
    List credential (index: connect_string username)
    1: php_ora_usr training
    $ 
    Step 03:_
    I added the following to my $TNS_ADMIN/tnsnames.ora
    .  .  .
    php_ora_usr = 
      (DESCRIPTION =
        (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
        (CONNECT_DATA =
          (SERVER = DEDICATED)
          (SERVICE_NAME = db02)
        )
      )
    .  .  .
    Step 04_
    I added the following to my $TNS_ADMIN/sqlnet.ora
    # sqlnet.ora Network Configuration File: /u01/app/oracle/product/11.2.0/db_1/network/admin/sqlnet.ora
    # Generated by Oracle configuration tools.
    
    NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
    
    ADR_BASE = /u01/app/oracle
    
    WALLET_LOCATION =
        (SOURCE =
            (METHOD = FILE)
            (METHOD_DATA =
                (DIRECTORY = /home/oracle/wallet_dir)
            )
        )
    SQLNET.WALLET_OVERRIDE = TRUE
    SSL_CLIENT_AUTHENTICATION = FALSE
    SSL_VERSION = 0
    _ Step 05
    The TNS_ADMIN environment variable is already set correctly in * / etc/sysconfig/httpd * so I didn't need to do something for this step


    Step 06_
    I gave to access Apache (as root) in the directory of portfolio (in fact, it seems that the user oracle (dba) of linux also has the required privileges to grant this access to the apache)
    # setfacl -m u:apache:rx /home/oracle/wallet_dir
    # setfacl -m u:apache:r /home/oracle/wallet_dir/{cwallet.sso,ewallet.p12}
    Step 07_
    Restart Apache
    # service httpd restart
    Step 08_
    Finally make a test connection using the connection string php_ora_usr which the entry was created earlier. And the test was not successful, as indicated above
    $connection = 
                    oci_connect 
                        (
                            "training", 
                            "", 
                            "php_ora_usr", 
                            "AL32UTF8"
                        );
    The error message:
    Warning: oci_connect(): ORA-01005: null password given; logon denied in /var/www/html/myscript.php on line 91
    
    Fatal error: Connection step: ORA-01005: null password given; logon denied in /var/www/html/myscript.php on line 13
    I would appreciate it if you could kindly shed some light.

    Thanks in advance,
    Dariyoosh

    That gives a good clue to begin with. With your platform/Apache/DB, you might need different ACLs. Test directory and permissions. Check what euid your Apache runs as. Good luck.

  • Question about the database to use with ESX and Labmanager

    Hello

    Finally my company is buying a permit for Labmanager and ESX server using Labmanager to our tests.

    We had a question about the database that we use for the actual installation.

    Could we use MY - SQL? Or that we have the olbigation to install a SQL or Oracle DB for the whole system to work?

    We prefer to use MY_SQL because it is open-source and will cost less to use for us.

    Thanks in advance for the answer and please excuse my bad English, I'm french spoke first.

    Lafa91

    Montreal.

    Lab Manager installs SQL Express as part of the installation and use. If you install also Virtual Center as part of your deployment of Lab Manager (do not use an existing VC server), you can use the database SQL Express is included for small installations of ESX, but MY SQL is not an option. You can search the databases supported in the installation guide for what version you deploy.

  • A question about the license of Oracle 1 g R2 Enterprise Edition

    Hi all


    I have a question about Oracle license and I would be grateful if you could help me thanks.

    I installed an Oracle (11g R2 Enterprise edition) server on a virtual linux machine. The pc being used for this purpose
    is my cell phone company (so a professional and not a personal computer). However, I use this Oracle Server
    only for the purpose, i.e. learning only to run the examples in my Oracle Press books (SQL, PL/SQL and some)
    administrative tasks) just to learn things.

    There is absolutely no data related to my business, stored or used on this server. Whenever I want to work with my
    data of the company, I use the Oracle server of the company that has the appropriate license of course. So, as I said, I
    Use this server of the company on the virtual machine only to run applications/programs in my Oracle Press books just for
    learning and I'm the only person who uses this server (no remote for other users).

    The reason why I needed to install this server on my PC, is that our DBA could not provide a training environment
    for me, with all the privileges and features.


    Should I buy a license for this Enterprise Server installed on my virtual machine?


    Thanks in advance,
    Dariyoosh

    The OTN license agreement:

    >
    LICENSE RIGHTS
    We grant an exclusive, non-transferable, limited license to use the programs only for the purpose of developing, testing, prototyping and demonstrating your application and not for other purposes. If you use the application you develop in this licence for any internal or for any commercial or purposes data processing production, or you want to use the programs for purposes other that those permitted under this agreement, you must get a production version of the program by contacting us or a reseller of Oracle to obtain the appropriate license. You acknowledge that we may not produce a production version of the programme and the development efforts undertaken by you at your own risk. We can check your use of the programs. Program documentation, if any, may be consulted online at http://otn.oracle.com/docs.

    Ownership and Restrictions all retain us the property and rights of intellectual property in the programs. Programs can be installed on a single computer only and worn by one person in the operating environment identified by us. You can make a copy of the program for backup purposes.

    You can not:
    -Use programs for your own internal data processing or for commercial or production purposes, or programs for any purpose except the development of your application.
    -use the applications you develop with programs for any internal data processing or commercial or production without obtaining an adequate license from us;
    -continue to develop your application after using for any treatment data internal, commercial or production end without obtaining an adequate license from us, or Oracle reseller;
    -remove or change any brand of program or a statement of property rights;
    -put the programs available in any manner to a third party;
    -Use programs to provide a third of training;
    -assign this contract or give or transfer the programs or interest to them to another person or entity; -cause or permit engineering reverse (unless required by law for interoperability), disassembly or decompilation of the programs;
    -disclose the results of benchmark tests of any program without our prior written consent.

  • Where can I ask a handful of general order questions about Firefox OS as a consumer and get the answers? (a forum or something similar)

    I have about seven questions about Firefox OS. I'm potentially interested in opting for a tablet that works instead of Android or iOS. I couldn't find a place to ask questions like that. Thank you!

    https://support.Mozilla.org/en-us/forums/Firefox-OS-English-Forum

    There is another option.

  • About a month ago I posted a question about iMovie and not being able to "share". I solved the problem thanks, so no more emails!

    About a month ago I posted a question about iMovie and not being able to "share". I solved the problem thanks, so no more emails!

    Hi Michael,

    If you want to stop receiving notifications by electronic mail, in the thread, that you have created, then I suggest that you follow the steps below:

    One time connected to the Apple Support communities, visit your mini profile and select manage subscriptions.

    Content

    To manage this content, you are currently subscribed and changing your preferences, select the content.

    Select next to see what content you are currently following.  Note that any thread you are responding you subscribe you automatically to this thread.

    You can select to terminate a subscription to a thread.

    Learn how to manage your subscriptions

    Take care.

  • Where and how do I ask questions about Email?

    The Commission opening thingy is complicated, I have trouble finding my way around it.  I don't know where or how questions about email.  Is there an easier way than trawling through all these icons?  Like a list or something - as you get on all other forums on the internet?

    It would be a good starting point: Mac mini

    Or the appropriate under MAC Os and system software section.

    You might also find this useful: find answers and new questions

  • Many questions about the HP 50 g

    I just ordered a HP 50 g graphic calculator! I have a few questions about this so hang on tight! What is the USB connector on the calculator? Mini-USB, micro USB, or is it a connector owner, "custom". Then, it would be possible to connect a keyboard to the HP 50 g by using the USB Port? Is there a program that would make this possible? (I doubt it would work if you plug it..) I have a Mini-USB to female USB 2.0 connector. So I could just plug the keyboard right, provided that the port on the calculator is a Mini-USB Port. If this is not so that I could use my female to female USB adaptor to connect the keyboard.

    Thanks for your help,

    Zekelegge

    Hi!, zekelegge:

    Welcome to Forum!

    The only printer I use, 50G calculators, 48GII, 39GS and 17BII +, as well as many former models, such as the 48 s/SX/G/G + / GX, 38 G, 39 G, 42, 41 C/CV/CX and 28 C/S, is the infrared printer HP 82240 b. If you can use the emulator HP50G, on the PC, the simulator of the printer, you can download, since... http://www.HPCalc.org/details.php?id=7386

    The printer... HP 82240 B

    The cable series...

    The description... http://www.allenwan.com/hpcalcserialcable/

    The original cable...

  • Question about warranty after exchanges of RAM on Satellite module series

    Hello together,

    I have a question about the warranty. My laptop is 5 months old and now I want to improve it with more RAM. I want to do it myself, and now I'm wondering if the warranty will be getting hurt.
    Thanks in advance for your answers.

    Concerning

    TiG3r

    For new models of laptops the RAM upgrade described in s operating manuals. It is public act and it shows the owner of the notebook how do RAM upgrade only.

    If Toshiba offers something like this he won't have the negative influence of valid warranty.
    Buy a compatible module and RAM upgrade.

    Bye and good luck!

  • A few quick questions about the Satellite P300 - 18 M

    Hello

    I am about to order a Satellite P300 - 18 M and have just a few questions about this:

    (Although these may apply for other similar Satellite/Equium P300.)

    Is the touchpad made by / to use the Alps or Synaptics driver?

    It has the Wireless N network card, is the map made by Intel or Realtec?

    And also, someone has experience with face recognition software to connect?

    If so, does it take a lot of time to initalise?

    Thanks in advance,
    Jack

    Hello

    The P300 - 18M belongs to the PSPCCE series.
    It uses the two touchpad drivers. Synaptics & Alps Electric
    There is an Intel 802.11agn minicards WLan installed

    The face recognition is a nice tool but local to be illuminated and you must take your face the right of the post sometimes it of not very easy

    But if you face is recognized correctly that the connection should work properly

    See you soon

  • Questions about nb200

    I recently bought a mini nb200 with windows 7 and I have a few questions about it. How can you set up your email, I was willing to put up with Outlook Express, but I don't know if I can. Also, is there a way to get a paper copy of the user manual?

    You can download and install a new e-mail program when you download Windows Live via Microsoft Update. You can select the components of Windows Live, you want to include by checking a box for each you want. I installed all the. Or you can use Outlook, if you have Microsoft Office and you want to install it.

Maybe you are looking for

  • Still play songs from my iPhone when connected to wifi

    Had this problem before, but it stopped happening a while ago only to re - emerge with the iOS 10 update. I'm running on an iPhone 6 and used to play my music library on shuffle. Over the years, I've deleted some songs from my library of songs, but t

  • Boot failure on Equium A60

    I recently started getting problems during startup and now my laptop will not boot at all. When that I boot, I get the following error message. STOP: 0X0000007B (0XF790B640, 0XC0000034, 0X00000000, 0X00000000) I tried to run in safe mode and other mo

  • ignore startup items

    I remember that (in the era OS9) Mac could be started without loading/opening the startup items (in the list defined by the user) by pressing a combination of keys at startup. Every morning my Mac starts automatically with the main programs I use dur

  • zbook 15

    The Zbook 15 allows you to install the WIFI card and card WWAN, at the same time or just one or the other?  I am buying zbook 15 and want to know if option for WWAN is in addition to the standard WLAN or replaces

  • HP Pavilion p6-2003w Desktop PC CD/DVD driver problem

    First of all, Hello and thank you for taking time to see my problem. I don't remember exactly what I was doing, but I know that I wanted to perform a restore factory on my computer, and when I tried it only allows me to choose this option (in the Rec