Clarity

 View Only

Grant Administrator Collaboration Manager 

Apr 01, 2015 04:52 PM

Attached is a Project Object based process that, at project create, will grant Collaboration Manager to the Administrator user. The Architecture for this solution uses GEL scripts that XOG the Administrator onto the Project's Participants then grants them Collaboration Manager permissions - a fully supported and 'SaaS safe' solution for both On-Premise & On-Demand.

 

The two steps are separated (Add Administrator to Participants, Grant Admin Collaboration Manager). If an organization wishes to grant Collaboration Manager permissions without having the Admin user appear as a Participant, simply remove the Add Administrator to Participants step.

process.jpg

   Notes:

       MSSQL and Oracle version are in the zip. Oracle has not been tested. Please let me know your Oracle results - we can update the zip if necessary.

 

    Installation Instructions:

        1) Xog in appropriate process per database type.

        2) Goto the process (OSUWMC - Grant Admin Collaboration Manager), click on Steps, click on the Add Administrator to Participants step, then click on the Add Admin to Project Participants Action.

        3) On the Action, click on the Custom Script Parameters tab and set the username and password for an account with the appropriate XOG permissions and Save.

        4) Click on the Grant Admin Collaboration Manager step, then click on the Grant Admin Collaboration Manager Action.

        5) On the Action, click on the Custom Script Parameters tab and set the username and password for an account with the appropriate XOG permissions and Save.

        6) Grant appropriate Process - Start permissions. Grant Process - View Definition permission if you want users to be able to run this on demand.

        7) Validate and Test.

Statistics
0 Favorited
0 Views
1 Files
0 Shares
0 Downloads
Attachment(s)
zip file
osuwmc_grant_admin_collaboration_manager_write.zip   11 KB   1 version
Uploaded - May 29, 2019

Tags and Keywords

Comments

Oct 21, 2015 01:57 AM

Thankyou for sharing this!

Apr 02, 2015 05:09 PM

Hi Stuart. Let's get connected - I'd love to see the CA Services UKI approach. I clicked 'follow' for you. I think if you do this for me we can message each other.

Apr 02, 2015 01:49 PM

I attach an alternative version of the GEL script.

 

Although larger than the original example it includes various 'boilerplate' code segments which CA Services UKI have developed over the years. In particular the XOG code is included just once as its options make it pretty verbose; the code then loops over a sequence of steps (2 in this case) setting a flag to use XOG as required.

 

Other code to note is the direct reference to sql:query columns, thus avoiding the multiple core:set tags in the original.

 

Please note, I have had to develop this 'blind' so it is not (yet) tested. In particular, I suspect my Oracle code does not include the changes mentioned earlier.

 

Having typed the above I have just realised that I don't seem to have any mechanism to attach a file to this post - what am I missing?

Apr 02, 2015 10:29 AM

I was thinking on this this morning. We could put both MSSQL and Oracle in the same script (as well as http & https) and pickup from the properties what to run. This is what right looks like to me.

 

If you can help me with the Oracle (like you have above) and some testing support, I'll carry the water on making the GEL above. I will have time next week for this. I'll contact you offline and we can work together outside of these threads then post up the superfantastik 'Version 2' of these!

Apr 02, 2015 10:14 AM

Thank you Robert.  I am happy to help.  I have been aware of your original post that changes all PMs to Collab Managers for a while and had just started testing it when you posted these too.  I plan to point customers and other techs to these options when they are working.

 

As an interim solution for choosing the http or https entry url, how about adding both and allowing users to comment out the lines they don't want.

 

Jeanne

Apr 02, 2015 07:15 AM

Absolutely Awesome Jeanne! Thanks!

 

You're right - when we switched to https from http I updated all my Gels for https. I thought at the time "the responsible thing to do would be to switch dynamically based on the properties..." but in the interest of time I didn't do that. I have one more to post (Project Object "update' process with an on change of PM start condition that adds the new PM as collaboration manager). I will roll all your updates into this one.

 

Thank you thank you thank you for your help on this. The originating Idea has over 75 votes - so it appears many people have this problem to solve. I hope our community finds these useful.

Apr 01, 2015 06:44 PM


Additionally, when I run this script, it picks up the https entry url instead of the http entry url which causes the gel script to error out since the server is not set up for https.

 

I have not yet had a chance to look at the logic to see why that is happening.  I am not sure if I will have time to look at it tomorrow or not.

 

Thanks Rob!!!

 

Jeanne Gaskill

Senior Support Engineer - Clarity

Apr 01, 2015 06:41 PM

Here are the corrected queries for Oracle:

 

Add Administrator to Participants

 

SELECT  INV.ID INV_ID , INV.NAME INV_NAME ,

INV.CODE INV_CODE , A.LAST_NAME ADMIN_LAST_NAME ,

A.FIRST_NAME ADMIN_FIRST_NAME ,

NVL(A.EXTERNAL_ID , 'NULL') ADMIN_EXTERNAL_ID ,

A.UNIQUE_NAME ADMIN_UNIQUE_NAME , A.EMAIL ADMIN_EMAIL ,

('CLB_PROJECT_MANAGERS'||(CAST(INV.ID AS varchar(20)))) GROUP_ID        ,

('project '||(CAST(INV.ID AS varchar(20))||'CM group')) GROUP_NAME

FROM INV_INVESTMENTS INV

JOIN INV_PROJECTS P ON P.PRID = INV.ID

JOIN SRM_RESOURCES A ON A.USER_ID = 1

WHERE INV.ID = ${gel_objectInstanceId}

AND INV.ODF_OBJECT_CODE = 'project' AND P.IS_TEMPLATE = 0

AND A.USER_ID NOT IN 

(SELECT USER_ID FROM CMN_SEC_USER_GROUPS WHERE GROUP_ID = 

   (SELECT ID FROM CMN_SEC_GROUPS G       

    WHERE G.GROUP_ROLE_TYPE='SEC_GROUP_TYPE'      

    AND G.PRINCIPAL_TYPE='CLB_PROJECTS'      

    AND G.GROUP_CODE = 'CLB_PROJECT_MANAGERS'||(CAST(INV.ID AS varchar(20)))      

    AND G.PRINCIPAL_ID = INV.ID))

 

Grant Admin Collaboration Manager

 

SELECT  INV.ID INV_ID , INV.NAME INV_NAME ,

INV.CODE INV_CODE , A.LAST_NAME ADMIN_LAST_NAME ,

A.FIRST_NAME ADMIN_FIRST_NAME ,

NVL(A.EXTERNAL_ID , 'NULL') ADMIN_EXTERNAL_ID ,

A.UNIQUE_NAME ADMIN_UNIQUE_NAME , A.EMAIL ADMIN_EMAIL ,

('CLB_PROJECT_MANAGERS'||(CAST(INV.ID AS varchar(20)))) GROUP_ID        ,

('project '||(CAST(INV.ID AS varchar(20))||'CM group')) GROUP_NAME

FROM INV_INVESTMENTS INV

JOIN INV_PROJECTS P ON P.PRID = INV.ID

JOIN SRM_RESOURCES A ON A.USER_ID = 1

WHERE INV.ID = ${gel_objectInstanceId}

AND INV.ODF_OBJECT_CODE = 'project' AND P.IS_TEMPLATE = 0

AND A.USER_ID NOT IN 

(SELECT USER_ID FROM CMN_SEC_USER_GROUPS WHERE GROUP_ID = 

   (SELECT ID FROM CMN_SEC_GROUPS G       

    WHERE G.GROUP_ROLE_TYPE='SEC_GROUP_TYPE'      

    AND G.PRINCIPAL_TYPE='CLB_PROJECTS'      

    AND G.GROUP_CODE = 'CLB_PROJECT_MANAGERS'||(CAST(INV.ID AS varchar(20)))      

    AND G.PRINCIPAL_ID = INV.ID))

Related Entries and Links

No Related Resource entered.