Need a report - What Groups is User X in?

I need a report (Content Server 10) Oracle Database to run that will show all the groups that a specific user is in.

We use LDAP so the default group for every user is LDAP group and other users need to be able to look up a user and see what groups they are in. I do not want to give those other users System Administrator rights.

Does anyone have a report that provides all the groups a user belongs to?

Thank you.

Find more posts tagged with

Comments

keithgagne

Hi Karen,

I may not be understanding your scenario. It seems your users could use the GUI Users & Groups menu to look up a user and find their groups.

For a report, try this query:

select g.name
from kuaf k
inner join kuafchildren c on k.id = c.childid
inner join kuaf g on c.id = g.id
where k.name = 'kgagne'
;

Keith

Colin_Schmidt

There's a bit of SQL involved (not a lot) to pull an ID from every group and from every group that it is assigned to indirectly. I thought there would have been SQL in the KC to this question some time ago.

You can try this, but it's by User prompt, but it only provides a list they're explicitly in.

Colin J. Schmidt
Opentext Content Server Support Admin

501 S. 5th St.| Richmond, VA, 23219
T 804.444.5012 | M 918.904.9223
colin.schmidt@westrock.com | www.westrock.com

On Fri, Jan 8, 2016 at 11:44 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Need a report - What Groups is User X in? Posted byMorley, KarenOn 01/08/2016 11:42 AM

I need a report (Content Server 10) Oracle Database to run that will show all the groups that a specific user is in.We use LDAP so the default group for every user is LDAP group and other users need to be able to look up a user and see what groups they are in. I do not want to give those other users System Administrator rights.Does anyone have a report that provides all the groups a user belongs to?Thank you.
[To post a comment, use the normal reply function]
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from WestRockCompany (www.westrock.com) or itssubsidiaries, which may be confidential, privileged or otherwise protected fromdisclosure. The information is intended to be disclosed to and used by only thenamed recipient(s). If you are not the intendedrecipient, then your review, use, disclosure, printing, copying, ordistribution of this message or its contents is prohibited. If you havereceived this message in error, please notify WestRock immediately at postmaster@westrock.com, and delete themessage from your system. Unless previously authorized in writing, thismessage does not constitute an offer, acceptance, or agreement of any kind.Sender is not liable for damage, errors or omissions related to or caused bytransmission of this message. © WestRock Company.

Karen_Morley

Yes, as the Admin I can look at the Users and Groups and then view the Groups. However, we have other users who need to see what groups the user is in. You have to be a System Admin to do that and I don't want to have to give other users that level of access. By default our users are placed in a an LDAP Sync group and that is the only group that anyone other than a System Admin can see. That is why I was looking for a report that could be run whereby they could enter the username and see what groups the user belongs to.

I tried the ones you and someone else had added, but not able to get them to work. My database is Oracle so don't I think makes a different on the SQL statement I need to enter in the query.

Al Picard

Hi Karen,

Here's something you can tinker with to use the user's name in the parameter field rather than the current selection on the user's ID.

Select distinct a.Name, a.ID FROM KUAF a WHERE a.ID IN (SELECT DISTINCT b.ID FROM KUAFChildren b START WITH b.ChildID =%1 CONNECT BY nocycle prior b.ID=b.ChildID )
and a.type=1 order by name

keithgagne

I understand now. Attached is the XML for the LiveReport, and also a screenshot showing what it looks like.

Colin_Schmidt

We have Oracle too. But as I said, it only provides a list of those groups the User is explicitly in. I use it sporadically. Can you remove the SQL from the LR and place it in SQL Developer or some other DB tool to see what it displays for you?

Or by "Not working", do you mean it works, but is not what you want (incomplete)?

Colin J.

On Fri, Jan 8, 2016 at 2:06 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Need a report - What Groups is User X in? Posted byMorley, KarenOn 01/08/2016 01:58 PM

Yes, as the Admin I can look at the Users and Groups and then view the Groups. However, we have other users who need to see what groups the user is in. You have to be a System Admin to do that and I don't want to have to give other users that level of access. By default our users are placed in a an LDAP Sync group and that is the only group that anyone other than a System Admin can see. That is why I was looking for a report that could be run whereby they could enter the username and see what groups the user belongs to.I tried the ones you and someone else had added, but not able to get them to work. My database is Oracle so don't I think makes a different on the SQL statement I need to enter in the query.
[To post a comment, use the normal reply function]
Topic: Need a report - What Groups is User X in?
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

Karen_Morley

Thank you!

Karen_Morley

Thank you. This worked! Appreciate your help.

Alister Grigg

Hi Karen,

I know you have the report you needed however just to clarify, a user does not need to be a system admin to see what groups a user belongs to. They just need to have the "create/modify groups" priviledge. They will of course also then be able to edit group memberships and it's a global setting.

Cheers

Alister