How to recreate some deleted internal user in IBM BPM 7.5-8.0

In IBM BPM 7.5-8.0 internal users are stored in BPMDB.
If you delete some of them - the full information about it will not delete from the database and you can to recreate it.
The information about internal users are stored in two tables:lsw_usr_xref and lsw_usr
and this information is deleted from lsw_usr only.

How to find out how many users are working in Process Portal at the given time (for 8.5 and later version)?

If you use IBM BPM version 8.5 and later, you can find out the number of users connected to Process Portal using the table BPM_USR_RUNTIME_PROPS.

IBM BPM 8.5.5. It's impossible to create users using ProcessAdmin console (Part 2)

During creating some user using Process Admin console you can get the message:

ERROR: com.lombardisoftware.core.TeamWorksException: UOWManager transaction processing failed; nested exception is com.ibm.wsspi.uow.UOWException: javax.transaction.RollbackException: Global transaction rolledback from client inactivity timeout from subordinate

The user is not created.

IBM BPM 8.5.5. It's impossible to create users using ProcessAdmin console (Part 1)

You attempt to create user using ProcessAdmin console in 8.5.5.
You enter correct name and password but nothing.

WebSphere Application Server password decoder (decryptor). Total recall.

I have already written about decoding WAS passwords here:
http://bpmadmin.blogspot.com/2012/12/how-to-restore-was-bpm-administration.html

Now,  you need not remember the big commands. On any page of my blog you can decrypt your password.
Just enter it into the field and press the button "Decode". Save your time!

It's impossible to map some group to role in Connections 5

Now I'm dealing with new Connections version 5.

During its installation I had a issue with mapping the necessary group to role using ISC.
Granting access to global metrics
But I had a trouble. When I press the link Save in ISC for storing the configuration - I get white frame and the configuration does not change.

How to add some user to some group in IBM BPM through DB

Sometimes you need to add some user to some group in BPM.
You can do this through admin console certainly.
But imagine that you have not any access to admin console.

The report of using Process Designer

One man from DeveloperWorks forum asked the interesting question.
He needs create some report about using of PD. He want to know when some user used PD last time. He needs it for license control.

SPNEGO SSO in IBM BPM clustered environment

As you know, for Windows client Integrated Authentication in IBM WAS the mechanism called SPNEGO (The Simple and Protected GSS-API Negotiation Mechanism) is used.
Our BPM users can access to portals without input of username and password, using their Windows account.  

I won't give a detail guide because the old guide you can find here
But there is not a way for clustered environments here what are used in productive most frequently.
I can fill this defect.
I describe the features for clusters.

How to restore WAS BPM 8.5 administration password?

I have already written about restoring of BPM Admin password here
There are some changes in BPM 8.5 securuty.

The password of database user expired and you don't have an access in BPM. What to do?

At first some theory.
A standalone BPM environment (7.5-8.0) uses a database-base internal repository (DBR) for storing of accounts by default. If your database is down you cannot enter into BPM.
A clustered BPM environment does not use DBR by default, it uses WebSphere file-based user repository (FBR). A standalone environment contains FBR too, but it is not active.

I had this problem when I started to use Oracle DB as BPM database. Default user profile in Oracle has two settings: a password will be expired after 120 days and the user account will be locked 7 days after password expiration. So, if you use Oracle you must change these setting to UNLIMITED at once.
But others databases have analogical problems too.

What do do in these case:

How to open FileNet Global Configuration Data without any accounts (Part 2)

Yesterday I wrote about opening a GCD configuration.
But, the Object Store was not availble (We have only rights for reading as Authenticated Users).
Continue our exploring.

How to open FileNet Global Configuration Data without any accounts (Part1)

This article is dedicated to IBM technical support what could not help me in my small problem.

As said - if you want to do something well - do it youself.

Disclaimer: If you attempt repeat this solution - you'll do every your step on your own risk. Don't try to execute something on your working environment. I washed my hands.

Recently I have put in a lot of time in exploring of a new system in my suitcase of experience. This is FileNet.
We make preparations for several projects which use this product.

One customer gave us the FileNet environment as a virtual machine and databases. We deployed all on our own servers.
But FileNet configuration has one not very friendly property - it linked with some LDAP users store. You cannot open the configuration if you have not this store and the user (from this store) what has a Full Access to the configuration.

I opened the PMR - bla-bla-bla - the support cannot help me, because only its engineers can use engineering utility - bla-bla-bla

As usually I have to do this myself.