Bulk Task Population: No Results for Attributes other than User ID

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

In CA Identity Manager, when defining a Bulk Task (e.g., Modify User), the population filter fails to return results when using attributes like Description. While the filter works correctly when using the User ID attribute, other fields return zero users during a "Preview."

Environment

Identity Manager 14.x & v15

User Store: Oracle User Directory (OUD)

Cause

The Oracle User Directory is configured to prevent unindexed searches for the user account connecting Identity Manager to the directory.

When a population filter uses a non-indexed attribute (such as Description), the directory rejects the query due to lack of privileges or missing indices.

Resolution

Follow one of the two methods below to resolve the access rights issue:

Method 1: Grant Unindexed Search Privilege Grant the unindexed-search privilege to the LDAP user configured to connect the Identity Manager user store.

Example command for Directory Manager:

ldapmodify -h <hostname> -p <port> -D "cn=Directory Manager" -w <password>dn: cn=imadmin,ou=People,dc=ca,dc=comchangetype: modifyadd: ds-privilege-nameds-privilege-name: unindexed-search

Method 2: Create Attribute Index Set up an index on the specific attribute (e.g., Description) within the Oracle User Directory. This makes the attribute available for the population filter without requiring unindexed search privileges.