Example PX Policy that removes roles from users.
search cancel

Example PX Policy that removes roles from users.

book

Article ID: 10965

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal CA Identity Suite

Issue/Introduction

This document will walk you through the steps needed to create a PX Policy that will remove all of the provisioning roles from a user. You could use this PX Policy when disabling users who are no longer with your company, or any other use case that this is suited for in your business. 

This PX Policy is an example intended for informational purposes and may or may not work exactly as configured in a live environment.  The example policy shown below is set to fire on Modify User activity, and as shown will initiate on Task Submission.
In a Production environment you will probably want to configure a custom disable user task or something other than the Modify User task.  If set up to run from the Modify User task you will need very specific entry rules to prevent this policy from removing the roles off of every user who you modify. 

Environment

Release: 14.x
Component: IDMGR

Resolution


 

 

Attachments

1558714977827000010965_sktwi1f5rjvs16tmw.jpeg get_app
1558714975728000010965_sktwi1f5rjvs16tmv.jpeg get_app
1558714973575000010965_sktwi1f5rjvs16tmu.jpeg get_app
1558714971866000010965_sktwi1f5rjvs16tmt.jpeg get_app
1558714969936000010965_sktwi1f5rjvs16tms.jpeg get_app
1558714967996000010965_sktwi1f5rjvs16tmr.jpeg get_app
1558714964748000010965_sktwi1f5rjvs16tmq.jpeg get_app
1558714959423000010965_sktwi1f5rjvs16tmp.jpeg get_app