ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Add/Remove Roles and Groups using Bulk Loader

book

Article ID: 111765

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Suite

Issue/Introduction



We would like to know how to add/remove the admin roles using bulk loader of users.
Example: Several users have 4 admin roles and we need to remove only 1 admin role, keeping other 3 admin roles.

Can this be accomplished with the Bulk Loader?

Environment

All versions of Identity Suite (Identity Manager)

Resolution

The Bulk Loader requests only support modification of attributes on the IM admin task's Profile tab, meaning you can't add or remove Roles (or groups) in bulk directly using the Bulk Loader.
What you could do is use the Bulk Loader to modify a user attribute that then triggers a PX or Identity policy in IM to add or remove the role (or group) based on that attribute modification.

Bulk Loader cannot remove an existing Role or Group, to achieve the results of removing a Role or group, the bulk load will have to modify an attribute that triggers a Task within IDM which calls a TASK to remove the Rrole from the users.