ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Remove admin roles using Bulk Loader

book

Article ID: 111765

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal

Issue/Introduction



We would like to know how to remove the admin roles using bulk loader of users.
Example: Several users have 4 admin roles and we need to remove only 1 admin role, keeping other 3 admin roles.

Can this be accomplished with the Bulk Loader?

Environment

Release:
Component: IDMGR

Resolution

The Bulk Loader requests only support modification of attributes on the IM admin task's Profile tab, meaning you can't add or remove Provisioning Roles (or groups) in bulk directly using the Bulk Loader.
What you could do is use the Bulk Loader to modify a user attribute that then triggers a PX or Identity policy in IM to add or remove the admin role (or group) based on that attribute modification.

Bulk Loader cannot remove an existing Admin role or Group, to achieve the results of removing an admin role or group the bulk load will have to modify an attribute that triggers a Task within IDM which calls a TASK to remove the Admin role from the users.