ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Export IME Role&Task xml does not respond

book

Article ID: 226561

calendar_today

Updated On:

Products

CA Identity Manager

Issue/Introduction

After the fresh installation of IDM 14.4 environment, we imported role&task xml from old previous environment.

 

We are unable to export role&task xml from Management Console. Tried from 2 to 3 different browsers but the screen just hangs and does not continue with anything.

 

Cause

The log indicates that the export is not able to find an attribute named policyHandles:

[9/17/21 13:26:00:663 EDT] 0000015e SystemOut     O 13:26:00,663 DEBUG [ims.idmmanage] AttributeNotPresentException: This method requires the presence of an attribute which was not provided. The attribute is named policyHandles.

The root cause is that there is one or more Provisioning roles with an asterisk in the role name, like Prov*Role1, for example.

 

Environment

Release : 14.4

Component : IdentityMinder(Identity Manager)

Resolution

Engineering advises that as of 14.3, there is no longer support for asterisks in a provisioning role name because it causes performance problems. I'll create a tech doc with this info so we can reference it going forward. 

This is a known problem. IM does not allow to use of * in a provisioning role name as there is a performance problem.  From IM 14.3 onwards * is not supported/allowed character for a provisioning role.

 

You cannot delete this role (Prov*TestPolicy) from the IM UI, Please use IM Provisioning manager to delete this role.