Retrieving provisioning role owners in Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article clarifies the functionality of Policy Xpress (PX) Policies regarding the retrieval of provisioning role ownership values. Due to current architectural limitations, PX Policies cannot directly query or return provisioning role owners.

Environment

Identity Manager 14.5

Cause

PX Policies are designed to handle member-level role operations and do not include built-in elements to query owner-level attributes for provisioning roles. Furthermore, while PX Policies can invoke external Java code, they are restricted from returning data values to the PX framework.

Resolution

To retrieve provisioning role owner information, implement one of the following development approaches:

1. Custom Java Development: Utilize the Identity Manager Programming Guide for Java to implement a Business Logic Task Handler (BLTH) or an Event Listener.
2. API Usage: Use the getOwners method available in the ProvisioningRole interface (inherited from the Role interface).
3. Product Enhancement: If standard programmatic solutions do not meet your business requirements, submit a feature enhancement request through the Broadcom Community portal: Broadcom Ideation.

Additional Information

Note: Review the Identity Manager Programming Guide for Java for detailed implementation guidance on these alternative methods.

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.