How to create Provisioning Roles massively

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article describes how to create Provisioning Roles massively using XML file

Environment

Identity Manager 14.x

Resolution

To create Provisioning Roles massively we recommend creating using an XML file and importing it using the Identity Manager Admin Console.

We do not recommend using the etautil command since it's not possible to set the Administrator and Owner.

Below is an XML sample, you can create your own Provisioning Role from Identity Manager UI and search for it in the "Roles Definitions.xml" file

 

 

<?xml version="1.0" encoding="UTF-8"?>

<ims:ImsTemplate xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://imsenvironmentobjects/xsd imsconfig://schema/ImsEnvironmentObjects.xsd" xmlns:ims="http://imsenvironmentobjects/xsd" xmlns:imsrule="http://imsmemberrule/xsd" xmlns:imsscope="http://imsscoperule/xsd" xmlns:imschange="http://imschangeaction/xsd">

    
    <ImsRole name="Test ProvRole 01" roletype="PROVISIONING" assignable="true" adminassignable="true" enabled="true" allowduplicatecustom="false">
        <AdminPolicy assignable="true" adminassignable="true">
            <imsrule:MemberRule><All/></imsrule:MemberRule>
            <imsscope:ScopeRule object="USER" purpose="*"><All/></imsscope:ScopeRule>
        </AdminPolicy>
        <OwnerPolicy>
            <imsrule:MemberRule><RoleMember><AdminRole name="System Manager"/></RoleMember></imsrule:MemberRule>
        </OwnerPolicy>
    </ImsRole>

</ims:ImsTemplate>

 

Note: If you would like to set a default account template, create the Provisioning Role template in the Identity Manager UI with the default values, after that export the Role Definition XML file using the Identity Manager Admin Console. Home > Environments > "Your_Environment" > Roles and Task Settings option and click the Export button.

You can replace the code above, in bold, with the Provisioning Role you copied from your XML file.