Submitting TEWS SOAP Requests for Admin Role Members in Identity Manager 14.4

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

This article provides the structure for a Task Execution Web Service (TEWS) SOAP request used to retrieve members or administrators associated with a specific Identity Manager Admin Role. This method is useful for auditing and reporting purposes when the Identity Manager User Console cannot be used.

Environment

Identity Manager 14.5

Cause

This is an informational guide to assist administrators in automating the retrieval of Admin Role membership data via SOAP web services.

Resolution

1. Prepare the SOAP Envelope: Construct the SOAP request using the following structure. Replace ### with the name of the Admin Role you wish to query, and populate the IM_USER and IM_USER_PWD fields with valid administrative credentials.

2. Define the Request: Ensure the request targets the correct Identity Manager endpoint. The body should clearly define the role name:

   <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">   <soapenv:Header/>   <soapenv:Body>      <tews:ViewAdminRoleMembers xmlns:tews="http://tews.identitymanager.ca.com/">         <tews:AdminRoleName>###</tews:AdminRoleName>         <tews:Credentials>            <tews:AdminUser>IM_USER</tews:AdminUser>            <tews:AdminPassword>IM_USER_PWD</tews:AdminPassword>         </tews:Credentials>      </tews:ViewAdminRoleMembers>   </soapenv:Body></soapenv:Envelope>

3. Execute and Review: Submit the request to the Identity Manager TEWS endpoint. The response will return a list of users currently assigned to the specified Admin Role, provided the administrative credentials have sufficient permissions.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.