How to perform a "Reset Provisioning Role owner" task in mass.
search cancel

How to perform a "Reset Provisioning Role owner" task in mass.

book

Article ID: 31685

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance

Issue/Introduction

You need to perform a "Reset Provisioning Role owner" task in mass.
By instance you have a consequent volume of Provisioning roles that comes from IM Provisioning and you would like to know if there is an easy way to do this bulk task because one by one is not possible to do here.

 

Environment

Identity Manager 14.4

Resolution

This is an alternative way to TEWS if you do not want to code in java.

You can build an XML file that can be consumed by a "Role and Task Settings" import process (Management Console).

In this XML file you will have as many "ImsRole" blocks as you have provisioning roles.
And for each of them you write an "OwnerPolicy" block with the member rule.

Note: Assuming that the owner policy is the same for these roles then you will just have to build this input file with a custom script, program based on your list of provisioning roles to reset in IM.

e.g.:
<?xml version="1.0" encoding="UTF-8"?><ims:ImsTemplate xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://imsenvironmentobjects/xsd imsconfig://schema/ImsEnvironmentObjects.xsd" xmlns:ims="http://imsenvironmentobjects/xsd" xmlns:imsrule="http://imsmemberrule/xsd" xmlns:imsscope="http://imsscoperule/xsd" xmlns:imschange="http://imschangeaction/xsd">

<ImsRole name="role00001" roletype="PROVISIONING" assignable="true" adminassignable="true" enabled="true">
  <OwnerPolicy>
    <imsrule:MemberRule><AttributeExpression attribute="%USER_ID%" comparator="EQUALS" value="superadmin"/>
    </imsrule:MemberRule>
  </OwnerPolicy>
</ImsRole>

...

<ImsRole name="rolennnnn" roletype="PROVISIONING" assignable="true" adminassignable="true" enabled="true">
  <OwnerPolicy>
    <imsrule:MemberRule><AttributeExpression attribute="%USER_ID%" comparator="EQUALS" value="superadmin"/>
    </imsrule:MemberRule>
  </OwnerPolicy>
</ImsRole>

</ims:ImsTemplate>