Example For Using TEWS To Modify Admin Role Membership Rule

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

Providing an example of a soap TEWS request showing how it could be used for adding and/or removing a membership policy in an Admin Role.

Environment

All Identity Manager

Resolution

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsdl="http://tews6/wsdl">

   <soapenv:Header/>

   <soapenv:Body>

      <wsdl:TaskContext>

         <wsdl:admin_id>USER</wsdl:admin_id>

         <wsdl:admin_password>PASSWORD</wsdl:admin_password>

      </wsdl:TaskContext>

      <wsdl:ModifyAdminRole>

         <wsdl:ModifyAdminRoleSearch>

            <wsdl:Subject index="?">

               <wsdl:UniqueName>TestAdminRole</wsdl:UniqueName>

            </wsdl:Subject>

         </wsdl:ModifyAdminRoleSearch>

         <wsdl:ModifyAdminRoleMembersTab>

            <wsdl:Policy>

  <wsdl:remove index="?">

                  <AccessTask>&lt;ScopeRule object="ACCESS TASK" purpose="*">&lt;All/>&lt;/ScopeRule></AccessTask>

                  <Group>&lt;ScopeRule object="GROUP" purpose="*">&lt;All/>&lt;/ScopeRule></Group>

                  <Member>&lt;MemberRule>&lt;AttributeExpression attribute="%USER_ID%" comparator="EQUALS" value="testuser1"/>&lt;Or/>&lt;AttributeExpression attribute="%USER_ID%" comparator="EQUALS" value="testuser2"/>&lt;/MemberRule></Member>

                  <Org>&lt;ScopeRule object="ORGANIZATION" purpose="*">&lt;All/>&lt;/ScopeRule></Org>

                  <User>&lt;ScopeRule object="USER" purpose="*">&lt;All/>&lt;/ScopeRule></User>

               </wsdl:remove> 

  <wsdl:add index="?">

                  <AccessTask>&lt;ScopeRule object="ACCESS TASK" purpose="*">&lt;All/>&lt;/ScopeRule></AccessTask>

                  <Group>&lt;ScopeRule object="GROUP" purpose="*">&lt;All/>&lt;/ScopeRule></Group>

                  <Member>&lt;MemberRule>&lt;AttributeExpression attribute="%USER_ID%" comparator="EQUALS" value="testuser1"/>&lt;Or/>&lt;AttributeExpression attribute="%USER_ID%" comparator="EQUALS" value="testuser3"/>&lt;/MemberRule></Member>

                  <Org>&lt;ScopeRule object="ORGANIZATION" purpose="*">&lt;All/>&lt;/ScopeRule></Org>

                  <User>&lt;ScopeRule object="USER" purpose="*">&lt;All/>&lt;/ScopeRule></User>

               </wsdl:add>

            </wsdl:Policy>

         </wsdl:ModifyAdminRoleMembersTab>

      </wsdl:ModifyAdminRole>

   </soapenv:Body>

</soapenv:Envelope>