Refresh Admin Role membership cache
search cancel

Refresh Admin Role membership cache


Article ID: 41279


Updated On:


CA Identity Manager CA Identity Suite


In our IM environment, the Admin Role is associated with User's group membership, sometimes we assign Admin Role to an IM user by directly modifying the associated group membership in the user store.
However, as IM is caching the Admin Role membership, it's unable to be aware of the change made by a third party tool directly in the user store.
Hence how do we let IM to refresh the Admin Role cache and reflect the User's Admin Role membership correctly?


Release: CA Identity Manager


As Modify Admin Role task can refresh the role membership cache. Hence we can use Modify Admin Role task to modify the involved Admin Role, and submit the task without making any change, then IM server will refresh the role membership cache and reflects the user's Admin Role correctly.

In order to let these happen automatically, we can create a Bulk Task to trigger the Modify Admin Role task automatically.

The following are the details of the change:

  1. Bring up Modify Admin Task, modify "Create Bulk Task Definition" task.
    • On Modify Admin Task: Create Bulk Task Definition, Switch to Tabs tab
    • Click the pencil icon next to Profile: BulkTaskProfile

    • On Configure Profile, Select the following on Object Types:
      - Admin Role


    • Submit the changes

  2. Create Bulk Task Definition, for example:

    • Name: Trigger Modify Admin Role Task
    • Object Type:  Admin Role

    • On Population tab, adjust Object Filter accordingly.
      Note: Please form up a different Filter other than "(all)" if there are only a few Admin Roles in your concern.


    • Submit the changes

  3. Execute Bulk Task
    • Bring up Execute Bulk Task, select "Schedule new job" on Task Recurrence, for example
      - Job Name: Refresh Admin Role Cache
      - Daily schedule
      - Every 1 Day
      - Execution Time: 00:00

    • On Bulk Task Execution, select Bulk Task Definition: Trigger Modify Admin Role Task

    • Submit all the changes

  After these changes, the IM server will refresh the Admin Role membership cache at every 0:00 am.


1558721923683000041279_sktwi1f5rjvs16w9u.png get_app
1558721919893000041279_sktwi1f5rjvs16w9t.png get_app
1558721918192000041279_sktwi1f5rjvs16w9s.png get_app
1558721916202000041279_sktwi1f5rjvs16w9r.png get_app
1558721914293000041279_sktwi1f5rjvs16w9q.png get_app
1558721912232000041279_sktwi1f5rjvs16w9p.png get_app