How to import users in EEM using command line?

Products

• CA IT Asset Manager
• CA Software Asset Manager (CA SAM)
• ASSET PORTFOLIO MGMT- SERVER
• SUPPORT AUTOMATION- SERVER
• CA Service Desk Manager - Unified Self Service
• KNOWLEDGE TOOLS
• CA Service Management - Asset Portfolio Management
• CA Service Management - Service Desk Manager

Issue/Introduction

How to import users in EEM using command line?

Environment

Release:
Component: ARGIS

Embedded Entitlements Manager 8.4

Resolution

Login to the EEM web interface at https://localhost:5250/spin/eiam/eiam.csp. 
Be sure to login with the Service Desk application instance which by default is ServiceDesk-<machine name>. 
Login using the ServiceDesk userid and password that was set during configuration.

Go to Manage Identities Tab and create a sample user

Name: Test User
First Name: Test
Last Name: User

Add the desired Group Membership that you want to set as default for all the users that you are going to populate.

Set the Password and save the contact.

Go to Configure Tab -> EEM Server -> Export Application

Select the below from the Export Application windows and click the export button to

Global Users

Global User Groups

Global Folders

Users

User Groups

Folders

A file name with ServiceDesk[1].xml.gz extension would be saved. You can use Winzip to extract the .xml file.

Open the ServiceDesk[1].xml in any text editor.

Search for below lines

<GlobalUser folder="/" name="Test User"><UserName>Test User</UserName><PasswordDigest>9ce84f3e{MD5}uUo9dH0Vb6AJCEGwDC+KJQ==</PasswordDigest><DirectoryPasswordDigest>{SHA}wLE3/i15JFnyb/djzORFdKW1qwM=</DirectoryPasswordDigest><PasswordChangeDate>1271379036</PasswordChangeDate><FirstName>Test</FirstName><LastName>User</LastName></GlobalUser>

To add the user "New User" copy the tags from <GlobalUser folder="/" name="Test User"> to </GlobalUser> just below the above lines and replace them as below

<GlobalUser folder="/" name="New User"><UserName>New User</UserName><PasswordDigest>9ce84f3e{MD5}uUo9dH0Vb6AJCEGwDC+KJQ==</PasswordDigest><DirectoryPasswordDigest>{SHA}wLE3/i15JFnyb/djzORFdKW1qwM=</DirectoryPasswordDigest><PasswordChangeDate>1271379036</PasswordChangeDate><FirstName>New</FirstName><LastName>User</LastName>

Do not change the PasswordDigest / DirectoryPasswordDigest / PasswordChangeDate tags

Search for below lines

<User folder="/" name="Test User"><GroupMembership>Workflow Administrators</GroupMembership><GroupMembership>Workflow Process Initiators</GroupMembership></User>

To add the persmissions for "New User" copy the tags from <User folder="/" name="Test User"> to </User> just below the above lines and replace them as below

<User folder="/" name="New User"><GroupMembership>Workflow Administrators</GroupMembership><GroupMembership>Workflow Process Initiators</GroupMembership></User>

Save the .xml file

Browse to Program Files\CA\SharedComponents\iTechnology> directory from the command prompt

Run the below command to populate the new user

safex -u ServiceDesk -p <<password>>  -f  <<xml filename>>

The new user will now be added and the password would be similar to default to the one that was created for the Test User

Note: This is just a workaround suggested and we would recommend you to fully test it on a test environment before doing on the production. 
The CA recommended method to populate users is to either manually create it using the interface or integrate EEM with LDAP.