Assigning a Role to each user without having to open the properties tab for each of them

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This document describes how to use the Batch Utility or the built-in wizard in the Identity Manager to add roles to multiple Global Users.

Environment

All versions of Identity Suite (Identity Manager)

Resolution

There are two methods that can be used to update all Global Users with specific Roles.

1. Using the etautil command utility

   For example:

   etautil -d youretrustDomain -u etaadmin -p yourpassword masschange 'eTGlobalUserContainerName=Global 
   Users,eTNamespaceName=CommonObjects' eTGlobalUser eTGlobalUserName=* to 
   +eTRoleDN="eTRoleName=YourRole,eTRoleContainerName=Roles,eTNamespaceName=CommonObjects,dc=youreTrustDomain"

   NOTE: Substitute the '*' with a specific user, i.e. eTGlobalUserName=user1)

2. Using the built-in wizard in the Identity Manager to "Change Role's Users".
   There are also a number of other options under the Roles wizard.
   You may decide to use different options depending on your planned configuration.