We have 2000+ users. Is there a command line utility or a way to assign a Role to each of these users without having to open the properties tab for each of them?

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This document describes how to use the Batch Utility or the built-in wizard in eTrust Admin Manager to add roles to multiple Global Users.

Environment

All versions of Identity Suite (Identity Manager)

Resolution

There are two methods that can be used to update all Global Users with specific Roles.

Method # 1:
Using the etautil command utility

For example:

etautil -d youretrustDomain -u etaadmin -p yourpassword masschange 'eTGlobalUserContainerName=Global 
Users,eTNamespaceName=CommonObjects' eTGlobalUser eTGlobalUserName=* to 
+eTRoleDN="eTRoleName=YourRole,eTRoleContainerName=Roles,eTNamespaceName=CommonObjects,dc=youreTrustDomain"

NOTE: Substitute the '*' with a specific user, i.e. eTGlobalUserName=user1)

Method # 2:
Using the built-in wizard in eTrust Admin Manager to "Change Role's Users".
There are also a number of other options under the Roles wizard.
You may decide to use different options depending on your planned configuration.