Change user and resource externalID and ID

[Pier Olivier Tremblay]

Hey guys,

 

Imagine a PPM instance where users and resource are synced on CA Identity Manager with a custom script.

 

Users and resources are written to PPM using XOG write action on both user and resource object.

 

I am using CA Identity Manager unique identifier (uid) and the company is moving away from CAIM.

 

I plan to use AD's objectGUID as a unique identifier and I'm wondering how I should make the switch.

 

Below is a fraction of both user and resource write action to show you in wich attribute i'm using CAIM uid.

 

 

 

action: Write

objectType: User

 xml fragement :

<User externalId=uid

<Resource resourceId=uid

 

 

action: write

objectType: resource 

xml fragement :

<Resource resourceId=uid

<Resource externalId=uid

 

 

On DB side,

in SRM_RESOURCES, uid appears in these columns : UNIQUE_NAME and EXTERNAL_ID.

in CMN_SEC_USERS, uid appears in this column : EXTERNAL_ID

 

 

If the database is well designed, it shouldn't use any user defined values as primary and foreign key so my guess is that  I can safely change those value directly in the database and start using the new one with XOG.

 

Does anybody can state otherwise or comfort me in my approach?

 

Thanks

[Deactivated User]

Are your resources financially enabled? If they are you cannot change resource ID as it appears in the user properties.

That is the SRM_RESOURCES UNIQUE_NAME in the database and resourceID in the XML files for the resources and users.

Further in XOGing there is a tie which connects the resource data to the user data in the database.If you try to change it like to use a resourceID and connect it to another user you get an error saying it is already associated with a user.

 

My understanding is that the externalID's are just for tracking you data transfers and they do not really matter.

 

Have you tested your plan with dummy users and resources? If not then do.

[Karl Shlayfman]

I agree with Martti, you definitely need to test your approach. On top of that as you might be aware direct database updates are not supported unless resolving specific issue with past approval from Engineering team. Also please see this KB as that could help answer some of your questions: Can I change Resource IDs? - CA Knowledge 

[Pier Olivier Tremblay]

Yeah i'm gonna test in sandbox.

 

Just wanted to validate if someone ever did it