Symantec IGA

 View Only
  • 1.  Unable to create a bulk task in CA Identity Manager

    Posted Mar 15, 2018 11:24 PM

    Hi All,

     

    We are trying to create a bulk task to assign a provisioning role to all users in CA Identity Manager. We are not able to find the bulk Tasks under System in IM user console so is there anything which we need to do to make the tasks visible.

     

    When verified in the Admin Tasks sessions able to see the Bulk Task visible but unable to see it under System to create a new bulk task.Any help will be appreciated.

     

    Thanks,

    Rajesh



  • 2.  Re: Unable to create a bulk task in CA Identity Manager
    Best Answer

    Broadcom Employee
    Posted Mar 16, 2018 10:26 AM

    Hi Rajesh,

     

    Is your "Bulk Task Manager" admin role enabled?
    If you export your <ime>-RoleDefinitions.xml from the Management Console and look at
    the <ImsRole name="Bulk Task Manager" roletype="ADMIN" ... > line;
    you should have enabled="true".
    Else change it to true then re-import the <ime>-RoleDefinitions.xml.

     

    Check the Member Policies of this "Bulk Task Manager" Admin Role.
    E.g. of Member Rules:
       who are members of ( admin role "System Manager" )
       where ( Admin roles = "Bulk Task Manager" )
    Check your ID deals with one of the member rules.
    Also check the "Scope Rules" of those member rules include "Bulk Task Definition" for (all).

     

    Regards,

    Philippe.



  • 3.  Re: Unable to create a bulk task in CA Identity Manager

    Broadcom Employee
    Posted Mar 16, 2018 10:31 AM

    Hi Rajesh, 

     

    You cannot assign Provisioning Roles to users via a bulk task. With a bulk task you can modify a specific attribute of selected user population and based on the values of this attribute trigger identity policies that assign roles. If this is a one time mass modify activity only, you can do the other way around, select a provisioning role and then add multiple members. Regardless, not being able to view bulk tasks is another matter and below please find my suggestions:

     

    1. When you take a look at Create Bulk Task Definition from Admin Tasks, which Admin Role is allowed to use this task? For example, the default Admin role allowed to use this task is Bulk Task Manager as shown below. 

     

     

    Are you logging on with a user that has access to this Admin Role? This is the membership policy for my Bulk Task Manager Admin Role:

     

     

    If not you need to specifically add bulk tasks to your user's Admin Roles.

     

    2. What's the category of the bulk tasks? default is System but if somehow this was changed it may not appear under System but elsewhere:

     

     

    KR
    Russi