Symantec Identity Management

Expand all | Collapse all

How to keep the   users provisioning role history?

Jump to Best Answer
  • 1.  How to keep the   users provisioning role history?

    Posted 06-25-2017 11:24 PM

    Customer want to keep the  provisioning role history  of users in case for generate the report.
    e.g once, users move to the new department then IDM should clear the old provisioning role and
    assign the new role of new department to them.
    How to design the PX in IDM to keep the history of the old provisoing role for generate the report?

     

    Thank you,

    Ann



  • 2.  Re: How to keep the   users provisioning role history?
    Best Answer

    Posted 06-26-2017 10:05 AM

    Hi Ann,

     

    If you like only to save the last roles the users had. Meaning the user was in marking and his provisioning roles was a,b and c and now the user is in IT and his provisioning roles are c, d and e you can do this:

    1. Create a new attribute to store this information in the user store

    2. Create a PX that run on AccumulatedProvisioningRolesEvent (Or on Add/RmoveProvisioningRolesEvent) and collect all the cornet provisioning roles and concatenate it to one string with a delimiter (may be ^) and save it to the attribute you created

    3. Change the provisioning roles for the user

     

    Please note: if you dont like it to run on every change of provisioning roles set the PX to run on on tasks that you like. for example the user is missing one provisioning role and IT will fix him and you dont like to save change do not run the PX on event base but run it on task base.

     

    I hope this is help you.

    Thanks,

    Eliran



  • 3.  Re: How to keep the   users provisioning role history?

    Posted 07-19-2017 11:13 PM

    Thank you. I will try to do this in the test environment first.

    Ann.