Service Virtualization

 View Only
  • 1.  Not able to see few roles in DB and ACL

    Posted Jun 29, 2022 01:35 AM
    I am working on custom sql script to fetch user and roles and activities assigned .
    What i noticed is roels like IAM adminsitrator and Enterprise dahsbaord administartor are not avaiable in DB and niether in ACL .
    So those are not coming up when i use sql script.
    However i have assigned the IAM adminsitrator role to one of AD group from LDAP .
    How can i get those roles or why are not that visisble at backend and frontend .
    Devtest 10.7.2
    DB: MSSQL server


  • 2.  RE: Not able to see few roles in DB and ACL
    Best Answer

    Broadcom Employee
    Posted Jun 29, 2022 02:54 AM
    Hi Rahul
    Your observation has been spot on. We dont persist ED/IAM roles in ACL
    DB. Those roles are assigned to users/groups from IAM itself.

    --
    regards
    Sankar Natarajan

    --
    This electronic communication and the information and any files transmitted
    with it, or attached to it, are confidential and are intended solely for
    the use of the individual or entity to whom it is addressed and may contain
    information that is confidential, legally privileged, protected by privacy
    laws, or otherwise restricted from disclosure to anyone else. If you are
    not the intended recipient or the person responsible for delivering the
    e-mail to the intended recipient, you are hereby notified that any use,
    copying, distributing, dissemination, forwarding, printing, or copying of
    this e-mail is strictly prohibited. If you received this e-mail in error,
    please return the e-mail to the sender, delete it from your computer, and
    destroy any printed copy of it.




  • 3.  RE: Not able to see few roles in DB and ACL

    Posted Jun 29, 2022 03:15 AM
    That's strange ! so there is no way to get those from DB . Need to hardcode  them manually in script .


  • 4.  RE: Not able to see few roles in DB and ACL

    Broadcom Employee
    Posted Jun 29, 2022 03:25 AM
    Hi Rahul,

    The way to get to that data is via an IAM API call (the same way that
    DevTest registry gets the information).
    If your custom sql script is embedded in a linux or dos script you could do
    those IAM API calls first to get the data instead of hard coding.

    Cheers,

    Danny Saro

    Client Services Consultant

    Broadcom Software


    -------------------------------------------------

    --
    This electronic communication and the information and any files transmitted
    with it, or attached to it, are confidential and are intended solely for
    the use of the individual or entity to whom it is addressed and may contain
    information that is confidential, legally privileged, protected by privacy
    laws, or otherwise restricted from disclosure to anyone else. If you are
    not the intended recipient or the person responsible for delivering the
    e-mail to the intended recipient, you are hereby notified that any use,
    copying, distributing, dissemination, forwarding, printing, or copying of
    this e-mail is strictly prohibited. If you received this e-mail in error,
    please return the e-mail to the sender, delete it from your computer, and
    destroy any printed copy of it.