Quantcast
Channel: Software Communities : Popular Discussions - Dell One Identity Manager
Viewing all 845 articles
Browse latest View live
↧

Template updating from person Manager to ADS_Accountmanager fails during data import

December 23, 2013, 1:01 am
$
0
0

Hi,

 

I have a problem with data import and updating updated person's Manager value to Ads Account Manager field-

 

Data import changing Manager value for Managed employees gives an error stating that:

 

Active Directory user accounts: Viewing permission denied for value "Container".

 

The template looks like this:

 

 

Dim f as ISqlFormatter=connection.SqlFormatter

SelectCase ($ManageLevel:Int$)

      Case0:'Unmanaged (do not get data from employee)

      Case1:'Managed (fill all possible fields about employee)

                  Value = connection.GetSingleProperty("ADSAccount", "UID_ADSAccount", f.Comparison("UID_Person", $FK(UID_Person).UID_PersonHead$, valtype.string)) 

      CaseElse:'Unspecified manage level

            ThrowNew ViException(#LD("Non specified manage level: {0}", $ManageLevel:Int$)#)

EndSelect

 

This works if template is fired manually.

 

What am I doing wrong:)

 

Best Regards:

Miska

↧
Search

Rebuild table index (CommonReindexTable) takes a very long time ...

December 24, 2013, 4:35 am
$
0
0

Hi All,

 

the problem is that all other processes must wait, until rebuild table index ist finished !!!

can someone help me to analyse the problem, why does rebuild table index takes so much time?

why is rebuild table index needed every day?

is there a way to start rebuild table index manually for testing?

 

2.jpg

 

after 3 min

 

1.jpg

 

3.jpg

 

4.jpg

 

5.jpg

 

7.jpg

↧
↧

Manage Level Bulk Update.

December 18, 2013, 9:41 pm
$
0
0

Hi ,

 

I was doing a bulk update to managelevel  for Adsaccount in Q1IM using Quick connect but it is changing the managelevel attribute and changes which should happen automaticall  for other attributes are not changing

 

eg: when i Change managelevel to '1', Addres should flow from person record to AD Account

 

 

It is changin when i do modify single adsaccount record manually, but when i use quick connect to update its not happening

 

So is there a way to change the manage level for bulk records, for which attributes from person to AD record should flow.

 

 

Thanks,

 

Pradeep Pola

↧

Workflow - Custom approval procedure?

December 20, 2013, 6:06 am
$
0
0

Hi all,

 

 

I would like to know if it is possible to customize or to create an approval procedure for workflows?

Or may be is there any way to call a VB script from the workflow step  instead of using SQL commands (in CD/CP procedures)?

 

 

 

Regards,

Anton

↧

Extract system role assignments

October 21, 2013, 7:38 am
$
0
0

Hello,

 

I would like to extract from Q1IM database all system role assignments from any origin.

  • Directly assigned (from manager) system roles ;
  • Inherited system roles (from a business role or another system role) ;
  • Requested and assigned throught ITShop.

 

In which table(s) can I find these information.

 

Thank you.

Regards,

Serge

↧
↧

Request for secondary department membership

December 27, 2013, 1:47 am
$
0
0

Hi all,

 

I know this is possible to add a secondary department membership through the Department management page (see below)

2013-12-27 09_54_28-Web Designer - sorluc@q1im@srv-oracle-dev (Main Database).png

 

But I would like to add a Service Catalog to allow end users to request for secondary department membership.

I can see one easy solution but with too much maintenance operation :

1- crete a Service catalog : Organizational Unit,

2- Create an item for each Department

3- Create a ressource for each Department

2013-12-27 09_56_52-Web Designer - sorluc@q1im@srv-oracle-dev (Main Database).png

=> each time a reog is performed I have to recreate all these objects.

 

I think there is a better way to do this using the built in item and ressource. On this point I'm stuck

 

See below What I've done :

1- Create an IT Shop UO

2- Create customers : allow anybody

3- Create a shelf and add the The two build in products : business role entitlement assignment and Business role membership

2013-12-27 10_28_34-Manager - sorluc@q1im@srv-oracle-dev (Main Database).png

But now I'm stuck and I don't know how can I specify that these business role request can only be done on department secondary membership.

 

Do you know where can I specify that these requests are only for secondary department requests ?

 

Thanks for your help and happy new year

↧

Low performances on workflows

December 26, 2013, 7:34 am
$
0
0

Hi all,

 

I noticed that even a simple workflows  takes too much time. For exemple in my Profil assignment workflow containing 6 levels the processing can take several minutes (5-10 min).

So my question is, it is normal?

Or may be someone knows which optimizations could be done?

 

Regards,

Anton

↧

Extract system role assignments

October 21, 2013, 7:38 am
$
0
0

Hello,

 

I would like to extract from Q1IM database all system role assignments from any origin.

  • Directly assigned (from manager) system roles ;
  • Inherited system roles (from a business role or another system role) ;
  • Requested and assigned throught ITShop.

 

In which table(s) can I find these information.

 

Thank you.

Regards,

Serge

↧
Search

Template updating from person Manager to ADS_Accountmanager fails during data import

December 23, 2013, 1:01 am
$
0
0

Hi,

 

I have a problem with data import and updating updated person's Manager value to Ads Account Manager field-

 

Data import changing Manager value for Managed employees gives an error stating that:

 

Active Directory user accounts: Viewing permission denied for value "Container".

 

The template looks like this:

 

 

Dim f as ISqlFormatter=connection.SqlFormatter

SelectCase ($ManageLevel:Int$)

      Case0:'Unmanaged (do not get data from employee)

      Case1:'Managed (fill all possible fields about employee)

                  Value = connection.GetSingleProperty("ADSAccount", "UID_ADSAccount", f.Comparison("UID_Person", $FK(UID_Person).UID_PersonHead$, valtype.string)) 

      CaseElse:'Unspecified manage level

            ThrowNew ViException(#LD("Non specified manage level: {0}", $ManageLevel:Int$)#)

EndSelect

 

This works if template is fired manually.

 

What am I doing wrong:)

 

Best Regards:

Miska

↧
↧

E-Mail Information for Open Attestations

January 3, 2014, 5:40 am
$
0
0

Hi,

we want to use the attestation feature for the annual entitlement review process. As far as I know I could use the mail template in the attestation approval workflow to inform the responsible person that he/she has something to do. But then the person will get several (perhaps hundreds) of e-mails (for every attestation case one email), because he is the line manager for many employees or his people have many applications/entitlements ... this behavior will not be accepted by the business.

Is there any standard functionality that if someone has one (or more) open attestation cases, he will get only one general information e-mail? The same information e-mail is required if one or more attestation cases are overdue or 10 days before.

 

Or is a special development necessary? and how could this looks like ?

 

Any help is appreciated.

 

Thanks

 

Wolfgang

↧

Deleting Pending Attestations

September 16, 2013, 10:15 am
$
0
0

We have a bunch of pending attestations in place that we would like to delete out.  We are currently in pilot, and are not ready for attestations to process, however they were triggered inadvertenly and users are receiving reminder emails.

 

What is the best way to delete these pending attestations?

↧

Starting Kit for Quest IDM

January 3, 2014, 3:00 am
$
0
0

Hello,

 

I am new to Quest IDM and looking for pointers to helpful documentation that gives an overview of the IDM components and how they interact. I have all the product guides but the information in there is too much and very detailed. An overview of various IDM components would be great help!

 

Thanks,

Amit

↧

Deleting Attestation Cases

January 2, 2014, 12:44 pm
$
0
0

Hello,

 

We had a bunch of attestations inadvertently kick off at the beginning of the year, and we need to remove them.  We tried going into manager to delete them, however the delete option was not available.  How can we remove these?

 

 

Attestation Cases.png

↧
↧

Creating a Dynamic role.

January 2, 2014, 10:30 pm
$
0
0

Hi All,

 

I'm tring to create a dynamic role for a sample role that I've created (I've named the sample role as 'B1')

However, while tring to add an 'object class' , for eg:'Employee', I'm unable to view any dropdown option. Instead it says "No shared object classes". (Kindly have a look at the snapshot)

 

I'm actually new to this tool; I might have missed a trivial point somewhere. I request someone to please guide me here

Thanks!

↧

QIM AD Synchronization Issues - Unable to load target schema

January 2, 2014, 4:35 am
$
0
0

I followed the Section, Setting Up Active Directory Synchronization in IdentityManagement guide to configure Synchronization with Active Directory. While loading target system schema I received a message - The process to load schema has been started. On clicking okay and going ahead with loading the mapping rule, it throws the following error -

 

 

[810222] Error executing script 'Domain_ADS_ADS_ReadMapping'.

 

at VI.DialogEngine.DialogEngine.ExecuteTask(Task task)

at VI.MVC.SingleDBObjectDocument.<>c__DisplayClass4.<OnUpdateActions>b__1()

at VI.DB.DialogMethod.Run(ISingleDbObject baseObject)

at VI.DB.Scripting.ScriptInstance.Run(String key, Object[] parameters)

at VI.DB.Scripting.ScriptInstance.Eval(String key, Object[] parameters)

 

[0] An error occurred generating the process for loading mapping rule.

 

On going ahead with Synchronization configuration, it throws the following error -

 

 

[1006005] Target system schema could not loaded

at VI.AE.Forms.Common.FrmSyncConfigEditor._Load()

[1006018] The target system schema is missing! The synchronization configuration cannot be processed.

 

Attached file has the screenshots for reference.Has anyone faced this issue and got it resolved?

 

 

Thanks,

Priya

 

↧
Search

AD domain with purposely disabled accounts - need to stay disabled

November 21, 2013, 8:01 am
$
0
0

Hello everyone,

 

I just want to confirm how to handle assigning accounts to employees that are purposely disabled. If they are disabled, I would need for them to stay disabled upon assignment. I put the case statement together for this:

 

IfNotCBool(Variables("FULLSYNC")) Then

      SelectCase($ManageLevel:Int$)

      Case3: 'XYZ Domain

      'If already disabled, leave disabled

      If$AccountDisabled:Bool$ AndAlso $AccountDisabled[o]:Bool$Then

            Value = True

      Else

            Value = False

      EndIf


I just want to confirm whether or not this is correct. Last time, accounts that were assigned to employees became enabled...and I would like to prevent this from happening in the live environment. Thank you!

 

Kenny

↧

Error: Processor (#####) terminated unexpected

December 30, 2013, 1:06 pm
$
0
0

Hi All,

 

Has anyone ever come across this error message before when a script is being executed:

 

2013-12-30 09:05:58 -05:00 - VI.JobService.JobComponents.ScriptComponent - eed7664a-2875-4ada-bc42-e6d84b828d00: 
Errors occured Processor (11768) terminated unexpected.

 

How can I trace the reason for this showing up?

 

-Febin

↧
↧

Submitting a new Service Request is not possible

January 6, 2014, 5:27 am
$
0
0

Hi,

 

by submitting a new service request I get a pop-up with an 'OK'-Button and nothing else. Has anybody the same problem?

 

Regards,

Matthias

↧

Sourcing Employee Records From Flat File

January 6, 2014, 2:03 am
$
0
0

Hello,

 

I am completely new to Q1IDM and looking for options to integrate a flatfile feed with employee records into Q1IDM. This file will be the source of record for employees going forward (there will be one file uploaded on a daily basis that has to be processed by Q1IDM).

 

Post looking at the documentation, and my understanding of it :-) .... I think I have to use Quick connect to perform this integration. I am looking for further guidance on a) If this approach is what I need to take and b) Any documentation that could help write the components.

 

 

Regards,

Amit

↧

Active Directory Synchronization

January 7, 2014, 4:33 am
$
0
0

Hi Team,

 

I have configured active directory synchronization in D1IM and imported all the user accounts from AD to D1IM.. I see an option in the manager tool to manually link the AD accounts to the Q1IM employee records, and I could successfully link the accounts manually. However I am looking for an automated script to perform the linking. Has anyone come across the script?

 

Thanks,

Priya

↧
Viewing all 845 articles
Browse latest View live
Search