Hi All,
the problem is that all other processes must wait, until rebuild table index ist finished !!!
can someone help me to analyse the problem, why does rebuild table index takes so much time?
is there a way to start rebuild table index manually for testing?
thank you and happy new year !
after 3 min
Hi All!
I wonder how to create request for multiple persons - I mean I'd like to select more than one employee on request form. Is it possible?
Best
M.P.
Hi All,
Has anyone ever come across this error message before when a script is being executed:
2013-12-30 09:05:58 -05:00 - VI.JobService.JobComponents.ScriptComponent - eed7664a-2875-4ada-bc42-e6d84b828d00:
Errors occured Processor (11768) terminated unexpected.
How can I trace the reason for this showing up?
-Febin
Hi Team,
I have configured a business role 'Provision Active Directory' and associated a dynamic role 'Person in Resource Access: Provision Active Directory' with a valid condition configured. I have also attached the dynamic role to the default schedule 'default schedule dynamic roles check' that I have configured to execute every 1 minute.
My requirement is - When a new user is created in D1IM, the dynamic role membership should be evaluated immediately and the user should be assigned the business role. However in my envrionment, I see that happening only when I start the DBScheduler manually. I have also set the parameter - QER\Structures\DynamicGroupCheck\CalculateImmediatelyPerson.
Could anyone point me to any configurations that I might be missing?
Thanks,
Priya
Hello,
I am new to Quest IDM and looking for pointers to helpful documentation that gives an overview of the IDM components and how they interact. I have all the product guides but the information in there is too much and very detailed. An overview of various IDM components would be great help!
Thanks,
Amit
Hi community.
When I execute ADS synchronization, I get a lot of erros "Objecttype: user Object: Property: _ExtensionAttribute1 Error: Not included in columns collection. ()" in log. Can someone plese explain me what exactly this error means?
Thanks a lot.
Regards,
Evgen
Hi all,
I would like to create my own authenticatio module to use a web Service to authenticate people on the Web Q1IM.
Do you know where can I find a sample or some documentational stuff like a quick start ?
thanks for your help,
regards,
Steph.
Hello,
When I login to the identity manager and I open a UNSAccountB I don't see the hyperview instead I am redirected to the Change master data. When I open an employee in the Identity Manager I do see the hyperview. How can make the hyper view of UNSAccountB available in the Identity Manager. As far as I can see the user has the correct permissions.
Thx
Hello,
I am trying to remove all business roles a person has assigned from a VB script. It runs but there are no errors and the records are still there. Nothing in the Job Queue pending. Here is my code, can anybody help out on what else I need?
'Query all business roles for Person
colImport = Connection.CreateCol("PersonInOrg")
colImport.Prototype.WhereClause = "UID_Person = '"+uidPerson+"'"
colImport.Load(CollectionLoadType.Slim)
'Remove each business role
For Each elem In colImport
Try
obj = elem.Create()
obj.Delete()
obj.Save()
If debug Then VID_Write2Log(logFile,String.Format("Business Role removed ok"))
Catch ArgumentException As Exception
VID_Write2Log(logFile,String.Format("Business Role removal for PersonInOrg failed: {0}",ArgumentException.ToString))
End Try
Next
Thanks in advance.
Hi All,
I have configured an attestation policy than on revoke the business role is removed/unsubscribed from the user, to bypass all the steps in the unsubscribe workflow I added at the beginning a query that checks if there is an attestation case that was denied/revoked for the combination of user and role, and with the UID_PersonWantsOrg in the same entry.
Is there another cleaner way to do it? Since the UID_PersonWantsOrg is inside the field ReportContent I prefer to change this approach, even if it's working at the moment.
Thanks
JM
Hi all,
Does anybody know if its possible to change the New user certification attestation policy to be able to use custom workflow instead of only "New user certifiation" approval polilcy? Thanks in advance!
Kenny
Hi All,
Do we have a separate connector inorder to integrate Q1IM with MS Exchange server? Please point me to the configuration details for the same.
Thanks,
Priya
Gurus,
How do you configure log rotation in ARPortal? In the WebDesigner.ConfigFileEditor.exe, I see the way to change the log file location. But, what is the way to configure log rotation settings (size, number etc).
We are seeing several files in the ARPortal\App_data\Logs directory of size 14KB. We would like to let the file fill up 10MB upto 10 files. How do we achieve that?
Thanks in advance.
Sundar
Is there a way to access the name of the workflow that ran on a request from the PersonWantsOrg of that request?
Our current Q1IM 6.1.1 implentation has Person contractor records that required an expiration date prior to our enabling of Employee/Manager attestation. As we have enabled the Attestation policy for this subset of users I would like to run a script or query to find all records that have gone through the Attestation policy and remove their expiration as we will know that the user has been certified by someone once they have successfully been attested to. I am unable to correlate the Person record to the AttestationCase table to discover which contractor records have had an attestation performed against them. Has anyone encountered a similar situation and devised a solution?
Another possibility is to take the DateHead value and use the DateAdd function to add the number of days until the next Attestation schedule begins and pipe that to the Account Expiration value via a template. As I have been unable to correlate the two datasets together, I have not been able to devise a solution for displaying the expiration value accurately.
Any help would be greatly appreciated.
Hello everyone,
I just want to confirm how to handle assigning accounts to employees that are purposely disabled. If they are disabled, I would need for them to stay disabled upon assignment. I put the case statement together for this:
IfNotCBool(Variables("FULLSYNC")) Then
SelectCase($ManageLevel:Int$)
Case3: 'XYZ Domain
'If already disabled, leave disabled
If$AccountDisabled:Bool$ AndAlso $AccountDisabled[o]:Bool$Then
Value = True
Else
Value = False
EndIf
I just want to confirm whether or not this is correct. Last time, accounts that were assigned to employees became enabled...and I would like to prevent this from happening in the live environment. Thank you!
Kenny
Hi all,
The customer told they occasionally have some temporary contractors be changed to permanent employees. For those whose Person records are the same except the PersonnelNumber (unique identifier and key). OOTB Q1IM checks the PersonnelNumber if it is unique then creating a new employee in Person therefore a duplicate employee record being created. I wonder if there is a way that Q1IM could capture the Temp being converted to Perm before inserting new data into Person table. For instance, it performs a pre-condition check to determine if there is an existing match in the Person.
Is there anything i could do in "Linde condition". Please advise. Your suggestions or insights would be very helpful and truly appreciate. I have seen more and more requests from the customer for this.
Hello,
I have below questions on password generation process in QIM;
a) Can someone provide details on the process of generation of password on QIM when a new user is created through a DataImporter Feed.
b) Do we have the concept of password policies to define the rules based on which passwords are generated/expire etc?
c) Also how can we attach password policies to different users so that passwords that are generated comply to specific password policy (can we do multiple password policies based on user type?).
Please point to relevant documentation that can be helpful.
Regards,
Amit
Hi All,
Do we have a separate connector inorder to integrate Q1IM with MS Exchange server? Please point me to the configuration details for the same.
Thanks,
Priya
Hello, we have employees with multiple linked and managed AD accounts attached to their IDM employee record (everyday account, elevated accounts, etc.). We have seen an issue when a user with multiple linked accounts request a distribution list or security group from the IT Shop, once approved by the owner the requested item is added to all linked AD accounts. Has anyone encountered this issue before and/or have any suggestions to create a way to select which linked AD account the user is requesting the group for.
Thanks,
Jim