[midPoint] Editing Role Resource Inducement

dharmendra parakh dharm.parakh at gmail.com
Tue Nov 25 14:44:22 CET 2014


Hi

- How can we recompute the account?
- Yes, after changing the role newly members get correct groups.

Regards
Dharmendra



On Tue, Nov 25, 2014 at 7:01 PM, Pavol Mederly <pavol.mederly at gmail.com>
wrote:

>  Dharmendra,
>
> after changing the role, user accounts have to be recomputed for the
> change to be applied onto the resource.
>
> A quick check: if you create a new user and assign him this modified role,
> is the group membership OK for the newly created account?
>
> Best regards,
> Pavol
>
> On 25. 11. 2014 12:14, dharmendra parakh wrote:
>
> Hi
>
>  Thanks for the information, I didn't get chance to go through these
> documents but i will look into this for sure.
> What i understand is i can not modify the groups assigned as role
> inducement from GUI.
>
>  I tried changing the groups from xml but then this change is not
> enforced to member users account. I need it for my project for which i am
> evaluating midpoint, how can i do that?
>
>
>  Thanks
> Dharmendra
>
>
> On Sun, Nov 23, 2014 at 2:32 AM, Pavol Mederly <pavol.mederly at gmail.com>
> wrote:
>
>>  Dharmendra,
>>
>> thank you for the explanation.
>>
>> Currently, GUI allows only to change "regular" attributes of induced
>> accounts (directly when creating the inducement, or later when editing it
>> by clicking on "Show empty" button and changing what you need*).
>>
>> If you want to work with associations, you have to write it in XML, e.g.
>> via *Con**figuration->Repository objects* page.
>>
>> For an example, please see e.g.
>> https://wiki.evolveum.com/display/midPoint/Assignment+Configuration#AssignmentConfiguration-EntitlementAssociations
>> .
>>
>> But before trying that, I would strongly recommend reading about the
>> concept of entitlements, starting here:
>> https://wiki.evolveum.com/display/midPoint/Entitlements
>> and then about assignments:
>> https://wiki.evolveum.com/display/midPoint/Assignment
>> and https://wiki.evolveum.com/display/midPoint/Assignment+Configuration
>>
>> Anyway, if you would have any questions, we're here to help.
>>
>> Best regards,
>> Pavol
>>
>> (*) Due to a bug in GUI, attribute changes are applied, but are not shown
>> back in GUI. But they can be seen via Repository objects page. Hope we'll
>> fix that soon.
>> ---
>>
>> On 22. 11. 2014 19:50, dharmendra parakh wrote:
>>
>> Hi Pavol
>>
>>  What i have done is pretty straight forward, I have configured a role
>> to induce an ldap resource using GUI (PFA).
>>
>>  So as per my understanding when i add this resource to role inducement
>> all the role members will get this resource provisioned, I have tested this
>> and it is working very well.
>>
>>  Now i want to change the resource data which i provided while adding
>> this resource inducement to role for example container or group assignment
>> information. I am not sure how can i do this.
>>
>>
>>  Thanks!
>> Dharmendra
>>
>> On Sat, Nov 22, 2014 at 10:52 PM, Pavol Mederly <mederly at evolveum.com>
>> wrote:
>>
>>>  Hello Dharmendra,
>>>
>>> I'm not sure what exactly you have done and what you would like to
>>> achieve.
>>>
>>> You've created a role and configured it to induce an LDAP resource. Did
>>> you do this using a GUI or via XML?
>>> If via GUI, please send here a screenshot what have you done and what
>>> you want to achieve.
>>> If via XML, please do the same (sending here appropriate pieces of your
>>> XML configuration).
>>>
>>> Best regards,
>>> Pavol Mederly
>>>
>>>
>>> On 22. 11. 2014 11:33, dharmendra parakh wrote:
>>>
>>>  Hi Everyone
>>>
>>>  I just downloaded and started learning midpoint for my personal
>>> learning purpose. I really liked it and I am very excited to learn using it.
>>>
>>>  I have a question about inducements in midpoint.
>>>
>>>  I have created a role and configured it to induce a ldap resource with
>>> some ldap groups. Now I want to change the configured groups/resource
>>> information but i could not find the way to do it.
>>>
>>>  Can you help me doing this or there is no such implementation in
>>> midpoint currently.
>>> Please help me with this let me know if you need more information on
>>> this.
>>>
>>>
>>>  Thanks
>>> Dharmendra Parakh
>>> +91-9730648544
>>>
>>>
>>>  _______________________________________________
>>> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>>>
>>>
>>>
>>> _______________________________________________
>>> midPoint mailing list
>>> midPoint at lists.evolveum.com
>>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>>
>>>
>>
>>
>> _______________________________________________
>> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>
>
> _______________________________________________
> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20141125/dfe15224/attachment.htm>


More information about the midPoint mailing list