[midPoint] removal of all roles of certain type

[Oskar Butovič - AMI Praha a.s.]

Hello everybody,

I need to unassign certain type of roles from all disabled users. There are
about 1800 roles of this type. I used roles to represent google apps groups.

Mappings doesnt seem to be very good at removing assignments. They remove
certain assignment only during disabling user. When he is disabled not even
strong authoritative and nontolerant mapping removes that assignment.

When i make task with 1800 item deltas to remove all relevant roles
midpoint is unable to even show that task. When i divided it into 4 tasks
with 500 item deltas it took ridiculously long.

Is there any way to write some kind of smarter delta or mapping? For
example: remove all assignments to roles with projection to google apps
resource.

Best Regards

Oskar Butovič

-- 

Oskar Butovič
solution architect

gsm: [+420] 774 480 101
e-mail: oskar.butovic at ami.cz


AMI Praha a.s.
Pláničkova 11
162 00 Praha 6
tel.: [+420] 274 783 239
web: www.ami.cz


[image: AMI Praha a.s.]

[image: AMI Praha a.s.]
<http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management>

Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za
společnost AMI Praha a.s.
jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně
písemnou formu.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170104/b8ca950b/attachment.htm>