<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Pavan,<br>
<br>
if I remember correctly, the task is being executed every 15 minutes
or so by default.<br>
<br>
If you try the administative status setting in the assignment
(enable/disable), it's applied immediately.<br>
<br>
Be sure to check the wiki page with "Disable instead of delete" to
have more user-friendly solution. That feature applies everytime the
assignment is removed/disabled, so unless you explicitly delete the
account from midpoint, it will stay disabled (not removed) even if
you remove all user roles providing that account.<br>
<br>
Regards,<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 02/17/2015 03:34 PM, Pavan Bule
wrote:<br>
</div>
<blockquote
cite="mid:CAC9MhDABsCRnFpeBK6gtnOCiJKDma8V62uYq4E684g7TasxFmw@mail.gmail.com"
type="cite">
<div dir="ltr"><span style="font-size:12.8000001907349px">Hi,</span>
<div style="font-size:12.8000001907349px"><br>
</div>
<div style="font-size:12.8000001907349px">Thanks Ivan, it got
working. I was not waiting for "Trigger Scanner" to run.</div>
<div style="font-size:12.8000001907349px"><br>
</div>
<div style="font-size:12.8000001907349px">Thanks for your help.</div>
<div><span style="font-size:12.8000001907349px"><br>
</span></div>
<div><span style="font-size:12.8000001907349px"><br>
</span></div>
<div><span style="font-size:12.8000001907349px"><br>
</span></div>
<div><span style="font-size:12.8000001907349px">Regards,</span></div>
<div><span style="font-size:12.8000001907349px">Pavan </span><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Feb 17, 2015 at 6:24 PM, Anand
Kothekar <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:anand.kothekar@confluxsys.com"
target="_blank">anand.kothekar@confluxsys.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><br>
<div class="gmail_quote">---------- Forwarded message
----------<br>
From: <b class="gmail_sendername">Ivan Noris</b> <span
dir="ltr"><<a moz-do-not-send="true"
href="mailto:ivan.noris@evolveum.com"
target="_blank">ivan.noris@evolveum.com</a>></span><br>
Date: Tue, Feb 17, 2015 at 6:14 PM<br>
Subject: Re: [midPoint] Specifying Temporary
Role/Resource To User<br>
To: <a moz-do-not-send="true"
href="mailto:midpoint@lists.evolveum.com"
target="_blank">midpoint@lists.evolveum.com</a><br>
<br>
<br>
<div bgcolor="#FFFFFF" text="#000000"> Hi Pavan,<br>
<br>
are you setting the validFrom / validTo attributes in
user's assignments, or somewhere else?<br>
<br>
Temporary assignment means:<br>
- edit user<br>
- click the wheel icon in Assignments - Assign role<br>
- select a role<br>
- before saving, set the assignment's (the new role)
attributes Valid From / Valid To (or Administrative
Status)<br>
- save<br>
<br>
MidPoint model will evaluate the assignment parameters
and should behave accordingly. If you have validFrom
date in the future, the role will be assigned, but the
resource account will not be created until validFrom
date passes. Similar for validTo.<br>
<br>
The process evaluation is done by midPoint, running
Trigger or Validity scheduled task automatically.<br>
<br>
By default the assigned account is invalidated by
deleting. We have also "disable instead of delete"
configuration, which is per resource configuration:
<a moz-do-not-send="true"
href="https://wiki.evolveum.com/display/midPoint/Resource+Schema+Handling%3A+Activation"
target="_blank">https://wiki.evolveum.com/display/midPoint/Resource+Schema+Handling%3A+Activation</a><br>
<br>
Regards,<br>
Ivan
<div>
<div class="h5">
<div>
<div><br>
<br>
<div>On 02/17/2015 01:25 PM, Pavan Bule wrote:<br>
</div>
</div>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div class="h5">
<div>
<div>
<div dir="ltr">Hi,
<div><br>
</div>
<div>Thanks Ivan. I tried few things and
it worked for me.</div>
<div><br>
</div>
<div>My requirement is that I have one
role which has one resource as an
inducement.</div>
<div>now when I assign this role to user,
i am specifying the time limitation to
role through ValidFrom and ValidTo
attributes.</div>
<div><br>
</div>
<div>I am expecting that the resource
should be available to user after
specified start time and should get
disabled or removed after end time.</div>
<div><br>
</div>
<div>But my observation is that when we
specify ValidFrom and ValidTo
attributes for making resource temporary
through role, the induced resource is
not getting added at all. But if we try
same thing without specifying time
limitation (ValidFrom and ValidTo),
induced resource is getting added
successfully.</div>
<div><br>
</div>
<div>Please provide me any pointers on
making resource temporary through role
inducements.</div>
<div><br>
</div>
<div><br>
</div>
<div>Regards,</div>
<div>Pavan </div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Feb 16,
2015 at 7:21 PM, Pavan Bule <span
dir="ltr"><<a
moz-do-not-send="true"
href="mailto:pavan.bule@confluxsys.com"
target="_blank">pavan.bule@confluxsys.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="margin:0 0 0
.8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div dir="ltr"><span
style="font-size:12.8000001907349px">Hi,</span>
<div
style="font-size:12.8000001907349px"><br>
</div>
<div
style="font-size:12.8000001907349px">I
have recently started using
midpoint for evaluation. I have a
midpoint environment in my system
configured with an ldap resource.</div>
<div
style="font-size:12.8000001907349px"><br>
</div>
<div
style="font-size:12.8000001907349px">I
was trying to provide temporary
Role/Resource to User.</div>
<div
style="font-size:12.8000001907349px"><br>
</div>
<div
style="font-size:12.8000001907349px">-
I specified <b>valid from and
valid to </b>attributes in gui
while assigning role to user.</div>
<div
style="font-size:12.8000001907349px"><br>
</div>
<div
style="font-size:12.8000001907349px"> but
found out that its not working so,
I wanted to ensure that is this
functionality implemented in your
current version 3.1 as I am using
the same version.</div>
<div
style="font-size:12.8000001907349px"><br>
</div>
<div
style="font-size:12.8000001907349px"> If
yes please guide me whether I need
to do further more modification to
achive this functionality.</div>
<div
style="font-size:12.8000001907349px"><br>
</div>
<div
style="font-size:12.8000001907349px"><br>
</div>
<div
style="font-size:12.8000001907349px">Regards,</div>
<div
style="font-size:12.8000001907349px">Pavan</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
</div>
</div>
<span>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><span class="HOEnZb"><font color="#888888">
</font></span></pre>
<span class="HOEnZb"><font color="#888888"> </font></span></span></blockquote>
<span class="HOEnZb"><font color="#888888"><span> <br>
<pre cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
<a moz-do-not-send="true" href="http://evolveum.com" target="_blank">evolveum.com</a> <a moz-do-not-send="true" href="http://evolveum.com/blog/" target="_blank">evolveum.com/blog/</a>
___________________________________________________
"Semper Id(e)M Vix."
</pre>
</span></font></span></div>
<span class="HOEnZb"><font color="#888888">
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com"
target="_blank">midPoint@lists.evolveum.com</a><br>
<a moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</font></span></div>
<br>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper Id(e)M Vix."
</pre>
</body>
</html>