<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi Markus,</p>
<p>I recommend to also read/try policy rule to delete member
assignments when role/org is deleted from midPoint.</p>
<p>Please see
<a class="moz-txt-link-freetext" href="https://docs.evolveum.com/midpoint/reference/support-4.8/synchronization/linked-objects/scenario-5-deletion-safe-organizations/">https://docs.evolveum.com/midpoint/reference/support-4.8/synchronization/linked-objects/scenario-5-deletion-safe-organizations/</a></p>
<p>There are some limitations though, please read them on the page
as well. Improvements are possible.<br>
</p>
<p>Best regards,</p>
<p>Ivan<br>
</p>
<div class="moz-cite-prefix">On 10. 1. 2024 15:50, Markus Calmius
via midPoint wrote:<br>
</div>
<blockquote type="cite"
cite="mid:R6BlqWmdqWIpFsz_XM7dsLV8hpD3EOlrRgyxnJurVd4nrl1BvKFOJwyMyzNHIVhx8HoRrLJJDZstvhlUOuYJZ05P7rveo7lo4PSJtgZhE3w=@proton.ch">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div style="font-family: Arial, sans-serif; font-size: 14px;">Hi,</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">is
it possible, and if so, can anyone guide me on how to unassign
all roles (or orgs) that has been deleted*. </div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">I've
been trying to use the bulk script actions, but I cannot figure
out how to figure out how to compose the filter.</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">All
my tests end up with either a stack-trace or "<span>There are no
roles nor resources to unassign and no filter is specified</span>"</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">What
I got working was the example:</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<p
style="margin: 0px; font: 13px Courier; color: rgb(209, 28, 36); background-color: rgb(252, 244, 220);"><s:action></p>
<p
style="margin: 0px; font: 13px Courier; color: rgb(209, 28, 36); background-color: rgb(252, 244, 220);"><span>
</span><s:type>unassign</s:type></p>
<p
style="margin: 0px; font: 13px Courier; color: rgb(209, 28, 36); background-color: rgb(252, 244, 220);"><span>
</span><s:parameter></p>
<p
style="margin: 0px; font: 13px Courier; color: rgb(209, 28, 36); background-color: rgb(252, 244, 220);"><span>
</span><s:name>role</s:name></p>
<p
style="margin: 0px; font: 13px Courier; color: rgb(209, 28, 36); background-color: rgb(252, 244, 220);"><span>
</span><c:value
xsi:type="xsd:string”>OID</c:value></p>
<p
style="margin: 0px; font: 13px Courier; color: rgb(209, 28, 36); background-color: rgb(252, 244, 220);"><span>
</span></s:parameter></p>
<p
style="margin: 0px; font: 13px Courier; color: rgb(209, 28, 36); background-color: rgb(252, 244, 220);"></s:action></p>
But that take one OID, and... I need to have at least a list,
but preferably something even smarter.</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">I
tried to do something like this:</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<pre><code data-lang="xml"></code></pre>
<div
style="color: rgb(88, 110, 117); background-color: rgb(253, 246, 227);">
<pre
style="font-family:'JetBrains Mono',monospace;font-size:9.8pt"><span
style="color: rgb(147, 161, 161);"><</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">s</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:action</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"> <</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">s</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:type</span><span
style="color: rgb(147, 161, 161);">></span>unassign<span
style="color: rgb(147, 161, 161);"></</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">s</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:type</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"> <</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">s</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:parameter</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"> <</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">s</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:name</span><span
style="color: rgb(147, 161, 161);">></span>filter<span
style="color: rgb(147, 161, 161);"></</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">s</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:name</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"> <</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">s</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:searchFilter</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"> <</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">q</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:inOid</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"> <</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">q</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:value</span><span
style="color: rgb(147, 161, 161);">></span>fef34a49-f7d4-4a68-97ee-cb240fe13022<span
style="color: rgb(147, 161, 161);"></</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">q</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:value</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"> <</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">q</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:value</span><span
style="color: rgb(147, 161, 161);">></span>f379d31e-6990-4226-8007-932b9676a8ff<span
style="color: rgb(147, 161, 161);"></</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">q</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:value</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"> </</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">q</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:inOid</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"> </</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">s</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:searchFilter</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"> </</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">s</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:parameter</span><span
style="color: rgb(147, 161, 161);">>
</span><span style="color: rgb(147, 161, 161);"></</span><span
style="font-weight: bold; color: rgb(108, 113, 196);">s</span><span
style="font-weight: bold; color: rgb(38, 139, 210);">:action</span><span
style="color: rgb(147, 161, 161);">>
</span></pre>
</div>
But cannot get any thing to work.</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">Anyway,
any pointers is greatly appreciated.</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">* I
know there is a message saying this role/org has members, do you
still want to etc. </div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
</div>
<div class="protonmail_signature_block"
style="font-family: Arial, sans-serif; font-size: 14px;">
<div class="protonmail_signature_block-user"> Markus</div>
<div
class="protonmail_signature_block-proton protonmail_signature_block-empty">
</div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<div class="moz-signature">-- <br>
<p>Best Regards,</p>
<p style="margin:0px"> <span
style="font-family:'arial' , 'helvetica' , sans-serif , font-size:15px"><strong>Ivan
Noris</strong> | <span style="font-size:medium"><small>Expert
Identity Engineer</small></span></span>
</p>
<p style="margin:0px"> <span
style="font-family:'arial' , 'helvetica' , sans-serif"><a
href="https://evolveum.com/"><img
src="https://evolveum.com/wp-content/uploads/evolveum-email-signature-evolveum-logo.png"
data-mce-src="https://evolveum.com/wp-content/uploads/evolveum-email-signature-evolveum-logo.png"
width="299" height="73"></a><br>
</span> <a href="mailto:ivan.noris@evolveum.com"
style="font-size:13.3333px" class="moz-txt-link-freetext">ivan.noris@evolveum.com</a>
<span style="font-size:13.3333px"> | </span> <a
href="http://www.evolveum.com/" style="font-size:13.3333px">www.evolveum.com</a><br>
<span style="font-size:medium"><small> </small></span>
</p>
<a href="https://tiime-unconference.eu/"><img
src="https://evolveum.com/wp-content/uploads/evolveum-at-tiime-2024-email-signature.png"
alt="Evolveum at TIIME 2024" width="396" height="90"
border="0"></a>
<div style="line-height:40%;"> <br>
</div>
<div class="moz-signature"> <a
href="https://www.linkedin.com/company/evolveum"
data-mce-href="https://www.linkedin.com/company/evolveum"
moz-do-not-send="true"><img alt="Evolveum LinkedIn"
src="https://evolveum.com/wp-content/uploads/2017/04/LinkedIn.png"
width="23" height="23" border="0"></a> <a
href="https://twitter.com/evolveum" target="_blank"
data-mce-href="https://twitter.com/evolveum"><img
alt="Evolveum Twitter"
src="https://evolveum.com/wp-content/uploads/Twitter-new.png"
data-mce-src="https://evolveum.com/wp-content/uploads/Twitter-new.png"
width="23" height="23" border="0"></a> <a
href="https://www.facebook.com/evolveum" target="_blank"
data-mce-href="https://www.facebook.com/evolveum"><img
alt="Evolveum Facebook"
src="https://evolveum.com/wp-content/uploads/Facebook.png"
data-mce-src="https://evolveum.com/wp-content/uploads/Facebook.png"
width="23" height="23" border="0"></a>
</div>
<p style="margin: 0px;"> <span style="font-size: 9pt;">Disclaimer:
The contents of this e-mail and attachment(s) thereto are
confidential and intended for the named recipient(s) only. It
shall not attach any liability on the originator or Evolveum
s.r.o. or its affiliates. Any views or opinions presented in
this email are solely those of the author and may not
necessarily reflect the opinions of Evolveum s.r.o. or its
affiliates. Any form of reproduction, dissemination, copying,
disclosure, modification, distribution and / or publication of
this message without the prior written consent of the author
of this e-mail is strictly prohibited. If you have received
this email in error please delete it and notify the sender
immediately.</span>
</p>
</div>
</body>
</html>