I had scenario where I wanted to provision the business role but not provision entitlements to the target system. This can be done very easily by setting argument noRoleExpansion to true while compiling the provisioning plan.
In a workflow,
<Step action="call:compileProvisioningProject" icon="Task" name="Compile Project" posX="121" posY="15" resultVariable="project">
<Arg name="identityName" value="ref:identityName"/>
<Arg name="plan" value="ref:plan"/>
...
<Arg name="noRoleExpansion " value="true"/>
...
</Step>
In a rule,
Provisioner prov = new Provisioner(context);
prov.setNoRoleExpansion(true);
ProvisioningProject proj = prov.compile(plan);
This worked for me!
Great!
thank you!
what about if it's an entitlement? will this work still?
Thanks in advance.
If it is an entitlement there is no further expansion so it would provision as normal.
what about if Business role provision two IT role for Type A user but for Type B i want only one IT role provisioning?