Assign role without provisioning to target system
I had scenario where I wanted to provision the business role but not provision entitlements to the target system. This can be done very easily by setting argument noRoleExpansion to true while compiling the provisioning plan.
In a workflow,
<Step action="call:compileProvisioningProject" icon="Task" name="Compile Project" posX="121" posY="15" resultVariable="project">
<Arg name="identityName" value="ref:identityName"/>
<Arg name="plan" value="ref:plan"/>
...
<Arg name="noRoleExpansion " value="true"/>
...
</Step>
In a rule,
Provisioner prov = new Provisioner(context);
prov.setNoRoleExpansion(true);
ProvisioningProject proj = prov.compile(plan);
- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Content to Moderator
This worked for me!
Great!
thank you!
- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Content to Moderator
what about if it's an entitlement? will this work still?
Thanks in advance.
- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Content to Moderator
If it is an entitlement there is no further expansion so it would provision as normal.
- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Content to Moderator
what about if Business role provision two IT role for Type A user but for Type B i want only one IT role provisioning?