MFAUserID - how to make it writeable

Hi all,

is there a way to allow write to the attribute Person|MfaUserID. We do fill this property during the initial sync from the HR system. The CanEdit property on this attribute is False. The use case is that I can fill it as said during the SAP HCM import. Also updates work fine when going through the synchronization editort. When copying the person into another instance of one identity (Export, Copy to Clipboard or Save as file), the copy breaks, since we are copying the person including this attribute. Of course when going through the "Safe as file", I can edit the XML and remove the attribute mfauserid from the xml. Then the copy works fine. However, for us it would be easier if we could make the attribute writeable.

Thanks.

Parents Reply
  • Hi Markus

    Yes, I have added two role based custom permission groups and granted them View, Edit and Insert rights. That did not work, even though the person I am logging onto the manager has the 1IM application roles applied, which includes the role based permissions group.

    I have not tried a permission group such as CCCEditPermissions. Will gibt this a go.

    Regards

    Andy

Children