Is there a Permission Group in v9.1 that allows the creation of passcodes for ALL Users

Hi Billy,

In Manager please grant "Base Roles/OperationsSupport"  and "Base Roles/Operations Support/Password help desk" to any of the members of your on-boarding team , then access the Operations Support Portal (Apiserver) . That would allow that member to generate passcodes for all employees (tested in v91)

In the "old portal" members of Identity Management\Employees\Administrators -application role can also set passcodes for everybody. Then again this role allows them to do so much more than just that so it may be bit risky to use. 

You can also create custom permissions for it but then you would also need the views to perform the action in the web interface. You would need Edit permissions for Person.passcode and Person.PasscodeExpires.

Thank you so much for that Juancarlos! I'll give that a try

juancarlos camargo the permissions you gave me did indeed work but I noticed it only generates the first half of the passcode and sends the second half of the passcode to the Manager. Is there a way to generate the full passcode?

Hi billy pearson , in v91, when you issue a passcode for a user through the Operations Support Portal, that passcode only allows logon on the Password portal, nothing is sent to the manager. Maybe I'm missing something , but in my case it works and I can logon to the Password Portal to change my passwords.

Interesting. I am trying to do this in a v91 Skytap Demo session instead of the customer environment. I have no issue creating the passcode in the Operations Support portal. But I do find it odd it's only giving me the first half and sending the second half to the Manager.

There's even a process in Designer called "QER_Person_Send mail second half of passcode"; I tried disabling it to see if it would generate the full code and it unfortunately did not. So far, I've been unsuccessful tracking down any connected process that splits the passcode into 2 parts. 

I'm unable to add my screenshot to this post but this is the regular behavior for this action - at least in the skytap session. 

Apologies, Billy.

I've missed this: https://support.oneidentity.com/es-es/technical-documents/identity-manager/9.1/web-designer-web-application-configuration-guide/5#TOPIC-1875356

All in all, I guess you're using the web designer web portal and I was referring to the Angular web server (Apiserver). To this latter I think those settings do not apply and the passcode is issued complete to the user logged in Operations Support portal (the one of the angular web server)

Have a look at the article and let me know!

Ha! That was absolutely what I was looking for, thank you so much juancarlos camargo I appreciate the help

Anytime!