• State Suggested Answer
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 95 subscribers
  • Views 636 views
  • Users 0 members are here
Options
Related

XOrigin values

michaela chirio
5 months ago

Hi,

We are using One Identity Manager OnDemand - Starling Edition version 9.2.1.

We are implementing an attestation campaign for SAP roles assigned to SAP accounts.

We would like to attest the roles that are assigned:

- directly,

- via request from IT Shop,

but not the roles that are assigned via dynamic role.

We see that the roles assigned via IT Shop request and via dynamic role both have XOrigin = 2.

Is there a way in which we can distinguish the roles assigned via IT Shop from the ones assigned via dynamic role?

We need to exclude the latter from the attestation campaign.

Thanks,

Michaela

Parents Reply
  • 0 5 months ago in reply to Markus Weiss-Ehlers

    Hi Markus,

    Thank you for your reply but i don't think I understood the answer.

    We are looking for a way to distinguish the roles assigned via dynamic roles from the roles assigned via IT Shop. The XOrigin value in both cases is XOrigin = 2.

    Is there another field that we can use to distinguish them?

    Moreover, the "System entitlement membership attestation" has condition (1 = 1).

    Thanks

Children