• Cannot use system user login on DBCompiler after migration from v6.1.4 to v7.0.3.

    Hi all,

    My situation: Existing 1IM v6.1.4 Prod, MS SQL DB, currently testing building reference systems in order to practice migrating from v6.1.4 to v7.0.3 using some Professional Services help and tools. 

    I wanted to see what a migrated system will…

  • Login to terminal server permitted <-> TSAllowLogonTerminalServer and Login hours <-> LogonHours (String) set to Deny by defaultone

    Hi All,

    We have run in to an issue when a we create a user account, OneIM is setting the two attributes to deny by default... how can i either disable this or make it enable by default?  

    Thank you for your help.

  • How to check the object is modified by other processes or scripts

    Dear All,

    Is there any option to check the object is used by other processes or Scripts. I am calling a script from script component to modify an object which is in parallel used by another process so i am getting below error. I wanted to save the changes…

  • Cancel IT Shop Order are not working from the Script Component

    Dear All,

    We are trying to abort or Unsubscribe IT Shop orders for a given SAP Account. Attached my code, it is working fine when i test the script directly calling from Script Debugger but it is not working when we call same script with same attributes…

  • PWO Status Assigned but not applied yet in Web Poral

    Dear All,

    As i remember in Version 6 there is a status saying product is "Assigned but not applied yet" in the Target system. In our scenario (version 8), we are requesting for new SAP Roles using the portal. The status changed to Assigned immediately…

  • Schema extension of AccProductParameter in Manager UI

    We did a schema extension on the table AccProductParameter, column CCC_IsPassword, which basically controls the way how the field appears on the web, bullets or not.

    Unfortunately it's not automatically showing up in Manager UI where we set up the properties…

  • What is the difference between One Idm Active directory version vs Normal version vs Governance version.

    What is the difference between One Idm Active directory version vs Normal version vs Governance version. In all version having all the features.What the feature wise lacking of different versions and its advantage.

  • Custom column always showing a default value but

    Hi All,

    A Custom column always showing a default value for all objects in object browser and manager tool whereas in sql query showing correct values for that column.

    Please help to fix this issue and what could be the possible reason for that.

    Thanks…

  • Changing the default shelf where Ad groups are auto-published

    Hello experts,

     

    We would like to publish our AD Groups in another shelf different from the default one. Version 7.1.2.

     

    We have tried to edit the script “ADS_AssignADSGroupsToITShop” which, as far as we know, contains the instruction to publish it in…

  • Error during execution of 'OnInitialize' in logic module 'EX0.Customizer.EX0Mailbox'. Version string portion was too short or too long.

    Suddently when we open the mailbox object from LIAM we are getting this above error "Error during execution of 'OnInitialize' in logic module 'EX0.Customizer.EX0Mailbox'.
    Version string portion was too short or too long." 

    We…

  • Read/Updating Oracle sequence in 1IM Sync Editor

    Hello,

     

    We established a target system connection using native Oracle connector. The target system is a small application, they use Oracle Sequence to generate simple user UID as key column.

     

    So when we provision new user from UNSAccountB of 1IM to the…

  • Data insert through CSV in Person table

    Hi,

    I am trying to insert user data through CSV and so created mappings and workflow. I am able to insert the user but CentralAccount for that user is not getting generated. Can anyone please help

  • 1IM service account permissions required in the DA Domain when using Active Roles?

    [1IM 6.1.4, Active Roles 6.9, SQL DB, Windows 2012 R2 servers]

     

    Does the 1IM service account (used to run the job server service) need or require domain admin permissions if using Active Roles to connect to the domain?

     

    We are using Active Roles and our…

  • Raising event from WebDesigner not working

    V 7.1.2: In WebDesigner I am calling a script in an action. Script among other things generates an event. I see script working fine, however an exception is thrown when it comes to generating that event. I tried simulating the event on the same person…

  • Column format for First and Last Name of person table.

    Hello,


    How can we change the format for First name and last name columns in Person Table. We current added a Contractor from the identity manager webportal. We are using VI_Employee_Edit module to add a record to the person table . If a user enter the…

  • Migration 6.1.1 to 6.1.4 : JobInitQueue Failed

    Hello,

    We have migrated our environment from 6.1.1 to 6.1.4.

    After the migration (No error message), the job queue doesn't seems to work anymore.

    In the log, we have this error message :

    2017-11-29 14:42:41 +01:00 - Serious: Last process step request…

  • Initial domain sync fails for DC in untrusted domain

    Hola,

     

    Ok so I have AD sync working fine from our integrated domain, but when adding a domain where there is no trust, I am having issues getting the sync to work.

    Couple of notes:

    • I am able to configure the connection in the Sync editor and browse the…
  • Issue saving DGE service account in manager 7.1.2

    Hey Folks,

    So I have installed the DGE bits and configured my AD Accounts as the data governance administrators. The Data Governance views in manager render the managed hosts as expected. 

     

    The next step however (keep me honest here) is to add the service…

  • ADSAccount.CN Template issue

    Hey Folks,

    I am having a weird issue with template updates on ADSaccount CN created as part of an account definition.

    Breakdown is as follows:

    • Account Definition SO is created.
    • Manage level SO FM is created.
    • Account Definition is assigned to Business…
  • Query in script library to get a list of users getting an error

    Hi,

     

    I'm trying to write a query in a script library to get a number of accounts in ADSAccountInADSGroupTotal that are members of a certain group. Then have a top(nn) clause to limit the number for moving them to another group.

     

    I am using this:

  • Error while Removing out of the box Active directory group from Manager

    I want to remove out of the box Service Category "Active Directory Groups" from the Identity Manager web portal.While removing this item from Service Catalog in Manager, I am getting below error.

    [1025012] Object (Active Directory Groups) could…

  • Migration from v6.x to v7.x of Identity Manager

    Has anyone migrated from a Prod v6.x installation to a v7.x Identity Manager environment?

    I am looking for experiences, hints, etc. for the easiest parts, the hardest parts, suggestions of order of operations for the change day.

    I am tasked with the same…

  • DBQueue tasks not getting processed

    Hi,

     

    I am using One Identity manager version 7.1

    At first, I installed the application with a blank 1Im database and configured the Job servers as well as the services. Everything was working fine so far.

    Then, I restored another v7.1 database with production…

  • Define search criteria for employee assignment

    Hi, I have created a search mapping criteria like AdsAccount.EmployeeNumber -> Person.PreviousPersonnelNumber. Where PreviousPersonnelNumber is custom column which is multivalue column. The above matching search criteria getting failed cause it is not…
  • Change Domain Controller in Job Queue for current jobs in queue.

    Does anyone know if it is possible to change the domain controller for jobs in the queue?

    We had a domain controller get decommissioned and the AD sync server was not moved over.

    I have gotten past some of the jobs by executing other tasks. Although there…