• Business Role owner cannot remove members

    we have around 300 business roles published as assignment resource on IT shop. Currently role owners can only see role information on IT shop.

    However, they annot remove members unlike manager of AD group, where group manager can remove members from…

  • Business Role and assigned Active Directory Group


    Can anyone tell me if I can see in any logs when a Group was removed from a business role?

    We had some issues and I see somethings missing for business roles.

    OrgHasUNSGroup table shows them is there somewhere i can see when it was removed and who…

  • Indirect Assignments of System Entitlements to Business Roles by System Roles


    I observe a strange behaviour on indirect assignments of System Entitlements to Business Roles (OrgHasUNSGroupB) in One Identity Manager 8.1.2 compared to the old system as 6.1.4


    1. Create a System Role (ESet)

    2. Create and Assign a System…

  • Assign a Business role for managers that have direct reports in multiple locations.

    Hello Experts,

    I am trying to do something within OneIM for our company communications.  So the requirement is we have Location Based Distribution list that i have attached to Location based business role.  We have a Manager at Location A who gets the Location…

  • Is there a way to kick-off inheritance calculations?

    I'm using version 8.0.1. I've just done a transport of a lot of Business Roles and System Roles as well as entries from OrgHasEset. The business role structure is hierarchical and set to inherit top down. The problem is, none of the inheritance is working…

  • Fire a Process on Business Role Update

    Hi I'm using v 8.1.1. I want to fire a process when a particular column on the Business Role is updated. It looks like there's no UPDATE event on Org - there's only INSERT and there are no events on the BaseTree table. Is there any way I can fire a process…

  • Trigger process when user is assigned dynamic business role


    We are trying to fire a prosess when a user is inserted/assigned to a dynamic business role. I can trigger an prosess from PersonInOrg with the "insert"-event when i add the user directly to a business role, but when the user is added with a dynamic…

  • What is the actual use case for business and system roles in One Identity Manager (difference).


    Could someone help me to explain the difference between "business role" and "system role" in One Identity Manager.

    In the Identity Manager 8.0 - Business Roles Administration Guide I read:

    Various company resources can be…

  • How to Run a Report of All Assigned users to a Business Role

    Hello Experts,

    We have some business roles that are driven by a dynamic assignments based on their Deprtment, Title and Location.  I am trying to see if there is a way to have a report on all the members of those roles.  If i can do it in OneIM, Great! 

  • Automatically create a personwantsorg request based on business role



    We have a dynamic assignment of a business role. Our use case is that this business role should contain a few resources, but they should not be assigned to the user without a confirmation of their leader. Is it possible to "automatically" create…

  • Business Role Constraints - Automatic removal of one role based on the conflicting roles model



    One of the use cases we are looking to establish is to replace our current query based AD group memberships with Business Roles. The concept of configuring a pair of Business Roles and setting the other as a conflicting role is pretty straight…

  • Bulk Import Business Roles with Dynamic Query

    I have several hundred business roles that need to be created in One Identity Manager. Is there a way to bulk load them with the query included (maybe using Data Import)? If so, what table/view would I use? Thanks!

  • RE: delegation of business roles

    Hi Sergei,

    You can only delegate what you have currently assigned or are responsible for and the item has to be delegable. Please check your role class for the business roles you are missing in the delegation view. I assume that the role class is not set…

  • Dynamic role: start recalculation immediatly


    After changing the condition value in a dynamic role by a script, how start recalculation immadiatly ?

    Is there a step in process orchestration to do that ? Which parameters could I need ?

    For your information this dynamic role is assigned to a business…

  • Removing business role associations to IT Shop functions in D1IM

    Hello Community,

    I'm trying to find a way to remove the association between the built in Manager business role and access to the employee tab in the IT Shop without removing any users from the actual Manager business role itself.  Is this possible…