• Automatically Removing Non-Inherited Active Directory Group Memberships in a Dynamic Role-Based Access Model

    I have defined two business roles, and each has been assigned an Active Directory group as a resource that users should inherit by belonging to one role or the other. Membership to both roles is dynamic. How can I enforce that all group membership assignments…

  • Xorigin membership from Business Role

    hello,

    the customer gave me this problem to solve.

    So, I have to manage the removal of memberships from Business Role in a flat way. That is, when a person loses a business role (for whatever reason), then all of his or her inherited entitlements from…

  • Analyzer functionalities for RBAC system

    Hi everyone,

    I need to implement an RBAC system with dynamic roles and I am using the Analyzer tool for the analysis. The version of 1IM is 8.1.5.

    I have some questions about the Analyzer functionalities.

    1. Is it possible to export a report with the…

  • Employee Manager Role for only Active Employees

    Hello Experts,

    I have been trying to figure out a way to assign the Employee Manager role in OneIM to only those who have active persons listed as their direct report.  Currently if a person has an inactive employee listed it still assigns the employee…

  • Business role for active directory groups take a long time to add users

    Hello,

    Has anyone seen any issues with adding users to groups through a business role?

    We have a few that we need to add users to upon creation. It seems to take a good while before the users get added to the group.

    The business role is assigned but the…

  • Business Role and assigned Active Directory Group

    Hello,

    Can anyone tell me if I can see in any logs when a Group was removed from a business role?

    We had some issues and I see somethings missing for business roles.

    OrgHasUNSGroup table shows them is there somewhere i can see when it was removed and who…

  • How to Run a Report of All Assigned users to a Business Role

    Hello Experts,

    We have some business roles that are driven by a dynamic assignments based on their Deprtment, Title and Location.  I am trying to see if there is a way to have a report on all the members of those roles.  If i can do it in OneIM, Great! 

    …

  • Business Role Constraints - Automatic removal of one role based on the conflicting roles model

    Hola,

     

    One of the use cases we are looking to establish is to replace our current query based AD group memberships with Business Roles. The concept of configuring a pair of Business Roles and setting the other as a conflicting role is pretty straight…

  • RE: delegation of business roles

    Hi Sergei,

    You can only delegate what you have currently assigned or are responsible for and the item has to be delegable. Please check your role class for the business roles you are missing in the delegation view. I assume that the role class is not set…