Filter missing in task access control

[jaisuryan]

Hi Experts,

System: SAP IDM 7.2 SP9 patch 7 (MS SQL 2012)

I would like to use SQL to decide who can use my task. However I wouldn't find the 'Filter' option in the "Allow access for" field. Is it no more available for use? I wish this is a bug and they bring this option back in further releases. I want to restrict a task for users who doesn't have the attribute 'MX_AUTHQ_001' set, is there a workaround to achieve this?

Kind regards,

Jaisuryan

Screenshot added: Jai Suryan

[Former Member · Accepted solution]

Hello Jai,

You need to select the Logged inuser / Identity Store Entry option for Allow access for field. Then you can select the filter option at on behalf of dropdown.

PFB the screenshot for your reference.

~ Krishna.

[Steffi_Warnecke · Accepted solution]

@Krishna

There is also a filter option for the first dropdown. At least it should be there.

@Jaisuryan

If this is a bug, I wouldn't wait till a new release but open an OSS ticket. We use that filter quite a lot, but I'm on SP8. Somebody on SP9 here, who can check, if they see the option?

I don't think they took this option out, otherwise the field where you put the SQL statement for it would be gone, too.

Did you just update? Maybe something went wrong there.

Regards,

Steffi.

[Former Member · Accepted solution]

Ohk,

In that case, if you want filter to be listed in the Allow access for drop down itself, you need to uncheck the use simplified access control option on Identity store.

~ Krishna

[former_member2987 · Accepted solution]

Be careful with this option.  I believe its use can affect system performance.  I'll have to look through my notes on this.  Tero's option is really the best one.

[Former Member · Accepted solution]

Agree with you Matt. That is the reason it was defaulted to use simple access control.

~ Krishna.

[jaisuryan]

Thanks Krishna, it worked after we checked the option in Identity store. Hopefully it affects the UI performance only for the tasks which has SQL filters.

Hi Steffi,

I wanted to check with experts here before I confirm its a bug. Even a check box can do alot in IDM
Thanks for your help.

Hi Tero,

Seems legit for a workaround but enabling this option can save some work and time. Thanks for your help again.

[terovirta]

Jai Suryan wrote:

I would like to use SQL to decide who can use my task. However I wouldn't find the 'Filter' option in the "Allow access for" field. Is it no more available for use? I wish this is a bug and they bring this option back in further releases. I want to restrict a task for users who doesn't have the attribute 'MX_AUTHQ_001' set, is there a workaround to achieve this?

How about just setting privilege/role to the ACLs and assigning that privilege automatically to users? Either to all users and excluding the non-identity type of users or assigning the privilege to the users when the password reset questions are set?

regards, Tero