Setting Validity on an existing role assignment

[#1]

Hi folks,

Having an issue with IDM 7.2 workflow, where we need to reset validity on a role assignment to a user.

MXREF_MX_ROLE{A}{VALIDFROM=1999-01-01!!VALIDTO=2018-11-21}2667064

A previous step in the workflow assigns the role with no validity set, this step sets the validity from a base date to two years from today.

I'm guessing that there is an issue with my {operator} and would appreciate any help / documentation / reference that you might have on this.

Thanks!

Matt

[Steffi_Warnecke]

Hey Matt,

I'm not sure which issue you have. Can you share an error message?

An example for our role assignment with link-id would look like this:

{A}{ValidFrom=%VALIDFROM%!!ValidTo=%VALIDTO%$FUNCTION.isv_read_mcuniqueid_for_role(%USERMSKEYVALUE%!!<PRIVILEGEMSKEYVALUE>)$$}<PRIVILEGEMSKEYVALUE>

The function "isv_read_mcuniqueid_for_role" looks for a mcuniqueid in "idmv_link_ext" for the mskey of the identity with the mskey of the privilege and if one is found, adds a "!!LINKID=<mcuniqueid>" to the string above.

Then the IDM knows, it needs to update that link. If no mcuniqueid is found, it will just create a new link with your data.

.

Regards,

Steffi.

[former_member2987]

Not getting an error, Steffi, just not getting validity dates set 😞