Delete orphaned provisioned custom resources

Similar Questions

• Delete the custom resource

  Hi all

  I need to expose a DyanmicDataType created in VCO as a custom in the DSA data source and manage this custom data source. Let me know if I am doing this correct.

  1, resource to create custom in VCAC:

  * Define a new data type by calling 'Define the Type' in the folder DynamicTypes in vco.  The data type is < namespace >. < Objetpersonnalise >

  * Create new resource custom in the DSA based out of DynamicTypes:namespace:Objetpersonnalise

  To create a workflow VCO that returns an object of type Objetpersonnalise.  The workflow returns an object by calling DynamicTypesManager.makeObject

  
  

  2 delete the custom resource
  

  How to remove this custom resource that appears in the tab 'Elements '. I can create a new action of resource and associate it with a workflow VCO. How to remove this resource instance custom vaca in the workflow.

  Any help appreciated.

  Delete is performed via a resource of available Action you create.  A simple workflow that takes your resource type as input would.  (if your Item workflow is simple, you can actually use the same workflow to throw... really just an entrance and an exit of the type to get in and out of inventory in the items tab)

  This removes the element Custom inventory of resources (items tab)... If you really want to destroy the resource itself (from source), you might as the workflow to have also a task of the script to actually remove/destroy article in stock dynamic types.  (for example deleting a row in a database table)

  ... Pictures worth a thousand words...

  

  +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

  

  +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

  

  +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

  

  +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

  Hope that helps...

• Custom resource does not synchronize with equalize the dynamic Types

  Hi all

  Env: VCAC 6.2

  VCO: 5.5.2

  A custom resource is created based on the dynamic type in VCO. While some changes were made to DyanmicType - added a few attributes. When this custom resource is changed it shows no new attributes in the fields section. I have tried to remove/add endpoint external VCO, delete/recreate the resource custom, rebooted vcac device.

  Any help appreciated.

  Thank you

  tried to add a new DynamicType in VCO, hoping that this will force to refresh the cache. It seems that it worked. New fields are emerging.

• How to change the owner of a custom resource

  We create vCAC business groups as a resource that is centralized in our business accommodation for visitors office. Part of the procurement process is to create a custom resource vCAC for the vCACCAFE:BusinessGroup. Once the Group of companies has been implemented we would like to restore this object off customer accommodation property to allow them to update the group membership. How can I change the owner of the resource custom so that the client business group owns instead COMPUTER group central, or more precisely, I just feel like the Group of corporate clients to be able to perform actions of resources against the object group of business.

  It's the kind where I was going before I guess only you don't need this...

  >>... The resource action type has the value "elimination".

  My tests have shown that you can simply re-run the provision as another user and the EXISTING inventory item is replaced by the owner who ran.

  So you can have a market with a resource that says 'Take ownership' and for that Action, a provision by using the existing business group.  Changes in ownership. I tested that.

  Now that I have my right to consumer Resource Actions sorted (the service account of the plugin must qualify for all business groups - or at least where you want the actions to perform VCO), I'm sure I can put up an example that allows you to perform the Action of resource on behalf of someone else... This would allow you to SET the owner based on a new provision in the market.

  So, for example...

  1. I have create group of companies using advanced Service plan, which ALSO runs a provision of the custom resource.

  2. I add you to the Group of the company.

  3. I ran the action of change owner resource and type in your name.

  4. He performs a reconfiguration on your behalf... make you the owner.

  If this makes sense and could help you, I can set up a complete example in my lab tomorrow that shows this feature.  I know I can do.  But I also want to change the owner of a Machine element, and who died for us because he's not in the API.  I want to continue to push for an API method to change the owner as well.  As I said in my support ticket... If you own something, you should be able to change owner.

  Post edited by: SeanKohler

• Not able to see the fields within a custom resources optimization

  Hi all

  I am not able to see the fields within a custom value.

  Here is my code for the custom resource optimization:

  public class CustomContentContainer extends VerticalFieldManager{
  
      String content_header;
      int container_height;
      int displayWidth = Display.getWidth();
      int displayHeight = Display.getHeight();
  
      public CustomContentContainer(String content_header,int height){
          super(Manager.NO_VERTICAL_SCROLL | Manager.NO_HORIZONTAL_SCROLL);
          this.content_header = content_header;
          container_height = displayHeight-height;
      }
  
      protected void sublayout(int maxWidth, int maxHeight) {
          super.sublayout(maxWidth, container_height);
          setExtent(maxWidth,container_height);
      };
  
      protected void paint(Graphics graphics)
      {
          int X_POS = 20;
          int Y_POS = 20;
  
          int width = displayWidth;
          int height=container_height;
          int[] xPts = {0, width, width, 0};
          int[] yPts = {0, 0, height, height};
          int[] colors = { 0xffffff, 0xf7f7f6, 0xd4d0cc, 0xb0a9a2 };
          graphics.drawShadedFilledPath(xPts, yPts, null, colors, null);
  
          graphics.setColor(0xc0c0c0);
          graphics.drawRoundRect(X_POS, Y_POS, getWidth()-40, container_height-40, 10,10);
  
          int stringWidth = getFont().getAdvance(content_header);
          graphics.setColor(0xF8F8F8);
  
          graphics.fillRect(35, 5, stringWidth+10, 30);
  
          graphics.setColor(0xFF0000);
          graphics.drawText(content_header, 40, 5);
      };
  
  }
  

  Here is the Code inside the class from the main screen

  settingsContainer = new CustomContentContainer("Settings",vodavaultLogo.getHeight());
          contentContainer = new VerticalFieldManager(Manager.VERTICAL_SCROLL|USE_ALL_WIDTH);
  
          passwd1 = new CustomEditField();
          passwd2 = new CustomEditField();
          contentContainer.add(passwd1);
          contentContainer.add(passwd2);
          contentContainer.setMargin(35,35,35,35);
  
          mainContainer.add(vodavaultLogoField);
          settingsContainer.add(contentContainer);
          mainContainer.add(settingsContainer);
          add(mainContainer);
  

  You must call the super.paint (.) in your paint (...) optimization of resources, if you paint all areas which are added.

• Custom resource URL type

  I want to add to the Blackberry, a custom resource URL type. If your not sure what type of resource a URL that's the http:// part. I want to make a bkite: / / resources and hang and capture him and allow him to open a form in my Blackberry app. Does anyone know how to implement this?

  I think that this code works. I will just for filtering all host name.

• Issue of custom resources AMPA

  [JDev 12.1.3, MAF 2.2.0 AMPA 12.1.3.2.32]

  http://www.Ateam-Oracle.com/a-team-mobile-persistence-Accelerator-release-12-1-3-2-now-available/

  Custom resources medium?

  By the foregoing, I created a custom in the screen 'Details of the resource' resource entry Wizard.

  But while the information I've entered seems to be correctly filled as a customMethod in

  persistence - mapping.xml, there is no custom method generated in my service class

  (according to my GiT, this file was not affected at all by the Wizard).

  Has anyone other that saw issue or whether there is a work around?

  Thank you

  Paul Young

  Paul,

  On the last page of the wizard, you can set generator options, one of them is a chedhkbox to regenerate the service class that is unchecked by default. Have you checked this box?

  Steven Davelaar,

  Oracle Mobile & Cloud A-team.

• "Custom Resource" vCAC 6 Plugin available

  Hello

  Does anyone know of a way that you can set up a custom resource (created in the advanced service designer vCAC) in a vCO workflow? If not, is there anyway you can run the Service Blueprints of vCO - I noticed that these only show the Blues in the vCAC plugin.

  Thank you

  Not yet.

  The vCAC you use plug-in only covers the IaaS API (the part based on Windows). A plug-in for the API of COFFEE vCAC6 vCO will be released in a future release.

• Provision of resources in IOM 10 g

  Hello
  
  Can buy us directly a resource to a user at the end of the process task?
  for example I am manually provisioning a resource a user at the end to create the task of the user, I am attaching another task, which puts into service a new resource for this user, based on certain criteria. All form of process attributes are pre filled in this new resource and AutoSave is not checked. I have to define the process for this resource form in the code? Or provisionResource (take, objectkey) API work?
  
  Thank you.

  I created a Java task to achieve, without using automatic backup.

• Failed to provision AD resource.

  I'm unable to provision of resources to the user of the IOM.
  
  I have deployed the connector AD successfully
  Given the following resource settings to manage IT and ADITResource edition...
  
  ADAM LockoutThreshold Value = 5
  Definition of ad = Lookup.ADReconciliation.GroupLookup research group
  Domain admin [email protected] FULL name
  Admin password = *.
  The provision of the password = yes
  AtMap = AtMap.ADGroup ad group
  = AtMap.AD AtMap ADUser
  Reverse full name = no
  Port number = 636
  Research of Remote Manager Prov = AtMap.AD.RemoteScriptlookUp
  Script path Prov. Remote Manager = EMPTY
  Context root = dc = Ad, dc = ots, dc = com
  192.168.1.56 = server address
  Local target: TimeZone = GMT
  UPN = VACUUM field
  Use SSL = no.
  Feel = no
  isUserDeleteLeafNode = no
  
  I created the user in the Console of Administration of IOM.
  Then added resource (AD IT Resource) resources of the user...
  But its status is still 'supply' and I do not see the user created in Active Directory
  
  When I tested the commissioning with diagnostic dashboard
  He failed and gave
  
  ITResource of the informative values are not correct. Enter the correct values.
  The cause is...
  java.lang.reflect.InvocationTargetException
  at weblogic.rmi.internal.ServerRequest.sendReceive(ServerRequest.java:205)
  at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:345)
  at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:259)
  at oracle.iam.diagnostic.api.DiagnosticService_bawi9p_DiagnosticServiceRemoteImpl_1033_WLStub.testConnectorx (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:84)
  to $Proxy350.testConnectorx (Unknown Source)
  at oracle.iam.diagnostic.api.DiagnosticServiceDelegate.testConnector (unknown Source)
  at com.thortech.xl.systemverification.tests.TestProvision.execute(TestProvision.java:248)
  at com.thortech.xl.systemverification.webapp.SystemVerificationServlet.doPost(SystemVerificationServlet.java:866)
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
  to weblogic.servlet.internal.StubSecurityHelper$ ServletServiceAction.run (StubSecurityHelper.java:227)
  at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
  at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
  at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
  at oracle.security.am.agent.wls.filters.OAMServletAuthenticationFilter.doFilter(OAMServletAuthenticationFilter.java:260)
  at oracle.security.am.agent.wls.filters.OAMValidationSystemFilter.doFilter(OAMValidationSystemFilter.java:133)
  at oracle.security.wls.oamagent.OAMAgentWrapperFilter.doFilter(OAMAgentWrapperFilter.java:121)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
  at com.thortech.xl.systemverification.webapp.SecurityFilter.doFilter(SecurityFilter.java:230)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
  at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:330)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
  to weblogic.servlet.internal.WebAppServletContext$ ServletInvocationAction.doIt (WebAppServletContext.java:3684)
  to weblogic.servlet.internal.WebAppServletContext$ ServletInvocationAction.run (WebAppServletContext.java:3650)
  at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
  at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
  at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
  at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
  at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
  at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
  at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
  Caused by: javax.naming.ServiceUnavailableException: 192.168.1.56:636; taken closed
  at com.sun.jndi.ldap.Connection.readReply(Connection.java:419)
  at com.sun.jndi.ldap.LdapClient.ldapBind(LdapClient.java:342)
  at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:192)
  at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2694)
  to com.sun.jndi.ldap.LdapCtx. (LdapCtx.java:293)
  at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
  at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)
  at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)
  at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)
  at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
  at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
  at javax.naming.InitialContext.init(InitialContext.java:223)
  to javax.naming.InitialContext. (InitialContext.java:198)
  to javax.naming.directory.InitialDirContext. (InitialDirContext.java:83)
  at com.thortech.xl.integration.ActiveDirectory.test.ADServerConnectorTest.getLDAPConnection (unknown Source)
  at com.thortech.xl.integration.ActiveDirectory.test.ADServerConnectorTest.testProvisioning (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at oracle.iam.diagnostic.impl.DiagnosticServiceImpl.testConnector(DiagnosticServiceImpl.java:201)
  at oracle.iam.diagnostic.api.DiagnosticServiceEJB.testConnectorx (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
  at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
  at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
  to $Proxy351.testConnectorx (Unknown Source)
  at oracle.iam.diagnostic.api.DiagnosticService_bawi9p_DiagnosticServiceRemoteImpl.testConnectorx(DiagnosticService_bawi9p_DiagnosticServiceRemoteImpl.java:329)
  at oracle.iam.diagnostic.api.DiagnosticService_bawi9p_DiagnosticServiceRemoteImpl_WLSkel.invoke (unknown Source)
  at weblogic.rmi.internal.ServerRequest.sendReceive(ServerRequest.java:174)
  at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:345)
  at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:259)
  at oracle.iam.diagnostic.api.DiagnosticService_bawi9p_DiagnosticServiceRemoteImpl_1033_WLStub.testConnectorx (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:84)
  to $Proxy350.testConnectorx (Unknown Source)
  at oracle.iam.diagnostic.api.DiagnosticServiceDelegate.testConnector (unknown Source)
  at com.thortech.xl.systemverification.tests.TestProvision.execute(TestProvision.java:256)
  at com.thortech.xl.systemverification.webapp.SystemVerificationServlet.doPost(SystemVerificationServlet.java:866)
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:821)
  to weblogic.servlet.internal.StubSecurityHelper$ ServletServiceAction.run (StubSecurityHelper.java:227)
  at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
  at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
  at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:27)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
  at oracle.security.am.agent.wls.filters.OAMServletAuthenticationFilter.doFilter(OAMServletAuthenticationFilter.java:260)
  at oracle.security.am.agent.wls.filters.OAMValidationSystemFilter.doFilter(OAMValidationSystemFilter.java:134)
  at oracle.security.wls.oamagent.OAMAgentWrapperFilter.doFilter(OAMAgentWrapperFilter.java:121)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
  at com.thortech.xl.systemverification.webapp.SecurityFilter.doFilter(SecurityFilter.java:232)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
  at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:330)
  at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
  ... 9 more
  
  Please help me out if there is problem in parameter or any other

  We won't port number value. It should be 389

  only 636 for SSL. in your case use SSL = no.

  Even put UPN domain = Ad.ots.com

  Kind regards
  Nayan

  Published by: Zaba Nayan on January 16, 2012 12:48

• Deleting items in the resource profile

  Hello
  
  I had a misconfigured adapter AD test provisioning users, and now the resource names are stuck in a permanent status of "Provisioning". Inside, all tasks "cancelled." Can I do something to remove resources 'AD User"profile of the user of resources bad?
  
  Thank you very much
  Alex

  This is an extract from the document:

  You can use the archive utility task to archive the following types of tasks:
  -Commissioning of the tasks for instances of resources that have been revoked for disabled or deleted users
  -Tasks of provisioning for instances of resources that have been revoked
  -Approval tasks with a State of the application of the full application, request cancelled or subject approval complete

  So it should work in this case as well.

  Thank you

  Sunny

• Cannot delete orphans actions in Windows 7

  I have cloned my hard drive and replaced by a larger. In the process, I temporarily deleted all the other drives. One of them had some "shared folders".

  Now I have the largest disk and have deleted a "recovery" partition, I have several actions that have been in a different drive letter and are now: "not accessible" and cannot be opened: "could not start Explorer hosted to..." »

  Command prompt "net share/delete xxxxx" said that they do not exist.

  Computer Management shows them, but the only option is the 'open '.

  Mountvol.exe does not recognize that the orphaned drive letter part therefore cannot remove any mount point.

  While they are there... but can not be referenced or removed.

  Any help with this would be most appreciated.

  Mountvol will only show local readers, not the network shares.

  If you are sure that you watch them actions (which I doubt) then you can remove them here: HKLM\system\currentcontrolset\services\lanmanserver\shares. Better to create a restore point before the registry of hacking and to check that your repair CD Windows 7 is good nick.

• Create a custom resource account report?

  Is it possible to create a statement of account personalized IOM instead of use the off status of the box (for example configured, enabled, disabled, etc.)?

  I want to set up a new status of the object and use it when a certain task of process is completed successfully.

  

  I found a blog post that illustrates this:

  Oracle Stack: IOM statement resource custom

  Hope that helps!

• Provision of resources

  Hi all
  
  I use the product suite of...
  
  IDM 11g (11.1.1.5.1), the Backend Database Oracle 11 GR 2, Weblogic 1.3.5.
  
  I have a single resource TAG, I created a user in IDM (as a person authorized resource or resources Admin) and you want to enable rights (lead) provision this GTC resource to users in IDM.
  
  1. I have assigned this user (created as) authorization policy 'user management Administration policy '.
  2 - I added it in the "Authorized persons" resource of the object as well as the "directors".
  3. I assigned the rights to the "process definition" as an administrator.
  4. I have it said that 'Administrator' on the process of form for this resource.
  
  Now when this user plug-in software component logs to the IDM Web console it can search users and resources, tab of any user can "+" add resources to the user and process is said that the "commissioning has been launched.
  Then the State of the resource is displayed as "Provisioning" and in the window 'Resource history' it shows the status of task "Create User" as "Refused" and attributed to the "[XELSYSADM] system administrator"
  Now if I open it as xelsysadm and retry the same task, the user gets put in service.
  I need to know that this 'right' I'm missing to assign to this user (resource person authorized / administrator) which prevents to carry out the task "Create User"? And even the resource to revoke is also not made.
  
  Thank you

  You can check the permission on the COMPUTER resources?

  Thank you
  Suren

• Provisioning AD - resource have revoked

  Hi all
  
  
  I have an access strategy for AD service and when it relates is no longer a user the resource is to be revoked.
  
  I changed the access policy so that the resource is not be revoked. So, even when the user does not come under this access policy more access AD still exists.
  
  Instead, when a user moves an IOM Group (for example...) AD) to another, I want the AD resource must be disabled.
  
  Can anyone suggest how to proceed.
  
  
  Thank you
  M

  Well another solution. Just, this avoids the use of the adapter of the entity. But this implies that the user is moved or groups using group membership rules , which is in turn based on any attribute. Because I don't expect that your admin IOM would do this ranking in a group and the revocation manually. So let's assume that you have been awarded membership rules on a name of the IOM user profile attribute. If s = name type:

  -Then create this task change of forename on the process of definition of the Users of Xellerate. Now, to create the controls of whiich adapter if - old value of name = s and the new value does not match s then call IOM API to disable the account using disableAppForUser API.

  Now if you go with the suggested approach of Rajiv then make sure you have the controls themselves as well. As if the group is not AD then before deactivation, confirm that this user has an AD account provisioned as well. And another point is only for users who have nothing to with the ad group, the adapter of the entity will call himself, although he wouldn't do anything (if you have actual controls). So just a concern DB we should use less adapters entity as much as possible.

  Thank you

  Sunny