We have IDM 4.0.2 in Windows. We have 15000+ roles (nrfRole) in IDM that
gives AD groups access in AD, technical role access in SAP clients etc.

we used to assign users to roles in bulk.
Example, 500 users to 20 roles in IDM. Initially, It took 4 hours to
complete the role assignment by the roles driver. We do it everyweek as
per the requirement.

But after few months, Now when we assign 500 users to 20 roles - same
scenario, it takes too much time, 10 hours. We have reduced the log
level to 0, but still it takes more time.

Please let us know if there is any tuning that can be done in IDM or
driver to increase the roles driver performance.


nvldk's Profile: https://forums.netiq.com/member.php?userid=8443
View this thread: https://forums.netiq.com/showthread.php?t=53170