Sometimes a manager or employee requests a role and sets an expiration
date by accident. Date modification is not available from the user
application, but I (admin) can delete the date by going directly to the
user's nrfAssignedRoles attribute.

My question is: Do I need to also delete the nrfNextExpiration attribute
if I remove the <end_tm>20131231120000Z</end_tm> section of the
nrfAssignedRoles entry?


johnbirkmeier's Profile:
View this thread: