Hello,

When I change the resource by adding an additional entitlement all users
already assigned to the resource are not updated.

Is this a normal behaviour with IDM 4.5 RBPM ?

If yes, does anyone has already made a IDM policy rule that make the
update to the assigned users ?

Here is the event that show the update of the resource, then we must
look for all users with the assigned resource.

<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.5.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<modify cached-time="20150609142418.881Z" class-name="nrfResource"
event-id="idm45-01#20150609142418#1#1:a911b596-09e4-4fc3-88a1-96b511a9e409"
qualified-src-dn="O=system\CN=Driver Set\CN
=UserApplication\CN=AppConfig\CN=RoleConfig\CN=Res ourceDefs\CN=XXX-Groupe-Direction"
src-dn="\IDVAULT\system\Driver
Set\UserApplication\AppConfig\RoleConfig\ResourceD efs\XXXX-Groupe-Directi
on" src-entry-id="33512" timestamp="1433859858#1">
<modify-attr attr-name="nrfEntitlementRef">
<add-value>
<value timestamp="1433859858#1" type="structured">
<component name="nameSpace">1</component>
<component name="volume">\IDVAULT\system\Driver Set\Active
Directory Driver\Group</component>
<component name="path">&lt;?xml version="1.0"
encoding="UTF-8"?>&lt;ref>
&lt;src>UA&lt;/src>
&lt;id/>
&lt;param>{"ID":"98accef0d719b8498721497cf931b1c1" ,"ID2":"CN=XXX_GG_Infirmiers_niv1,OU=groups,OU=xxx ,DC=mydom,DC=com"}&lt;/param>
&lt;/ref>
</component>
</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>

Thanks

Sylvain


--
sma
------------------------------------------------------------------------
sma's Profile: https://forums.netiq.com/member.php?userid=174
View this thread: https://forums.netiq.com/showthread.php?t=53647