Hi,

Using IdM 4.5.4
I am trying to make a rule that removes roles when I migrate an object
through a driver.

The driver will not start, and complains about something I cannot figure
out what is:


[07/16/17 11:38:38.858]:NULL-ReassignRolesToPrimAffils ST:Error
initializing policy.
[07/16/17 11:38:38.862]:NULL-ReassignRolesToPrimAffils ST:
DirXML Log Event -------------------
Driver: \FMKMETA\dk\services\idm\Driver Set\NULL-
ReassignRolesToPrimAffils
Channel: Subscriber
Status: Error
Message: Code(-9128) Error in vnd.nds.stream://FMKMETA/dk/services/
idm/Driver+Set/NULL-ReassignRolesToPrimAffils/Subscriber/Add+And+Remove
+Role+Assignments#XmlData:96 : An invalid value 'name' is specified for
attribute 'arg-string' on element '{3}'.
[07/16/17 11:38:38.865]:NULL-ReassignRolesToPrimAffils STriver
terminated.
[07/16/17 11:38:38.866]:NULL-ReassignRolesToPrimAffils ST:Writing XML
attribute vnd.nds.stream://FMKMETA/dk/services/idm/Driver+Set/NULL-
ReassignRolesToPrimAffils#DirXML-PersistentData.

Relevant part (driver starts without this rule)

<do-remove-role id="$lUAAdmin$" role-id="$lCurrentRoleLDAP$" time-
out="30000" url="~idv.workflow.url~">
<arg-password>
<token-named-password name="UAADMIN"/>
</arg-password>
<arg-string name="role-assignment-type">
<token-text xml:space="preserve">USER_TO_ROLE</token-text>
</arg-string>
<arg-string name="description">
<token-text xml:space="preserve">Reassign from user to
primary affil</token-text>
</arg-string>
<arg-string name="effective-time">
<token-time format="!CTIME" tz="CET"/>
</arg-string>
</do-remove-role>

What am I doing wrong here?