How to do Archiving of deleted & disabled users in OIM11g

Hi All,
As per the requirement we have to do archive of deleted & disabled users in OIM11g(11.1.1.2) after 75days. Can i know how can i achieve this?
Regards,
user7609

Just to recap:
Your client requirement is to archive users out of OIM after 75 days. This means in addition to actually disabling and/or deleting them, fully removing any traces of them from the system.
As Kevin & GP said, OIM is just not built to do this. API alone is not going to accomplish this task... you'll also need to include SQL to actually drop data out of tables.
All that being said, your post said the reason for this was because of a "license for limited users". Oracle Identity Manager is licensed on an active user basis. You really should talk with your Oracle rep to confirm, but I've never had licensing contracts include deleted/disabled users.

Similar Messages

  • How to Use PowerShell to Delete FIM Users That Have a Null attribute name

    FIM Community Information Center Article
    Wiki Page:
    How to Use PowerShell to Delete FIM Users That Have a Null <attribute name>
    Go to the FIM Community Information Center
    Mike Crowley | MVP
    My Blog --
    Planet Technologies

    Have you run side-by-side metrics on this?
    I've run the Delete Object method and your script against similar data sets and yours appears to take a fair bit longer. I'd have to re-run in identical circumstances, a few times, to really say for sure, but my initial impression is that it will take hours
    longer.
    I guess the point is somewhat moot anyway, as for me the bit that generally takes longest is the actual query, rather than the deletions.
    Boy how I wish I could just enter something into the FIM Portal directly that would blast out a bunch of users matching a query. One day...
    FIMSpecialist.com | MCTS: FIM 2010 | Now Offering
    ECMA1->ECMA2 Upgrade Services

  • How to delete disabled users in SCCM 2012

    Currently we disable user accounts in AD and then move them to a different OU which they stay for 6 - 12 months.
    How can I identify those disabled users accounts and delete them form the SCCM console?
    Thank you

    Thanks for the response but there wasn't a process in place so was tasked with a one time cleanup and we don't have Orchestrator in place.
    I ended up doing the following:
    1.Use a powershell script to output all disabled user ID's
    Get-ADUser
    -Filter 'Enabled -eq $false'
    |Select-Object
    samaccountname
    2. Setup a Query on a collection to gather all these users ID's
    select *  from  SMS_R_User where SMS_R_User.UserName in ("User1", "user2")
    3. Delete the users in the collection

  • How to check who had deleted the user?

    Hi all,
    An important user got deleted in the EP  production server.4 people are having administartor access.How to trace who deleted the user?Is there anyway to trace this?
    Thanks and Regards,
    Rajesh

    Hi Rajesh,
    you can check the ACL Audit Logging as described here: http://help.sap.com/saphelp_nw70/helpdata/EN/f7/61c01fbf2b4c4891e586ca5a44a351/frameset.htm
    In the security.<n>.log should have an entry like this
    <user ID> ACL.USER.DELETE <deleted user ID>
    Hope this helps,
    Robert

  • How to view/edit/delete the user created profile in oracle 9i? Very Urgent

    Friends,
    I logged in as system in oracle 9i.
    SQL> create profile testpro limit
    2 idle_time 1;
    Profile created.
    SQL> alter user scott profile testpro;
    User altered.
    Then i logged in to sqlplusw as a scott user.
    and i waited for 10 mins after that.
    sql> select * from cat;
    its working......
    how come? i have already set a idle time to 1 minute.
    Please correct me if im wrong.
    Also, how can i view/edit/delete the user created profile.
    Thanks & Regards
    Sathyguy
    Message was edited by:
    sathyguy

    The resource limits set for a profile are enforced only when you enable resource limitation for the database.
    Enabling and Disabling Resource Limits While the Database is Open
    ALTER SYSTEM SET RESOURCE_LIMIT = TRUE;
    http://download-west.oracle.com/docs/cd/B10501_01/server.920/a96521/users.htm#15451
    Manu

  • Disabling User specific/Default Setting

    In the output of CV04n selection while 'Save Layout' how is it possible to enable/disable
    'User Specific' or 'Default setting'

    Hi,
    Did you mean Set or enable / disable? Anyways if you want to set, you can do it as follows:
    1. Global: I.e. Available for all
    Selection Variant: Global     do not toggle the User specific box
    Description: XYZ
    2. User Specific: Available only for the user
    Selection Variant: aaa   Toggle the user specific box.
    Description: uvw
    If this doesn't answer your query, please explain further.
    regards
    C

  • Using Powershell to delete all users from the Portal

    Summary
    This script will delete all users from the Portal except for Administrator and the Built-In Sync account.
    Based on Markus's "Delete a User" script.
    Useful when developing your system if you want to quickly clear out the data and start again.
    set-variable -name URI -value "http://localhost:5725/resourcemanagementservice' " -option constant
    function DeleteObject
    PARAM($objectType, $objectId)
    END
    $importObject = New-Object Microsoft.ResourceManagement.Automation.ObjectModel.ImportObject
    $importObject.ObjectType = $objectType
    $importObject.TargetObjectIdentifier = $objectId
    $importObject.SourceObjectIdentifier = $objectId
    $importObject.State = 2
    $importObject | Import-FIMConfig -uri $URI
    if(@(get-pssnapin | where-object {$_.Name -eq "FIMAutomation"} ).count -eq 0) {add-pssnapin FIMAutomation}
    $allobjects = export-fimconfig -uri $URI `
    –onlyBaseResources `
    -customconfig "/Person"
    $allobjects | Foreach-Object {
    $displayName = $_.ResourceManagementObject.ResourceManagementAttributes | `
    Where-Object {$_.AttributeName -eq "DisplayName"}
    if([string]::Compare($displayName.Value, "Administrator", $True) -eq 0)
    {write-host "Administrator NOT deleted"}
    elseif([string]::Compare($displayName.Value, "Built-in Synchronization Account", $True) -eq 0)
    {write-host "Built-in Synchronization Account NOT deleted"}
    else {
    $objectId = (($_.ResourceManagementObject.ObjectIdentifier).split(":"))[2]
    DeleteObject -objectType "Person" `
    -objectId $objectId
    write-host "`nObject deleted`n" $displayName.Value }
    Go to the FIM ScriptBox
    http://www.wapshere.com/missmiis

    The DeleteObject function opens and closes a connection for each object.  This approach is faster:
    http://social.technet.microsoft.com/wiki/contents/articles/23570.how-to-use-powershell-to-delete-fim-users-that-have-a-null-attribute-name.aspx
    Mike Crowley | MVP
    My Blog --
    Planet Technologies

  • Delete saved user name

    I accidentally saved a user name containing a capital letter instead of a small letter. Now I can't log in. How can I correct or delete the user name?

    Thanks! I can now enter the correct log in name without the incorrect name being auto filled. The incorrect name is still appearing as an optional log in name. Is there a way to delete the incorrect name so it doesn't appear when I try to log in?

  • How to stop user profiles clean-up job from deleting Active users.

    Hi,
    Somehow bunch of active users profile are marked for deletions and their managers have received email saying it will be deleted in X days.
    I know if we disable My Site Clean Up Job, it will not delete any profiles. But I want that job to continue running and stop active user profiles from getting deleted.
    How do I proceed here...
    Thanks,
    Abhilash

    Hi Abhilash,
    I understand SharePoint 2010 MySite clean up timer job is deleting active user profiles.
    Firstly, I need to confirm with you that the timer job will work on below two situations:
    1.When you use the web UI in Central Administration to delete a user profile
    2.When a user who was included in a previous user profile import is no longer included in the import. 
    The second point bears a little more explanation, please refer to How Is A User Profile Deleted?
    in the article below:
    http://blogs.msdn.com/b/kaevans/archive/2012/06/25/top-recommendations-for-managing-the-my-site-cleanup-timer-job.aspx
    Let me know if you situation is not included in the above two.
    Regards,
    Rebecca Tu
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • How to delete a user in SAP-CPS Version 7.0

    Hello,
    I created my users via UME ( User Management Engine of Java Application server). Unfortunately I used the wrong name convention, so I had to recreate all the users in UME. Afterwards I delete all wrong users in UME.
    Than I tried to login with my new user in SAP-CPS (users are normally created in SAP-CPS during first login) but I get the error message that I reached the maximum number of 10 users allowed in the basic version. No problem I thougt, I simply delete the wrong ones in SAP-CPS. But I do not know how to delete a user! I could not find any menu item or any describtion in the manualls how to delete an user in SAP-CPS.
    I remove the users from any Isolation group, I disabled all the users but still I could not find any way to delete them.
    Has any body a hint for mor.
    Kind regards
    Frank Morleo

    Hello Anton,
    deactivating the unused users made it possible to login with the new ones. 
    Thanks for your help.
    Now I have to find out how to clear the deactivated users from the list.
    Regards
    Frank

  • Disabling User instead of deleting

    I'm using OIM 9031.
    I've created a custom access policy which grants user a resource (OEBS) based on his group membership.
    When user is no longer a member of group, his account is deleted from assigned resource. How do I change the behavior of OIM so that user account in OEBS would be blocked instead of completely deleted?

    Yes, I want the account to be reanabled after the user is a member of a group again. No idea how to change the provisioning workflow...
    Maybe, I should add two new tasks, for enabling/disabling user, but then I must somehow incorporate 'enable user' task into my workflow. It may require 3rd task which checks if user account already exists (e.g. is user already provisioned the resource) and depending on response code, it may launch either create or enable task...

  • Enabling/Disabling/Deleting AD users - Xellerate

    Hi,
    I have trusted resource reconciliation from AD to Xellerate. So, I am able to create/modify a user in AD and this will create/update the user in Xellerate.
    But, how can I implement disable, enable and delete user logic such that when a user is disabled/enabled/delete from AD then this will be reflected in Xellerate?
    Any help is greatly appreciated. Thanks in advance!

    Hi,
    Disable Users: Nobody can log in to the mailbox, but the data is safe and it can receive email. Once it is enabled, it is back to normal.
    Delete Users: when the user is deleted all the services are removed and all data is erased. The user is deleted from our Active Directory. If you create a user with the same Name and Emial address again, no data or services are recovered.
    If you disable a user, the Active Directory object remains untouched together with the mailbox data and properties, but you will not be able to access any mailbox data.
    If you delete a user, the Active Directory object is removed together with all data and properties of the user.
    Hope it helps.
    Regards,
    Blair Deng
    Blair Deng
    TechNet Community Support

  • Locate, identify and delete/disable a remote sharer/user

    How can I locate, identify and delete/disable a remote user?
    I have already disabled guest account, disabled and locked share files etc.yet I still suspect they are accesssing my hard drive and internet.
    I also want to know if it is possible to find a username of the remote user on my hard drive that can possibly identify them?
    Thank you

    Thanks Eric, i have turned on the firewall recently, and after your advice just checked the terminal. As I had to re-install OS X Ia am the only user in history, But that is Useful to know for the future. At times, when I open security, share or accounts in System Preferences I find the padlock unlocked. Especially of late when I am very mindful of double checking they are locked before I close down that window.
    I Suspect an ex friend who is a workmate accessed my computer or took my original start-up disks, then returned without knowing, is there any way of knowing if they have access on their computer from using those discs somehow? I Know it sounds all too 'conspiracy theory', lol,  but it is something I've had brought to my attention.
    Thanks, your advice is appreciated

  • How do you remove a deleted user's cyrus mailbox?

    Hi everyone,
    I am having a little trouble with a user's account on Mac OS X 10.4.8 Server. This is a short description of what has happened.
    1. Created a user in WGM.
    2. User then sends and recieves lots of email over a long period, with no apparent issues and uses the webmail interface as well as pop3 mail application on home PC (as expected!).
    3. User uses webmail one day and discovers a server error in red writing.
    4. Semi intelligent server admin guy (me) decides to delete the user account in WGM and then re-create the user in WGM in the hope of deleting the mailbox in the process.
    5. Semi intelligent server admin guy discovers that the delete/re-create procedure doesnt remove the mailbox so he decides to search apple support forums.
    Hence the reason for this post. Can anybody show me how to delete the mailbox for a user, either in GUI server admin or WGM or even terminal?
    Also I have tried adding the diradmin account to the list of cyrus admins in imapd.conf so that the IMAP application can access all mailboxes but I only get read access, so I cant delete it that way, well unless I skipped a step.
    Thanks in advance,
    Kyran McGlasson

    Yes, I saw that but was a tad puzzled. I see in your help file that you advise creating a new user for imap administration, but (lazy me) I just plugged my server admin into the imapd.conf file and did not create a separate user. My thinking was that the OSX Server mail manual states:
    1 In Server Admin, select Mail in the Computers & Services pane.
    2 Click Settings.
    3 Select the General tab and select Enable IMAP, if it is not already checked.
    4 Select an existing user or create a new user using Workgroup Manger to be an IMAP
    administrator.
    5 If you have not created a user record for the mail administrator’s account, see the user
    management guide.
    6 Open /etc/imapd.conf in a text editor.
    If you are not comfortable using a terminal text editor like emacs or vi, you can use
    TextEdit.
    7 Find the line that reads “admins:”
    8 Edit the line to add the UID number of the administrator account after the colon.
    9 Save your changes.
    10 In your email client application, create an account that uses IMAP to connect to your
    mail service using the mail administrator name.
    For more information, see the man page for imapd.conf.
    And therefore I didn't think a separate user necessary. However, even using their method, I cannot connect to the folders via a client, so I gather you are correct!
    So, I create a separate user, name him "imapadmin" or some such, mod the imapd.conf file accordingly, restart, and then . . . how do I give my new imapadmin the necessary permissions?
    I can, by the bye, delete folders using the direct Cyrus Admin method spelled out on pterobyte's site here:
    http://downloads.topicdesk.com/docs/ProperlyDeleting_OS_X_Server_MailUsers.pdf
    Thanks for the quick reply (on a Saturday!) and for crafting this very cool GUI.
    Lost count   Mac OS X (10.4.9)  

  • How do I get my deleted emails to go to the deleted items in Outlook and not the archived folder?

    How do I get my deleted emails to go to the deleted items in Outlook and not the archived folder?

    Who is the email account provider?
    With an Apple iCloud account, there is a preference setting with the account settings on the iPhone to archive messages - save deleted messages in your Archive folder.
    I believe the same is available with a Gmail account.

Maybe you are looking for