Multi Value Recertification in Role Manager

Hi Everybody,
Is there anything(feature) called multi valued recertification in role manager(OIA).
Regards,
Ravindra

Hi Rav,
When you talk about 'radio buttons' and right side/left side, It sounds like you're using SRM 4.x instead of OIA 11g am I correct, if not then can you tell us what version you're using?
In SRM you see on the left-hand side the attribute, then attribute values assoicated to that attribute on the right hand side
(In OIA its all grouped together in step 2)
Simple answer, YES, you can bring an attribute as multiple values, and also bring in, what I believe is that you want, attribtue values assoicated to that attribute
Example below, Attribute 1 has 'multiple values', Attribute 2 has multiple values associated to that attribute
Application
.....|______ Attribute 1 = Value 1
.....|______ Attribute 1 = Value 2
.....|______ Attribute 2
.........................|_____ Attribute Value 1
.........................|_____ Attribute Value 2
To get Attribute 2 results, you need to bring in the data as a XML to get that hierarchal structure as a CSV will only give you that 1 depth.
Regards,
Daniel
Edited by: Daniel Redfern on 12-Jun-2011 02:01
Edited by: Daniel Redfern on 12-Jun-2011 02:03

Similar Messages

Nested groups ,multi-valued groups,nested roles ,multi-valued roles

Does OID support
1)groups, nested groups and multi-valued groups
2)nested roles and multi-valued roles
Thanks in advance

You will typically see problems when multi-valued attributes are in the range of 10k-20k values. 10 values in a multi-valued attribute should not have much impact at all.

Using "Update All Mapped Fields" with multi-value attributes

Is it possible to update a value in a multi-value attribute through the import manager? It appears that if a source value is different then it just gets added as another value to the record.
For example, a product has an attribute of speed which is measured in revolutions/minute. Some products can be rated at two speeds (i.e. 1800/3600).
I created a numeric attribute for speed and enable only nominal rating and selected multi-valued.
In import manager, I set "/" as multi delimiter for source field. This created two entries in destination attribute, 1800 and 3600.
However, if on subsequent imports the speed values changes for this record (i.e. 1200 and 1800) then I will now have 1200, 1800, and 3600 as values for this record.
Would the proper solution be to create two individual numeric attributes that are single valued (i.e. Speed1 and Speed2)?

Hi Aaron,
in your example it would make sense to use two different attributes called "Speed1" and "Speed2". Using the multi value option, MDM allows you to store a list of values into a single field. This list is more or less unlimited, you can add as many values as you like. A change of an existing value is not possible. The reason is that Import Manager does not know, which value you've changed! So it simply adds the "new" record (which is the 1200 in your example) to your value list. This is the intended behaviour of the "update all mapped fields option". If you really want to replace the values, you can check if the "Replace" option is useable for you. But note, that the replace will replace the complete existing record with the incoming new one. This means if the product you want to import with the replace option is smaller than the existing one (maybe it does not contain values for all segments), you'll loose data in MDM.
BR Michael

MDM Import Manager - remove multiple values from a multi valued fiedl

Hi,
We have this multi-valued field and we would like to clean the values from it.
How can we do this using MDM Import Manager?
Example:
Article A
Field XPTO has values Z, T and P.
We want this field XPTO with no values. How can we do a mass actualization to clean the field for some articles?
Thanks and regards,
Maria

*We have this multi-valued field and we would like to clean the values from it.
How can we do this using MDM Import Manager?
Example:
Article A
Field XPTO has values Z, T and P.
We want this field XPTO with no values. How can we do a mass actualization to clean the field for some articles?*
Hi Maria,
There can be multiple ways to achieve this -
1.After doing field mapping for XPTO you can set conversion filter for each of the values.
2.Value map with NULL.
3.Trigger a Workflow on import/record add,run assignment and make that field NULL.
4.Run mass update for conditional assignment based on that value of XPTO.
There can be more ways,whichever suits you best you can go ahead with that.
Hope it helped
Regards,
Ravi

Result Type Condition for Multi value Manage Property not working

Hi All,
I have created one template & I wanted to show this template on particular condition. So I created the result type. The Managed property (MP) that I used, I have verified its attributes all attributes are selected and its type is Multi value. I am trying
to apply the "Show fewer conditions" and some how the value not matched.
I have checked MP ; it has all the values but some how the template not called. When I removed this condition it working and when choose other MP other then Multi valued. It is working as expected.
Please let me know if i miss something here.
PS: I have checked each option from the Query drop down like "Equals any of" and "Contains any of" not working in case of multi value attribute. Please help.
I have explain this issue more details in this post : http://sharepointfordeveloper.blogspot.com/2015/02/sharepoint-search-2013-result-type-with.html
Regards,
Basant Pandey
http://sharepointfordeveloper.blogspot.com

Update on above mentioned issue.
I have verified the same at my end. So I come to this conclusion this is product issue. Either need to raise the ticket to Microsoft related to this issue.
Regards,
Basant Pandey
http://sharepointfordeveloper.blogspot.com

OAM : Multi-valued attribute in Authorization Rule Actions

Our application is protected by an Oracle Access Manager deployment, where the identity user base is based in an Oracle Internet Directory.
In the OID, for every user entry, we have a multi valued attribute (say, 'roleattr') which contains the roles recognized in our application. Once the user is authenticated by the Access Server, we need the roles associated to him to be fetched and returned in the page header (similar to uid).
Hence, our question is, in PolicyManager, by setting the Authorization Rule > Actions, is it possible to retrieve this attribute (which is 'multivalued') and populated into the pageHeader, so that our application can retrieve the same.

Sure, you'll get a colon-delimited list of the multiple values in your header!
-Vinod

How to import multi-value reference with Granfeldt PowerShell MA?

Hi,
I am trying to import multi-value reference into FIM (Group object).
I can import all attributes from source SQL, except Multivalue reference (into members attribute on Group object).
I have defined schema like this:
$obj = New-Object -Type PSCustomObject
$obj | Add-Member -Type NoteProperty -Name "Anchor-axs_profid|String" -Value ""
$obj | Add-Member -Type NoteProperty -Name "objectClass|String" -Value "role"
$obj | Add-Member -Type NoteProperty -Name "name|String" -Value ""
$obj | Add-Member -Type NoteProperty -Name "member|Reference[]" -Value ""
$obj
On source attribute I have members defined in one attribute, divided by ",".
Import script:
$Obj = @{}
$Obj.Add("objectClass", "role")
$Obj.Add("[DN]", "Role_"+$Object.$("axs_profid"))
$Obj.Add("axs_profid", $Object.$("axs_profid").ToString())
$Obj.Add("name", $Object.$("name").ToString())
if($Object.$("member").ToString() -ne "")
[string[]]$members = $Object.$("member").ToString().Split(',')
$Obj.Add("member", $members)
$Obj
When Full import is triggered, I get following error for roles with multiple users:
FIM Sync = staging-error
Event log =
The server encountered an unexpected error in the synchronization engine:
"BAIL: MMS(9588): d:\bt\32669\private\source\miis\shared\utils\libutils.cpp(7045): 0x8023040e (The distinguished name is invalid)
BAIL: MMS(9588): d:\bt\32669\private\source\miis\server\sqlstore\utils.cpp(229): 0x8023040e (The distinguished name is invalid)
BAIL: MMS(9588): d:\bt\32669\private\source\miis\server\sqlstore\nscsimp.cpp(5348): 0x8023040e (The distinguished name is invalid)
BAIL: MMS(9588): d:\bt\32669\private\source\miis\server\sqlstore\nscsimp.cpp(5753): 0x8023040e (The distinguished name is invalid)
BAIL: MMS(9588): d:\bt\32669\private\source\miis\server\sqlstore\nscsimp.cpp(686): 0x8023040e (The distinguished name is invalid)
BAIL: MMS(9588): d:\bt\32669\private\source\miis\server\sqlstore\csobj.cpp(12876): 0x8023040e (The distinguished name is invalid)
BAIL: MMS(9588): d:\bt\32669\private\source\miis\server\sqlstore\csobj.cpp(13976): 0x8023040e (The distinguished name is invalid)
BAIL: MMS(9588): d:\bt\32669\private\source\miis\server\sqlstore\csobj.h(1252): 0x8023040e (The distinguished name is invalid)
ERR_: MMS(9588): d:\bt\32669\private\source\miis\server\sync\syncstage.cpp(2018): ERR_: MMS(9588): d:\bt\32669\private\source\miis\server\sync\syncstage.cpp(612): ERR_: MMS(9588): d:\bt\32669\private\source\miis\server\sync\syncstage.cpp(647): Staging failed
0x8023040e: [21]ERR_: MMS(9588): d:\bt\32669\private\source\miis\server\sync\syncmonitor.cpp(2528): SE: Rollback SQL transaction for: 0x8023040e
Forefront Identity Manager 4.1.3559.0"
If I change the script to return only first member:
$Obj.Add("member", $members[0])
import is successfull and I can see referenced member in Group.
I have also tried to specify DN for both users and roles with the same outcome.
$Obj.Add("[DN]", "Role_"+$Object.$("axs_profid"))
I am using the latest version of PSMA: 5.5
Thanks for your help guys!

I managed to solve this issue.
The problem was in string array (I always appended "," at the end of each value). MA then expected another value after the last comma.
The wrong approach:
[string[]]$members = $Object.$("member").ToString().Split(',')
The right approach:
[string[]]$members = $Object.$("member").ToString().TrimEnd(',').Split(',')

OIM: Help understanding Multi-Valued fields

I'm having a bit of trouble passing the values of a multi-value field into an adapter and I think I have the whole structure of how this works wrong.
I have a custom RO where a user can select multiple custom defined "Roles". I want to pass the selection of these roles to an adapter for processing. I thought I could just pass the variable name selectedRoles and it would automatically concatenate them into a string delimited by "|".
is this not the case? How would I process the selections made by the user? I have the whole process working, form wise. It's just I can't seem to pass the selected roles into an adapter.
Any ideas?
When I try to map adapter variable to Process Data -> (Child Table) Roles -> Role Name I get this error:
ERROR,27 Sep 2010 12:35:08,289,[XELLERATE.DATABASE],select UD_ROLES_P_ROLENAME from UD_ROLES_P where UD_ROLES_P_KEY =
java.sql.SQLSyntaxErrorException: ORA-00936: missing expression
at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:91)
Edited by: Alex S on Sep 27, 2010 12:41 PM

Nops ! ! For child table data, your custom adapter or code would be called in every time for each value selected, so its not a string separated by a delimiter. Also its easier for OIM to manage these values individually rather than passing them as a string.
So your Process Data -> (Child Table) Roles -> Role Name mapping appears fine, but this would just pass one value at a time and then you have to call this adapter number of times based on the action insert, update or delete on child table data.
Thanks
Sunny

Retrieving empty values from multi value string in user profile custom properties

Hi,
I created a webpart to save and retrieve data from custom properties. I use the code below to get the stored data:
for (int i = 0; i < profile[property].Count; i++)
Item = profile[property][i] == null ? string.Empty : profile[property][i].ToString();
list.Add(Regex.Split(Item, @"\,\#"));
Nothinig special about it.
In my development environment, it works fine. The problem is in my UAT environment. I'm facing an issue that i hope someone has been through. When the custom property is a multi value string type, it returns a empty string. I tested with HTML and single
value fields and it works fine.
Independently of the field type, it saves the data all right.
Can anyone help me?
Thanks!!

Thanks, Chitvan Jain.
I did as you suggested, but nothing changed. The problem is that profile[propname] comes already blank when using multi value property, even if there is data to be retrieved.
One funny thing is that, somehow the code manages to count the number of values there is in the property. Only the data is missing. We can see the exact number of column, cause i check if there's the right number of data, if there isn't, i add up a empty
string on the grid cell, but only for viewing. The empty string is not stored in the property.

Multi value parameter issue.

We are facing some issue in SSRS report, whilst running SSRS report it shows as blank in the multi value parameter field when the <all> option is selected(character will be more than 20000). (Report server: MS windows server 2003 and 32 bit(GIRMSA3),
server: MS windows server 2008 and 64 bit)
Same is working in the SSRS Server and Citrix servers both are 32 bit , MS windows server 2003.
1. What is the Maximum Number of Values allowed in a SSRS 2008 Text Parameter Dropdown ? Is it configurable ?
2. What is the Maximum of Length of Select Values in a Text Parameter Dropdown in SSRS 2005 ? Is it configurable ?
Thanks
Vijay
Thanks Rai

Hi Vijay,
This is because of the following patch
“MS11-100 .Net Framework Security Update (KB 2656355)”. Applying this update limits the maximum number of form keys, files and JSON members to 1000 in a request.
Go to the reporting services installation folder.
Go to the report server folder and make a backup of the file “Web.config”. Once you have the backup, open the original file in notepad and add the following entry under the Configuration section:
<appSettings>
<add key="aspnet:MaxHttpCollectionKeys" value="30000"/>
</appSettings>
Go to the Report Manager folder and again make a backup of the file “Web.config”. Once you have the backup, open the original file in notepad and add the following entry under the appSettings tag:
< add key="aspnet:MaxHttpCollectionKeys" value="10000"/>
Once you do the above steps, you should be able to run the report without any issue.
Hope this helps.
Regards,
Charlie Liao
TechNet Community Support

Using Import Man to load Data into Multi Value Fileds in a Qualified Table

Hi there,
When using the Import Manager, i can not use the "append" option to load data into my multi value field which is contained within my qualified table.
Manually it works fine on Data manager, so the field has been set up correctly. Only problem is appending the data during Import Manager Load.
Any reason why I do not have this option available during Field mapping in Import Manager. The selection options are shown but in gray.
Would appreciate any sugestions.
Chris Huggett

Thanks Sowseel
Its a good document but doesn't address my problem, maybe My problem isn't clear.
The structure(part of) that I have currently is as follows.
Main Table - Material
                       QFTable- MNF PN
                           LUField - MNF Name(Qualifier Single Value)
                           LUField - BU ID (Non Qualifier Multi Value)
                           TField   - P/N- (Non Qualifier)
I know how to load data to the main and qualified tables, but what I can not do, using Import Manger, is updating the "LUField - BU ID (Non Qualifier Multi Value)" using the append functionality.
Thanks
Chris Huggett

GRC 10 Role Management - Mass Role Derivation

Hi All -
Does anyone know if it is possible to propagate the authorization data from multiple parent roles to their relevant child derived roles in mass in GRC 10?
Using the standard 'Role Management -> Role Maintenance' feature you can propagate one parent role's auth data to all it's children derived roles; or alternatively if accessing one child role you can copy the auth data from the parent role. Either of these options would require you to open each parent role or each child role to push/pull auth data from a parent role to a child role.
If this is not possible, it seems to leave a gap in the process of creating derived roles in mass?
Via the 'Role Mass Maintenance -> Role Derivation' feature you can create derived roles in mass across multiple parent roles with multiple levels of derivation from each using Org Maps. This will crate my derived roles and populate the organizational values only in PFCG. You can also update the derived role's org values in mass if they change by updating your Org Maps and using the 'Role Mass Maintenance -> Derived Role Org values Update' feature.
However these features do not propagate the non-org authorizations from the parent roles. Without a way to push/pull the non-org authorizations from the parent to the child, creating all the derived roles in mass doesn't quite actually create usable roles.
I've noticed when propagating authorization on a one-by-one basis, GRC creates a background job "Auth Data Propagate". I'm really just hoping there is a way to do this in mass and I am just missing the obvious. I also know it would be possible via an eCATT script directly in SAP, but I'm looking specifically for options via the GRC tool.
Thanks for the help!

Nick -
I actually just received a "final" response from SAP OSS support on this one. Had a note open for the past 9 months or so where apparently the product management & development teams were discussing this issue. The last update I received was about 10 days ago and essentially said this is not currently part of the tool:
"This is an enhancement and is not currently supported. We will take it up in a future release. Please log this in the ideaplace under Access Controls"
While I respect the decision, I can't necessarily say I agree that a "Mass Derivation" tool is working as intended if it cannot push / copy authorizations from a parent to a child role. If it can't create roles that are actually usable it would seem to be an issue with the current solution rather than a future enhancement imo.
The best workaround to this, is to utilize an eCATT script to go through all your derived roles you create in mass via GRC and have it go into PFCG and 'copy from' the parent authorizations and then regenerate the profiles. That will give you actually complete & usable roles in a semi-automated fashion.

SUN ROLE MANAGER INSTALLATION HASSLE

I am installing Sun Role Manager 5.0 on Tomcat 6.0.2
I am facing context initialization error when i deploye rbacx.war filerbacx.log file's content is as shown below. (This log file gets created in log folder of the tomcat server after deployment)
12:19:34,289 ERROR [ContextLoader] Context initialization failedorg.springframework.beans.factory.BeanCreationException: Error creating bean with name 'certificationEventListener' defined in ServletContext resource [WEB-INF/idc-context.xml]: Cannot resolve reference to bean 'rbacxIDCService' while setting bean property 'rbacxIDCService'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'rbacxIDCService' defined in ServletContext resource [WEB-INF/idc-context.xml]: Cannot resolve reference to bean 'rbacxIDWService' while setting bean property 'rbacxIDWService'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'rbacxIDWService' defined in ServletContext resource [WEB-INF/idw-context.xml]: Cannot resolve reference to bean 'mLRbacxRoleMiningService' while setting bean property 'roleMiningService'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'mLRbacxRoleMiningService' defined in ServletContext resource [WEB-INF/rolemining-context.xml]: Cannot resolve reference to bean 'roleMiningServiceTarget' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'roleMiningServiceTarget' defined in ServletContext resource [WEB-INF/rolemining-context.xml]: Cannot create inner bean 'mLRbacxRoleMiningServiceImpl' of type [com.vaau.rbacx.rolemining.service.impl.MLRbacxRoleMiningServiceImpl] while setting bean property 'rbacxRoleMiningService'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'mLRbacxRoleMiningServiceImpl' defined in ServletContext resource [WEB-INF/rolemining-context.xml]: Cannot resolve reference to bean 'roleMiningConfigurationManager' while setting bean property 'roleMiningConfigurationManager'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'roleMiningConfigurationManager' defined in ServletContext resource [WEB-INF/rolemining-context.xml]: Error setting property values; nested exception is org.springframework.beans.PropertyBatchUpdateException; nested PropertyAccessExceptions (1) are:
PropertyAccessException 1: org.springframework.beans.MethodInvocationException: Property 'normalize' threw exception; nested exception is com.thoughtworks.xstream.io.StreamException: : only whitespace content allowed before start tag and not \u0 (position: START_DOCUMENT seen \u0... @1:1)
     at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:275)
     at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:104)
     at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1245)
     at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1010)
     at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:472)
     at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409)
     at java.security.AccessController.doPrivileged(Native Method)
     at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:380)
     at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:264)
     at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222)
     at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:261)
     at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:185)
     at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:164)
     at org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeansOfType(DefaultListableBeanFactory.java:308)
     at org.springframework.context.support.AbstractApplicationContext.getBeansOfType(AbstractApplicationContext.java:947)
     at org.springframework.context.support.AbstractApplicationContext.registerListeners(AbstractApplicationContext.java:701)
     at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:377)
     at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:255)
     at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:199)
     at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:45)
     at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3934)
     at org.apache.catalina.core.StandardContext.start(StandardContext.java:4429)
     at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)
     at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
     at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:526)
     at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:850)
     at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:724)
     at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:493)
     at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1206)
     at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:314)
     at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
     at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)
     at org.apache.catalina.core.StandardHost.start(StandardHost.java:722)
     at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
     at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
     at org.apache.catalina.core.StandardService.start(StandardService.java:516)
     at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
     at org.apache.catalina.startup.Catalina.start(Catalina.java:583)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
     at java.lang.reflect.Method.invoke(Unknown Source)
     at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
     at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
Edited by: chhavi.saluja on Jan 25, 2010 2:35 AM

is com.thoughtworks.xstream.io.StreamException: : only whitespace content allowed before
start tag and not \u0 (position: START_DOCUMENT seen \u0... @1:1) Well, looks like one of these xml thingies is broken.

SQL2 | How to add condition on multi-value field?

Hello,
I am trying to perform a JCR query using SQL2 in CQ5.6. For one of the conditions, I wish to compare a multi-value field (E.g. cq:tags).
How would that be possible? Currenlt, I only managed to compare my query item's cq:tags to a single value (e.g. WHERE page.[cq:tags]='mynspace:mytag').
Also, is there a syntax reference for SQL2 queries? Currently I have only managed to find something tanglible here : http://svn.apache.org/viewvc/jackrabbit/trunk/jackrabbit-spi-commons/src/test/resources/or g/apache/jackrabbit/spi/commons/query/sql2/test.sql2.txt?view=markup
Best regards, thanks in advance,
K.

Hi,
Below is an example of SQL2 query based on your scenario. you can modify and use it
SELECT * FROM [nt:base] AS s WHERE ISDESCENDANTNODE([/content/geometrixx/en]) and (CONTAINS(s.[cq:tags], 'mynspace:mytag') or CONTAINS(s.[cq:tags], 'mynspace:mytagss1'))
where root node path and tags value you can change as per your need. Below is java formation
StringBuilder query = new StringBuilder();
query.append("SELECT * FROM [nt:base] AS s WHERE ISDESCENDANTNODE([")
.append(pathToYourPageArea) //for example /content/geometrixx/en
.append("]) AND (CONTAINS(s.[cq:tags],'mynspace:mytag') or CONTAINS(s.[cq:tags],'mynspace:mytagss1'))");
Query compiledQuery = queryManager.createQuery(query.toString(), Query.JCR_SQL2);
where 'mynspace:mytag' and 'mynspace:mytagss1' is an example and you can change it with variables
I hope it will help you to proceed. Let me know if you need more information.
Thanks,
Pawan

Multi Value User Defined field on OIM user form

Hi Everyone,
I have a requirement where i need to assign multiple resources to user as per access policy. These resources should be assign by virtue of some role (custom attribute as of now). The specific requirement is that one user may have multiple roles (and hence resources) and all these values should capture in any user defined field. As the requirement contains multiple Roles so we have to create multi-value user defined field for User form to capture all these role values under single attribute. Does OIM provides any such multi-value field OOTB (lookup, drop down--any customize way we can make them multivalue)?

He's right. Multi Valued attributes on the User Profile are not available in OIM. If you want to do this, and you have a finite number of possible roles, you can create UDFs for each and map a checkbox or something to it if the user has that value. Then base your acccess policies off those.
-Kevin

Multi Value Recertification in Role Manager

Similar Messages

Maybe you are looking for