OIM 11g process implementation

Question

Hi All,
We have a requirement where some roles(priviliges in the target app) are getting provisioned. Each role is considered as a separate resource instance and getting provisioned for users.And we have automated this process using schedulers where each role is getting provisioned based on a specific attribute of a user. But now we are going for Request Based approach having the earlier one in place. In this process, A user will raise a request where he/she can select a set of roles (not the individual roles )in the request dataset which will be provisioned as a single resource(but group of roles not the individual roles as in the earlier process ...number of roles would be 10 or 20).
In the earlier implementation we have created the processform with all the fileds as the sinlgle valued.So when it comes to request based it will not serve the purpose. we can go ahead and create the role filed as the multivalued we can save the roles(set of roles). But where the problem comes is that we want to invalidate each role at times. In that case we are deprovisiong this role (resource instance) from users in the earlier implementation. But in the request based since a bunch of roles are provisioned as a single resource instance we cannot deprovision a single role.
I need help where we can select n roles in a single request and provision them as a n resources for the user or not? If that is not the case please sugget us the solution. It should not impact the existing scheduler implemenation. Any help would be appreciated.
Thanks.

Answer 1

Hi All,
We have a requirement where some roles(priviliges in the target app) are getting provisioned. Each role is considered as a separate resource instance and getting provisioned for users.And we have automated this process using schedulers where each role is getting provisioned based on a specific attribute of a user. But now we are going for Request Based approach having the earlier one in place. In this process, A user will raise a request where he/she can select a set of roles (not the individual roles )in the request dataset which will be provisioned as a single resource(but group of roles not the individual roles as in the earlier process ...number of roles would be 10 or 20).
In the earlier implementation we have created the processform with all the fileds as the sinlgle valued.So when it comes to request based it will not serve the purpose. we can go ahead and create the role filed as the multivalued we can save the roles(set of roles). But where the problem comes is that we want to invalidate each role at times. In that case we are deprovisiong this role (resource instance) from users in the earlier implementation. But in the request based since a bunch of roles are provisioned as a single resource instance we cannot deprovision a single role.
I need help where we can select n roles in a single request and provision them as a n resources for the user or not? If that is not the case please sugget us the solution. It should not impact the existing scheduler implemenation. Any help would be appreciated.
Thanks.