OIM 11g R1 (11.1.1.5.0) Restricting access to Modify resources by field.

Is there a way to restrict the access to modify specific fields on a resource, based on roles? In design console you have the options of, "Allow Insert", "Allow Update", "Allow Delete" on the form associated with different roles. Is there any way you can restrict this access specifically to fields in the way you can restrict access to user attributes based on authorization policies?

You are failing to utilize the product then. You don't have to utilize a soa-composite for this. They can be set to auto-approve anyway. But you should not just grant admin access to the user and all their resources so easily.
Not sure what kind of event handler you can even use. You could try and explicitly deny access to those roles by adding them to the form permissions and unchecking all the values.
-Kevin

Similar Messages

OIM 11g R2 - AD provisioning based on Role and Access Policy

Hi, for Active Direcotry integration i used some prepopulation plugin for populationg resource form (based on http://fusionsecurity.blogspot.sk/2013/01/populating-request-attributes-in-oim.html).
It's work fine - requested account was fully provisioned.
Can i use this plugins for Role based provisioning?
I try to create access policy and associated role but when attached the role to the user and run Evaluate User Policies Job, account can't be provisioned.
In diagnostic.log i found.....
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Immediate consequences are returned with event - InitiatePolicyEvaluationAndProvisioning
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Next Waiting child process is ..........6380 sync = false
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] First Waiting child process is ..........6380
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Kernel executing default validation with process id, event id, entity and operation 6,380.0.Resource.ACCESS_POLICY_BASED_PROVISION
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Kernel completed the child orchestration - 6380.6379
[oracle.iam.platform.kernel.dao] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Inserting records for orchestration cleanup
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Completed orchestration with action result - 113

Hi, all
I try to fill Access policy Process Form. Account request was created and provisioned when field AD Server and Organization Name was filled in, but pre-population plugin doesn't fired
The question is.... How can i use pre-population plugin for populating request dataset used with request generated by access policy....
Is it possible to use plugins for requests generated based on access policy?
a.

Unable to invoke Custom PostProcessEventHandler in OIM 11g R2

Hi,
I am working with OIM 11g R2 .I created an custom PostProcessEventHandler to trigger on modify user operation.
I created a jar file of custom class as xyz.jar
I created an plugin.xml as:
<?xml version="1.0" encoding="UTF-8"?>
<oimplugins>
<plugins pluginpoint="oracle.iam.platform.kernel.spi.EventHandler">
<plugin pluginclass="com.xyz.DisablePostProcessEventHandler" version="1.0" name="DisablePostProcessEventHandler">
</plugin>
</plugins>
</oimplugins>
I made an xyz.zip of plugin.xml and lib/xyz.jar
I registered the xyz.zip by placing zip file in plugins directory.
I created an EventHandlers.xml as below:
<?xml version='1.0' encoding='utf-8'?>
<eventhandlers xmlns="http://www.oracle.com/schema/oim/platform/kernel"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.oracle.com/schema/oim/platform/kernelorchestration-handlers.xsd">

<action-handler
class="com.xyz.DisablePostProcessEventHandler" entity-type="User" operation="MODIFY" name="DisablePostProcessEventHandler" stage="postprocess" order="9999" sync="TRUE"/>
</eventhandlers>
and placed in the path temp/metadata/user/custom/CustomPostProcessHandler and imported it to MDS.
I purged the cache as ./PurgeCache MetaData.
When i am trying to modify user i am getting error as below:
[WARNING] [] [oracle.adf.controller.faces.lifecycle.Utils] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000JqaUC9MDoYO_qh5EiY1HJuY90001ve,0] [APP: oracle.iam.console.identity.self-service.ear#V2.0] ADF: Adding the following JSF error message: Localized message not available. Error returned is: JBO-29000: Unexpected exception caught: java.lang.NullPointerException, msg=null[[
oracle.jbo.JboException: JBO-29000: Unexpected exception caught: java.lang.NullPointerException, msg=null
at oracle.adf.model.binding.DCInvokeMethod.invokeMethod(DCInvokeMethod.java:699)
at oracle.adf.model.binding.DCDataControl.invokeMethod(DCDataControl.java:2143)
at oracle.adf.model.bc4j.DCJboDataControl.invokeMethod(DCJboDataControl.java:3114)
at oracle.adf.model.binding.DCInvokeMethod.callMethod(DCInvokeMethod.java:261)
at oracle.jbo.uicli.binding.JUCtrlActionBinding.doIt(JUCtrlActionBinding.java:1635)
at oracle.adf.model.binding.DCDataControl.invokeOperation(DCDataControl.java:2150)
at oracle.jbo.uicli.binding.JUCtrlActionBinding.invoke(JUCtrlActionBinding.java:740)
at oracle.adf.controller.v2.lifecycle.PageLifecycleImpl.executeEvent(PageLifecycleImpl.java:402)
at oracle.adfinternal.view.faces.model.binding.FacesCtrlActionBinding._execute(FacesCtrlActionBinding.java:252)
at oracle.adfinternal.view.faces.model.binding.FacesCtrlActionBinding.execute(FacesCtrlActionBinding.java:210)
at oracle.iam.ui.platform.utils.FacesUtils.executeOperationBinding(FacesUtils.java:165)
Caused by: java.lang.NullPointerException
at oracle.iam.request.impl.RequestEngine.startOrchestrationFromPreProcess(RequestEngine.java:5385)
at oracle.iam.request.impl.RequestEngine.triggerOperation(RequestEngine.java:5297)
at oracle.iam.request.impl.RequestEngine.doOperation(RequestEngine.java:5028)
at oracle.iam.impl.OIMServiceImpl.doOperation(OIMServiceImpl.java:43)
at sun.reflect.GeneratedMethodAccessor2994.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at oracle.iam.platform.utils.DMSMethodInterceptor.invoke(DMSMethodInterceptor.java:25)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy384.doOperation(Unknown Source)
at oracle.iam.api.OIMServiceEJB.doOperationx(Unknown Source)
at sun.reflect.GeneratedMethodAccessor4224.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
## Detail 0 ##
java.lang.NullPointerException
at oracle.iam.request.impl.RequestEngine.startOrchestrationFromPreProcess(RequestEngine.java:5385)
at oracle.iam.request.impl.RequestEngine.triggerOperation(RequestEngine.java:5297)
at oracle.iam.request.impl.RequestEngine.doOperation(RequestEngine.java:5028)
at oracle.iam.impl.OIMServiceImpl.doOperation(OIMServiceImpl.java:43)
at sun.reflect.GeneratedMethodAccessor2994.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at oracle.iam.platform.utils.DMSMethodInterceptor.invoke(DMSMethodInterceptor.java:25)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy384.doOperation(Unknown Source)
at oracle.iam.api.OIMServiceEJB.doOperationx(Unknown Source)
at sun.reflect.GeneratedMethodAccessor4224.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.support.Deleg
Please help me in resolving this issue.

Hi Suny,
Yes I restarted the OIM Server but getting same error.
I have logger in my code and and nothing is getting printed thet menas the code is not getting invoked itself.
My eventhandler is for postprocess and I am not understanding why i am getting PreProcess error.
java.lang.NullPointerException
at oracle.iam.request.impl.RequestEngine.startOrchestrationFromPreProcess(RequestEngine.java:

Direct provisioing using API in OIM 11g

Hi Experts,
I am facing couple of issues.
*1)* I am trying to provision a resource direcly using API's in OIM 11g. Here I do not have any object form for this resource but I have a process form with some pre-population adapters.
And I am trying to use the below code for direct provisioining.
Hashtable objectHash = new Hashtable();
objectHash.put("Objects.Name", objectName);
tcResultSet objectResultSet = objIntf.findObjects(objectHash);
long objectKey = objectResultSet.getLongValue("Objects.Key");
com.thortech.xl.vo.ResourceData data = userIntf.provisionResource(userKey, objectKey);
long userObjectInstanceKey = Long.parseLong(data.getOiuKey());
long objectInstanceKey = Long.parseLong(data.getObiKey());
And I am getting nulls for the attributes userObjectInstanceKey & objectInstanceKey .
Please let me know how to provision a resource which has no object form but has some pre-population adapters using API .
*2)* I am trying to provision a resource direcly using API's in OIM 11g. Here I do have an object form for this resource which has one of the attribute as of type lookup.
ResourceData data = userIntf.provisionResource(userKey, resourceKey);
long userObjectInstanceKey = Long.parseLong(data.getOiuKey());
long objectInstanceKey = Long.parseLong(data.getObiKey());
Hashtable objectHash = new Hashtable();
objectHash.put("UD_ADGROUP_NAME",groupName);
In this case I am getting objectInstanceKey properly but it is not seeting lookup field value but it is setting all other fields on the object form correctly.
How to set a field of type lookup on the object form while provisioing a resource directly using API's.
Thanks a lot for your help.

947670 wrote:
Hi Pallavi,
I am not populating any object form. I am trying for direct provisioning a resource thru OIM API's.
Hence, I need populate all of the process form fields inorder to skip the approval flow. So, I was using setProcessFormData method.
Here is what happening.
1) My resource has a request dataset which has only one field called "Group Name".
2) My resource has a process form with the fields name UD_GROUP_NAME, UD_GROUP_DESCRIPTION, UD_GROUP_OWNER.
3) When I use the below code, I was able to populate the fields UD_GROUP_DESCRIPTION, UD_GROUP_OWNER (Because pre-populate adapters are getting invoked) as they did not exist on the request data.
tcFormInstanceOperationsIntf formInstanceOps=Platform.getService(tcFormInstanceOperationsIntf.class);
ResourceData data = userIntf.provisionResource(userKey, resourceKey);
long userObjectInstanceKey = Long.parseLong(data.getOiuKey());
long objectInstanceKey = Long.parseLong(data.getObiKey());
Hashtable objectHash = new Hashtable();
objectHash.put("*UD_ADGROUP_NAME*",groupName);
formInstanceOps.setProcessFormData(objectInstanceKey, objectHash);
4) I am having this issue only with the fields that are exist on the request dataset. Since, UD_GROUP_NAME exist on the request dataset, even if I try to set some value in the process form, it is not taking.
Using API's, I am not able to populate any of the attributes on the process form that are exist on the request dataset.
How to solve this issue.1. Check the process form field name.
2. Use tcUserOperationsIntfAPI Method provisionObject(userKey,ObjectKey)
userIntf.provisionObject(userKey, objectKey);
3. Get the process-instance key.
tcResultSet objResultSet = userIntf.getObjects(userKey);
               int objCount = objResultSet.getRowCount();
               for (int count = 0; count < objCount; count++) {
                    objResultSet.goToRow(count);
                    if (objResultSet.getStringValue("Objects.Name").equalsIgnoreCase(resourceObjectName)){
                         processInstanceKey = objResultSet.getLongValue("Process Instance.Key");
4. Use tcFormInstanceOperationsIntf API method setProcesFormData(processInstanceKey,dataMap)
Hope this helps you.

Sending email notification using email template in OIM 11g

HI all
I want to send an email to the user in OIM 11 g using API's
I have created a email template using oim 11g's design console.
now i want to access that email template from design console and send mail to user.
previously in OIM 9i there was class com.thortech.xl.dataobj.util.tcEmailNotificationUtil;
which was having utilities method like send-email etc.where we were able to access the email template from design console and send mail to user.
I want such API's to send mail to user in OIM 11g.Iam unable to find the tcEmailNotificationUtil class in OIM 11g;
Thanks in advance
Bipin patil

Thanks kuldeep
I have one single question,.
I have gone through the 11g docs but it is not present in the oim 11g docs any reasons for it .

Getting error while provisioning user to AD - OIM 11g R2

Hi,
I have installed the AD connector and I am able to do the user and group reconciliation between AD and OIM 11g R2.
But when I am trying to provision the user to AD, I am getting the below error :
oracle.iam.connectors.icfcommon.prov.ICProvisioningManager : createObject : Error while creating user[[
java.lang.NumberFormatException: null
     at java.lang.Long.parseLong(Long.java:375)
     at java.lang.Long.parseLong(Long.java:468)
     at oracle.iam.connectors.icfcommon.prov.ICProvisioningManager.init(ICProvisioningManager.java:104)
     at oracle.iam.connectors.icfcommon.prov.ICProvisioningManager.init(ICProvisioningManager.java:123)
     at oracle.iam.connectors.icfcommon.prov.ICProvisioningManager.createObject(ICProvisioningManager.java:267)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpADIDCCREATEOBJECT.CREATEOBJECT(adpADIDCCREATEOBJECT.java:109)
     at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpADIDCCREATEOBJECT.implementation(adpADIDCCREATEOBJECT.java:54)
     at com.thortech.xl.client.events.tcBaseEvent.run(tcBaseEvent.java:196)
     at com.thortech.xl.dataobj.tcDataObj.runEvent(tcDataObj.java:2492)
     at com.thortech.xl.dataobj.tcScheduleItem.runMilestoneEvent(tcScheduleItem.java:3148)
     at com.thortech.xl.dataobj.tcScheduleItem.eventPostInsert(tcScheduleItem.java:716)
     at com.thortech.xl.dataobj.tcDataObj.insert(tcDataObj.java:602)
     at com.thortech.xl.dataobj.tcDataObj.save(tcDataObj.java:474)
     at com.thortech.xl.dataobj.tcORC.insertNonConditionalMilestones(tcORC.java:847)
     at com.thortech.xl.dataobj.tcORC.completeSystemValidationMilestone(tcORC.java:1162)
     at com.thortech.xl.dataobj.tcOrderItemInfo.completeCarrierBaseMilestone(tcOrderItemInfo.java:757)
     at com.thortech.xl.dataobj.tcOrderItemInfo.eventPostInsert(tcOrderItemInfo.java:173)
     at com.thortech.xl.dataobj.tcUDProcess.eventPostInsert(tcUDProcess.java:235)
     at com.thortech.xl.dataobj.tcDataObj.insert(tcDataObj.java:602)
     at com.thortech.xl.dataobj.tcDataObj.save(tcDataObj.java:474)
     at com.thortech.xl.dataobj.tcTableDataObj.save(tcTableDataObj.java:2910)
     at com.thortech.xl.dataobj.tcORC.autoDOBSave(tcORC.java:3008)
     at com.thortech.xl.dataobj.util.tcOrderPackages.createOrder(tcOrderPackages.java:471)
     at com.thortech.xl.dataobj.util.tcOrderPackages.orderPackageForUser(tcOrderPackages.java:180)
     at com.thortech.xl.dataobj.tcOIU.provision(tcOIU.java:639)
     at com.thortech.xl.dataobj.tcOIU.eventPostInsert(tcOIU.java:357)
     at com.thortech.xl.dataobj.tcDataObj.insert(tcDataObj.java:602)
     at com.thortech.xl.dataobj.tcDataObj.save(tcDataObj.java:474)
     at com.thortech.xl.dataobj.tcTableDataObj.save(tcTableDataObj.java:2910)
     at com.thortech.xl.dataobj.tcUserProvisionObject.insertImplementation(tcUserProvisionObject.java:288)
     at com.thortech.xl.dataobj.tcDataObj.insert(tcDataObj.java:591)
     at com.thortech.xl.dataobj.tcDataObj.save(tcDataObj.java:474)
     at oracle.iam.provisioning.spi.DOBProvisioningUtil.provisionObject(DOBProvisioningUtil.java:128)
     at oracle.iam.provisioning.spi.DOBProvisioningMechanism.provision(DOBProvisioningMechanism.java:341)
     at oracle.iam.provisioning.impl.ProvisioningServiceImpl$4.process(ProvisioningServiceImpl.java:483)
     at oracle.iam.provisioning.impl.ProvisioningServiceImpl$4.process(ProvisioningServiceImpl.java:471)
     at oracle.iam.platform.tx.OIMTransactionCallback.doInTransaction(OIMTransactionCallback.java:13)
     at oracle.iam.platform.tx.OIMTransactionCallback.doInTransaction(OIMTransactionCallback.java:6)
     at org.springframework.transaction.support.TransactionTemplate.execute(TransactionTemplate.java:128)
     at oracle.iam.platform.tx.OIMTransactionManager.oimExecute(OIMTransactionManager.java:46)
     at oracle.iam.provisioning.impl.ProvisioningServiceImpl.provision(ProvisioningServiceImpl.java:471)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
     at oracle.iam.platform.utils.DMSMethodInterceptor.invoke(DMSMethodInterceptor.java:25)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
     at $Proxy380.provision(Unknown Source)
     at oracle.iam.provisioning.api.ProvisioningServiceEJB.provisionx(Unknown Source)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.oracle.pitchfork.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:34)
     at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
     at com.oracle.pitchfork.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:42)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
     at $Proxy379.provisionx(Unknown Source)
     at oracle.iam.provisioning.api.ProvisioningService_p7m7x_ProvisioningServiceRemoteImpl.__WL_invoke(Unknown Source)
Please help me in solving this issue.
Thanks.
Edited by: user9212679 on May 9, 2013 4:17 AM

Hi Kevin,
Thanks for the reply. As suggested by you I have assigned the default value as 0 for all the checkbox type in form designer for AD User form but still I am getting the same error while provisioning the AD resource.
Please help.

Creation of a Request in OIM 11G using API's

Hi Friends,
I am trying to create a request using OIM 11g API's.
I am trying to do this for EBS Responsibility resource and this resource has a request dataset has EBS-IT-Resource-Instance, application name, responsibility name, start date and security group. Please note application name, responsibility name, start date and security group are in child form.
I am trying to populate the request dataset using the below code.
List<RequestBeneficiaryEntityAttribute> entityAttrList;
RequestBeneficiaryEntity entity = null;
entityAttrList = new ArrayList<RequestBeneficiaryEntityAttribute>();
entity = new RequestBeneficiaryEntity();
tcITResourceInstanceOperationsIntf tcITResourceIntf = Platform.getService(tcITResourceInstanceOperationsIntf.class);
HashMap searchcriteria = new HashMap<String, String>();
searchcriteria.put("IT Resources.Name", "EBSHF-APPS12");
tcResultSet resultSet = tcITResourceIntf.findITResourceInstances(searchcriteria);
long itResourceKey=resultSet.getLongValue("IT Resources.Key");
entityAttrList.add(this.getAttrLong("eBusiness Suite Instance Name",itResourceKey));
entityAttrList.add(this.getAttr("Application Name","3~300"));
entityAttrList.add(this.getAttr("Responsibility Name", "3~300~52281"));
entityAttrList.add(this.getAttr("Security Group", "3~0"));
entity.setEntityKey(getResourceKey("Oracle eBusiness Responsibility"));
entity.setEntityType(RequestConstants.RESOURCE);
entity.setEntitySubType("Oracle eBusiness Responsibility");
entity.setEntityData(entityAttrList);
private RequestBeneficiaryEntityAttribute getAttr(String name, String value)
RequestBeneficiaryEntityAttribute attr = null;
attr = new RequestBeneficiaryEntityAttribute(name, value, RequestBeneficiaryEntityAttribute.TYPE.String);
return attr;
private RequestBeneficiaryEntityAttribute getAttrLong(String name, long value)
RequestBeneficiaryEntityAttribute attr = null;
attr = new RequestBeneficiaryEntityAttribute(name, value, RequestBeneficiaryEntityAttribute.TYPE.Long);
return attr;
My code is working fine and a request is getting created. But when I try to open the request dataset(object form) for the newly created request, I am getting null exceptions.
If I did not populate the fields that are in the child form application name, responsibility name and security group which are highlighted above, then I am able to view the form with the correct IT-Resource-Instance name after request creation.
So, I am thinking I am doing something wrong while populating child form data in the request dataset.
Can you please provide me some code snippet to populate the child using 11G API'S?

Hi Bikash,
After referring your code, i made changes in mine. Here is my updated code.
RequestBeneficiaryEntityAttribute parantAttr=null;
List<RequestBeneficiaryEntityAttribute> entityAttrList;
RequestBeneficiaryEntity entity = null;
entity = new RequestBeneficiaryEntity();
parantAttr=this.getAttrLong("eBusiness Suite Instance Name", itResourceKey);
RequestBeneficiaryEntityAttribute mid1 = new RequestBeneficiaryEntityAttribute();
List <RequestBeneficiaryEntityAttribute> childAttributesList = new ArrayList<RequestBeneficiaryEntityAttribute>();
childAttributesList.add(this.getAttr("Application Name", "3~555"));
childAttributesList.add(this.getAttr("Responsibility Name", "3~555~22862"));
childAttributesList.add(this.getAttr("Security Group", "3~0"));
mid1.setChildAttributes(childAttributesList);
mid1.setAction(RequestBeneficiaryEntityAttribute.ACTION.Add);
entityAttrList = new ArrayList<RequestBeneficiaryEntityAttribute>();
entityAttrList.add(parantAttr);
entityAttrList.add(mid1);
But when I try to run this, it is getting failed saying "RequestServiceException: IAM-2050033:Invalid attribute name null. No corresponding reference was found in the data set ProvisionResourceOracle eBusiness Responsibility".
Here is my request data set for your reference.
<AttributeReference name="eBusiness Suite Instance Name" attr-ref="eBusiness Suite Instance Name" type="Long" length="50" widget="itresource-lookup" required="true" available-in-bulk="true" itresource-type="eBusiness Suite UM"/>
<AttributeReference available-in-bulk="true" length="10" widget="text" type="String" attr-ref="UD_EBH_RSCP" name="EBS HR Foundation User Responsibilities">
<AttributeReference name="Application Name" attr-ref="Application Name" type="String" length="256" widget="lookup-query" available-in-bulk="true" required="true">
<lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv, lku lku where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.EBS.Application' and lkv_encoded like concat('$Form data.eBusiness Suite Instance Name', '~%')" display-field="Description" save-field="Value"/>
</AttributeReference>
<AttributeReference name="Responsibility Name" attr-ref="Responsibility Name" type="String" length="256" widget="lookup-query" available-in-bulk="true" required="true" primary="true">
<lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv,lku lku where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.EBS.Responsibility' and lkv_encoded like concat('$Form data.Application Name','~%')" display-field="Description" save-field="Value"/>
</AttributeReference>
<AttributeReference name="Security Group" attr-ref="Security Group" type="String" length="256" widget="lookup-query" available-in-bulk="true" required="true">
<lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv, lku lku where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.EBS.SecurityGroup' and lkv_encoded like concat('$Form data.eBusiness Suite Instance Name', '~%')" display-field="Description" save-field="Value"/>
</AttributeReference>
I am not sure why it is not referencing to the attribute. In your blog, it is saying your code is to set process form. But i am trying to create a request using API's. so, I need some code snippet to populate request dataset. Do you think, this will serve both?
Thanks for your help.

Problem with EventHandler in OIM 11g

Hi All,
I followed the Part I(Chapters 6,7 & 30) in pdf file shown below
http://download.oracle.com/docs/cd/E14571_01/doc.1111/e14309.pdf
I developed the plugin and registered the plugin for custom eventhandler.
Iam not able to see the defined eventhandler in design console .
I am running weblogicImportMetadata.bat (import specific metadata files into the MDS database) as specified in pdf document after making necessary changes.
After restarting OIM server ,the server is not starting , and showing errors like " target invocation exception","null pointer exception" etc.
Have anyone done the EventHandler in OIM 11g , if anyone done please provide the followed document link.
Please suggest to solve the issue.
Thanks & Regards
Satish
Edited by: satish on Sep 17, 2010 4:53 PM
Edited by: satish on Sep 22, 2010 3:14 PM

Hello Satish,
You won't find the eventhandler in the design console. This is by design.
I had a similar error. Hope this helps you.
Verify your EventHandlers.xml file. For me one of the entries, particularly stage="preprocess" had the letter 's' in uppercase (Stage="preprocess"). This was the source of my error below.
<An error occurred while initializing service : {0}
java.lang.NullPointerException
Caused by: oracle.iam.platform.utils.ServiceInitializationException: java.lang.NullPointerException
<Nov 2, 2010 12:30:55 PM PDT> <Warning> <oracle.iam.platform.utils> <IAM-0070016> <An error occurred while initializing service : oracle.iam.platform.kernel.OrchestrationEngine>
<Nov 2, 2010 12:30:55 PM PDT> <Warning> <oracle.iam.platform.utils> <IAM-0070016> <An error occurred while initializing service : {0}
java.lang.NoClassDefFoundError: oracle/iam/platform/kernel/impl/KernelObjFactory
There is definitely a lack of clear documentation around developing plugins (e.g. oim.home in ant.properties should point to OIM home/server).
I worked with Oracle support and provided some feedback. They are going to publish a KB article soon. I now have a preprocess eventhandler that seems to work.

Mapping a parameter to the form field (OIM 11g)

Hello, people!
How can I get an information from a created form field?
In more details: I have to assign a manual creating of a resource to a concrete group of users. So I made a form that contains a field named "Admin Group", made a process for this form that contains a manual task "manual create user", in assignment tab of this task I'm using a task assignment adapter. This adapter has one input parameter - Group name using what I want to find a group key. So the problem is in mapping this parameter. I expected to find my "Admin Group" field and map to it, but i didn't find that. How can I get information from this field?
Regards
Anton Litvin

I think you have created Object Form. Are you seeing Object Data while mapping.
Create one process form. Populate Process Form Field using Data Flow under Process Definition.
While mapping you'll see Process data to map with your Admin Group.
Sorry don't know how they have handled in OIM 11g... Above is for 10g.

Error while creating authorisation policy using OIM 11g API

Hi,
We have a requirement to create ‘Authorization Policies’ (assign Data Constraints, Permissions & Assignments) using OIM 11g API’s. I am using ‘oracle.iam.authzpolicydefn.api.PolicyDefinitionService & oracle.iam.authzpolicydefn.vo.AuthzPolicy’. But when I am trying to attach Entity/Feature (User Management) to authorisation policy, it is throwing exception. Below is the code snippet which I am trying to implement.
Line1: PolicyDefinitionService policyService = oimClient.getService(PolicyDefinitionService.class);
Line2: AuthzPolicy authPolicy = new AuthzPolicy();
Line3: authPolicy.setName("Test Authz Policy");
Line4: authPolicy.setDisplayName("Test Authz Policy Dsp Name");
Line5: authPolicy.setDescription("Test Authz Policy Description");
Line6: Feature feature = oimClient.getService(Feature.class);
Line7: Action featureAction = feature.getAction(FeatureManagerConstants.Features.USER_MGMT.getId());
Line8: List<Action> actions = new ArrayList<Action>();
Line9: actions.add(featureAction);
Line10: authPolicy.setActions(actions);
Line11: policyService.createPolicy(authPolicy);
Exception: oracle.iam.platform.utils.NoSuchServiceException: java.lang.ClassNotFoundException: oracle.iam.authzpolicydefn.api.FeatureDelegate
The above exception is throwing at Line6.
Let me know if anyone implemented.
- Kalyan Mutya

If you are using JDeveloper , can you able to get class after giving "." .If yes no than it is the problem with the jar file you are using .Check whether you can able to import oracle.iam.authzpolicydefn.api.Feature.
Thanks ,
Animesh anand

Error While Creating User in OIM 11g R2

Experts,
I am working on OIM 11g R2, while creating user i am getting below prompt
IAM-2050242: Orchestration process with id 815, failed with error message IAM-3010201:LDAP create event failed: Object Class Violation.
any pointers?

Try to check which OBJ Class violation are you hitting , for example: If you have uniquemember instead of member and try to add more than one member this will be a rule violation. Eg: ADD request to an attribute that is included in an account entry because the attribute entry has been existed prior to the ADD request.
I hope this helps.
Thiago Leoncio.

OIM-AD connector Issues in OIM 11g

Hi
We are trying to provision user from OIM 11G to AD using Administration Tab of Admin Console.
As part of ADITResource configuration , follwoing fields are included.In the Enterprise manager OIM server log, we are getting the below error message.
Error Message In Enterprise manager OIM server log -
Module     OIMCP.ADCS
Thread ID     [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'
Message     com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks : createUser : Wrong Value Specified in Root Context of IT ResourceOr Organization DN_
However, in Admin console Selfservice-->Task-->Provisioning -->Shows error as
Response:Connection Error encountered
Response Description:     Error encountered while connecting to target system
We have sucessfully tested the connection using Diagnoistic Dashboard (XIMDD) & Ldap Browser.
IT Resource Details-
Parameter                               Value
AD Sync installed (yes/no)                     no
ADAM LockoutThreshold Value                5
ADDisableAttr Lookup Definition                Lookup.ADProvisioning.DisableAttrLookup
ADGroup LookUp Definition                     Lookup.ADReconciliation.GroupLookup
Abandoned connection timeout                600
Admin FQDN                               cn=administrator,cn=Users,dc=example,dc=com
Admin Login                               administrator
Admin Password                          ********
Allow Password Provisioning                     yes
AtMap ADGroup                          AtMap.ADGroup
AtMap ADUser                               AtMap.AD
AtMap Group                               AtMap.ADGroup
Atmap ADOrg                               AtMap.ADOrg
Backup Server URL                          [NONE]
Connection pooling supported                false
Connection wait timeout                     100
Custom Attribute Name
CustomizedReconQuery
Inactive connection timeout                     600
Initial pool size                               1
Invert Display Name                          no
LDAP Connection Timeout                     30000
Last Modified Time Stamp                     0
Last Modified Time Stamp Group                0
Max pool size                               30
Min pool size                               2
Native connection pool class definition
OIM User UDF
Pool excluded fields
Pool preference                               Default
Port Number                               389
Remote Manager Prov Lookup                AtMap.AD.RemoteScriptlookUp
Remote Manager Prov Script Path
ResourceConnection class definition           com.thortech.xl.integration.ActiveDirectory.ADResourceConnectionImpl
Root Context                               dc=example,dc=com
SSL Port Number                          636
Server Address                               WIN-PEUB23TMMT4.example.com
Target Locale: Country                     US
Target Locale: Language                     en
Target Locale: TimeZone                     GMT
Target supports only one connection           false
Timeout check interval                     100
UPN Domain                               example.com
Use Disable Attr                          false
Use SSL                               false
Validate connection on borrow                true
isADAM                               no
isUserDeleteLeafNode                          no
For Organization we have selected ou=Test,dc=example,dc=com in our lookup defination
Please suggest....
Thanks

It's not Key, it's the Scheduled Task attribute "IT Resource Name"
Documentation: http://download.oracle.com/docs/cd/E11223_01/doc.910/e11197/using_conn.htm#CHDFBAAC
Here is the documentation on the lookup format: http://download.oracle.com/docs/cd/E11223_01/doc.910/e11197/intro.htm#CHDHCCJD
-Kevin

Getting error in trusted recon from DB in oim 11g

Hi,
I am getting below error while running the trusted recon from DB in OIM 11g:
[2013-12-25T23:27:33.033-08:00] [oim_server1] [ERROR] [] [oracle.iam.reconciliation.impl] [tid: OIMQuartzScheduler_Worker-7] [userId: oiminternal] [ecid: 0000KCGU85V2ZNK5qVCCyY1Ih5WC000002,1:21446] [APP: oim#11.1.2.0.0] Generic Information: {0}[[
oracle.iam.reconciliation.exception.ReconciliationException: Exception occurred while inserting data into table RA_HRRECONTEMPROSS_GTC due to java.sql.SQLException: ORA-12899: value too large for column "IDAMPOC_OIM"."RA_HRRECONTEMPROSS_GTC"."RA_SERVICE_DT" (actual: 10, maximum: 7)
        at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl$1.process(ReconOperationsServiceImpl.java:429)
        at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl$1.process(ReconOperationsServiceImpl.java:407)
        at oracle.iam.platform.tx.OIMTransactionCallback.doInTransaction(OIMTransactionCallback.java:13)
        at oracle.iam.platform.tx.OIMTransactionCallback.doInTransaction(OIMTransactionCallback.java:6)
        at org.springframework.transaction.support.TransactionTemplate.execute(TransactionTemplate.java:128)
        at oracle.iam.platform.tx.OIMTransactionManager.execute(OIMTransactionManager.java:22)
Caused by: oracle.iam.platform.entitymgr.ProviderException: java.sql.SQLException: ORA-12899: value too large for column "IDAMPOC_OIM"."RA_HRRECONTEMPROSS_GTC"."RA_SERVICE_DT" (actual: 10, maximum: 7)
        at oracle.iam.platform.entitymgr.impl.EntityManagerImpl.createEntity(EntityManagerImpl.java:305)
        at oracle.iam.platform.entitymgr.impl.EntityManagerImpl.createEntity(EntityManagerImpl.java:241)
Service date is a varchar field(VARCHAR 2 BYTE) in our trusted table. Its mapped to service date field in OIM 11g which is of type date.
Please let me know if I need to change the field type in our trusted table.
Note: The same configuration is working fine in OIM 9.x.
Regards,
Kalpana.

Now, i went into IDM schema & altered date fields to VARCHAR2(30 CHAR) for all the date type attributes. Now, when I ran schedule job is worked fine and didnt got any errros. But now the trusted recon is not creating users. I dont know why users are not getting created. Can you please let me know which all things should be checked to make a recon a trusted recon so that it creates users.
Thanks,
Kalpana.

Exception while running custom scheduler OIM 11g R1

I have OIM 11g R1 installed on win 32 platform, and am getting the following exception while running the custom scheduler: Samplescheduledtask
<Jan 12, 2013 7:37:13 PM IST> <Warning> <oracle.iam.scheduler.impl> <BEA-000000>
<XSD Validation Exception: org.xml.sax.SAXParseException: cvc-elt.1: Cannot fin
d the declaration of element 'scheduledTasks'.>
<Jan 12, 2013 7:37:13 PM IST> <Warning> <oracle.iam.scheduler.impl> <BEA-000000>
<XSD Validation Exception: org.xml.sax.SAXParseException: cvc-elt.1: Cannot fin
d the declaration of element 'scheduledTasks'.>
<Jan 12, 2013 7:37:13 PM IST> <Warning> <oracle.iam.scheduler.impl> <BEA-000000>
<XSD Validation Exception: org.xml.sax.SAXParseException: cvc-elt.1: Cannot fin
d the declaration of element 'scheduledTasks'.>
<Jan 12, 2013 7:37:13 PM IST> <Warning> <oracle.iam.scheduler.impl> <BEA-000000>
<XSD Validation Exception: org.xml.sax.SAXParseException: cvc-elt.1: Cannot fin
d the declaration of element 'scheduledTasks'.>
<Jan 12, 2013 7:37:13 PM IST> <Warning> <oracle.iam.scheduler.impl> <BEA-000000>
<XSD Validation Exception: org.xml.sax.SAXParseException: cvc-elt.1: Cannot fin
d the declaration of element 'scheduledTasks'.>
<Jan 12, 2013 7:37:13 PM IST> <Warning> <oracle.iam.scheduler.impl> <BEA-000000>
<XSD Validation Exception: org.xml.sax.SAXParseException: cvc-elt.1: Cannot fin
d the declaration of element 'scheduledTasks'.>
java.lang.ClassNotFoundException: ADP ClassLoader failed to load: oracle.iam.sam
ple.scheduledtask.SampleScheduledTask
at com.thortech.xl.dataobj.tcADPClassLoader.findClass(tcADPClassLoader.j
ava:219)
at oracle.iam.transUI.impl.CustomTaskLoaderImpl.getClassInstance(CustomT
askLoaderImpl.java:12)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:146
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.j
ava:529)
java.lang.ClassNotFoundException: ADP ClassLoader failed to load: oracle.iam.sam
ple.scheduledtask.SampleScheduledTask
at com.thortech.xl.dataobj.tcADPClassLoader.findClass(tcADPClassLoader.j
ava:219)
at oracle.iam.transUI.impl.CustomTaskLoaderImpl.getClassInstance(CustomT
askLoaderImpl.java:12)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:146
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.j
ava:529)
java.lang.ClassNotFoundException: ADP ClassLoader failed to load: oracle.iam.sam
ple.scheduledtask.SampleScheduledTask
at com.thortech.xl.dataobj.tcADPClassLoader.findClass(tcADPClassLoader.j
ava:219)
at oracle.iam.transUI.impl.CustomTaskLoaderImpl.getClassInstance(CustomT
askLoaderImpl.java:12)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:146
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.j
ava:529)
Following is the code of the custom scheduler:
package oracle.iam.sample.scheduledtask;
import java.util.HashMap;
import oracle.iam.scheduler.vo.TaskSupport;
public class SampleScheduledTask extends TaskSupport {
public void execute(HashMap hashMap) throws Exception {
// Display a message when this scheduled task is run
System.out.println("Running the OIM Sample Scheduled Task...");
public HashMap getAttributes() {
return null;
public void setAttributes() {
kindly suggest......
Regards,
KK
Edited by: 958122 on Jan 12, 2013 11:38 PM

Hi,
Please use the below commands to register the plugin:
set the environment variable ORACLE_HOME, OIM_ORACLE_HOME, ANT_HOME,JAVA_HOME,MW_HOME and execute
$ORACLE_HOME/server/plugin_utility/ant -f pluginregistration.xml register
and provide the necessary input.
$ORACLE_HOME/server/bin/PurgeCache.sh All
and provide the necessary input
Restart the OIM managed server
http://docs.oracle.com/cd/E21764_01/doc.1111/e14309/plugins.htm#CHDHECGH
Regards,
Sunny

Creating GTC in OIM 11g (11.1.1.3.0)

Hi,
I'm trying to install Generic Technology Connector (Database_App_Tables_9.1.0.5.0) and to configure the target sysatem as a trusted source reconcilation task in OIM 11g 11.1.1.3 but I get a lot of problems. I used the following quides to do that:
1) Oracle® Identity Manager Connector Guide for Database Application Tables Release 9.1.0
2) racle® Fusion Middleware Developer's Guide for Oracle Identity Manager 11g Release 1 (11.1.1)
First of all, these quides don't correspond to the OIM 11g or I'm not smart enough to understand them. On the step 3 of configuration target system as a trusted source I can't find some of the mandatory fields of the OIM User form. The Guide tells me that mandatory fields are: User ID, First Name, Last Name, Employee Type, User Type, Organization. But in the User form only some of them represented: First Name, Last Name, Organization.
Nevertheless I configured my system as follows:
1) I'd created table EMPLOYEES with columns LOGIN, FIRSTNAME(primary key), LASTNAME, ORGANIZATION in my Oracle DB. I'd add one row in my table useru, User, User, Xellerate Users.
2) I'd configured my connector as follows:
step1:
Name      Test
Reconciliation           select
Transport Provider Database Application Tables Reconciliation
Format Provider      Database Application Tables Reconciliation
Trusted Source Reconciliation selected
step2:
Database Driver      oracle.jdbc.driver.OracleDriver
Database URL      jdbc:oracle:thin:@localhost:1521:orcl
Database User ID      system
Database Password *******
Parent Table/View Name EMPLOYEES
Reconcile Deletion of Multivalued Attribute Data not selected
Reconciliation Type Full
step3:
source reconciliation staging OIM
LOGIN---------------->LOGIN-------------------------------------->User Login
FIRSTNAME-------->FIRSTNAME------------------------------->First Name(Matching only)
LASTNAME--------->LASTNAME------------------------------->Last Name
ORGANIZATION-->ORGANIZATION------------------------>Organization
After running TEST_GTC schedule, reconciliation is finished without errors in OIM log file and reconciliation evet is created.
The Reconciliation data of this event looks like:
Attribute Name Attribute value OIM mapped field
LOGIN useru User Login
FIRSTNAME User First Name
LASTNAME User Last Name
ORGANIZATION Xellerate Users Organization Name
The History of this event looks like:
Event Recieved
Data Validation Succeded
No User Match Found
Creation Faild
Notes: ORA Error Code =>ORA-01400: cannot insert NULL into () ORA Error Stack =>ORA-06512: at DEV_OIM.OIM_SP_RECONBLKUSERCRUD", line 722
Has anyone any ideas how to get through this?
Thanks in Advance!

Be a Good Guild Leader in the WOW Gold.By the way, we sincerely invite all game players whether you are newbie or veteran to Buy WOW Gold.Then, the icing on the cake: Your guild leader emu-raged when your husband made a comment about the(RS Gold) whole thing. To me, your husband reacted naturally. I probably would have said the same thing. The only person doing something "wrong" in this situation was your guild leader. The bottom line is this: It's not a guild leader's place to(Lotro Gold) "test" your behavior. Honestly, I can't imagine a context in which it would be appropriate for (Metin2 Gold)anyone to do this, under any circumstances. The sheer self-righteousness of it nauseates me.

OIM 11g R1 (11.1.1.5.0) Restricting access to Modify resources by field.

Similar Messages

Maybe you are looking for