OVD - OIM Query

Hi all,
There is OID 11g, AD, OVD 11g in our environment. OID has external users, AD has internal users. OVD 11g is used for Virtualization - nothing new so far.
This implementation is almost completed and we are heading to next phase i.e., OIM 11g implementation. Here, we can think of two trusted sources - AD, OID. Nothing complex until now.
Now the question is: Can OIM talk to OVD for provisioning and reconciliation? If so, do we need to develop custom connector (as OOTB connector is not available) and what is the trusted source to be used here? Is this recommended approach?
I have seen LDAP Sync feature in OIM 11g which makes OVD-OID in synch with OIM. So, is it recommended to design OIM with OVD using LDAP Synch which automatically sync users from OID, AD.
Can someone throw light on this?
Thanks,
Mahendra.

Hi Mahendra,
OVD acts like another LDAP which is having the same capabilities as any other Standard LDAP service. Because this OVD & OID are Oracle products so, Both's products base ldap schemas will be almost same. OIM connector point of view you can use the OID connector for OVD. We have used the same approach in OIM 10g version and we did not see any issues even for provisioning operations too since we have single source ldap connected to the OVD.
But in Ideal approach OVD is not recommended for ldap modifications in the sense Provisioning operations in terms of OIM world. OVD product architecuture is more robust for Read operations since this product has a capacity of consolidate different data structures into single ldap view that make more complexity and if we use this product for modify operations then many other factors we need to consider manually like performance, ACLs and, customization etc.
Hope this info helps yo to get an idea for your decision point.
OIM synchronization with LDAP i dont have any insight on this..
Cheers,
Srini

Similar Messages

OIM - query regarding child tables

Hi All
I have a query regarding child tables. For example, when a user is removed from an AD group, his corresponding entry from the AD groups child table will be deleted. I want to know whether it is deleted of marked as deleted. Can I get the information later on that the user was removed from which AD group?
Please help.
Thanks

You will have to enable the audit level = Resource Form and perform the additional tasks to track the process form data changes. This will track all modifications to the forms.
-Kevin

OIM Query(URGENT)

Can i hide any link like enable,disable from user search page.
I want just unlock button there.

Or even if I get the Resource Profile for the user, it would be helpful.
I need the "Resource Name" and "Description" column data from OIM Admin Console >>User Detail >> Resource Profile

Third Party Jars in OIM 11G

Hi All,
I am trying to invoke a web service stub to call create() functionality.
From the stand alone program(with out integrating with OIM server), if I just run it from eclipse, I am able to create the user in target system. If I try to invoke through process task adapters, I am getting Connection Exception.
I think there is something to do with the third party jars. I have copied all the jars to /<Oracle_Home>/Oracle_IDM1/server/ThirdParty and <WEBLOGIC_HOME>Middleware/wlserver_10.3/server/lib.
Should I run "UploadJars.sh" utility of OIM?
Should I update the classpath of OIM and weblogic? I heard that from 11g onwards it automatically pick up the third party jars. Isn't so?
My OIM Server and Target System Application are in different machines. There is no SSL communication. So I think no need to exchange certificates also.
Please help me to solve this.

Hello, oimcoder.
I've removed the jars everywhere (from database and CLASSPATH variable too) besides the ThirdParty folder. When I run my Scheduled task there is a stack trace in log:
[2011-09-22T12:26:41.717+03:00] [oim_server1] [TRACE] [] [oracle.iam.platform.pluginframework] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: oracle.iam.platform.pluginframework.PluginClassLoader] [APP: oim#11.1.1.3.0] [SRC_METHOD: findClass] in find classorg.apache.cxf.jaxws.JaxWsProxyFactoryBean
[2011-09-22T12:26:41.717+03:00] [oim_server1] [TRACE] [] [oracle.iam.platform.pluginframework] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: oracle.iam.platform.pluginframework.PluginClassLoader] [APP: oim#11.1.1.3.0] [SRC_METHOD: findClass] Class Not found - org.apache.cxf.jaxws.JaxWsProxyFactoryBean
[2011-09-22T12:26:41.717+03:00] [oim_server1] [TRACE:32] [] [org.springframework.transaction.jta.JtaTransactionManager] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: org.springframework.transaction.support.AbstractPlatformTransactionManager] [APP: oim#11.1.1.3.0] [SRC_METHOD: triggerBeforeCompletion] Triggering beforeCompletion synchronization
[2011-09-22T12:26:41.718+03:00] [oim_server1] [TRACE] [] [org.springframework.transaction.jta.JtaTransactionManager] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: org.springframework.transaction.support.AbstractPlatformTransactionManager] [APP: oim#11.1.1.3.0] [SRC_METHOD: processRollback] Should roll back transaction but cannot - no transaction available
[2011-09-22T12:26:41.718+03:00] [oim_server1] [TRACE:32] [] [org.springframework.transaction.jta.JtaTransactionManager] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: org.springframework.transaction.support.AbstractPlatformTransactionManager] [APP: oim#11.1.1.3.0] [SRC_METHOD: triggerAfterCompletion] Triggering afterCompletion synchronization
[2011-09-22T12:26:41.718+03:00] [oim_server1] [TRACE:32] [] [org.springframework.transaction.support.TransactionSynchronizationManager] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: org.springframework.transaction.support.TransactionSynchronizationManager] [APP: oim#11.1.1.3.0] [SRC_METHOD: clearSynchronization] Clearing transaction synchronization
[2011-09-22T12:26:41.718+03:00] [oim_server1] [TRACE] [IAM-1020021] [oracle.iam.scheduler.vo] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: oracle.iam.scheduler.vo.TaskSupport] [APP: oim#11.1.1.3.0] [SRC_METHOD: executeJob] Exception encountered
[2011-09-22T12:26:41.718+03:00] [oim_server1] [TRACE:16] [] [oracle.iam.scheduler.vo] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: su.jet.idm.otp.saphr.oimdataloader.SaphrLoader] [APP: oim#11.1.1.3.0] [SRC_METHOD: logJobExecution] ENTRY 16В 461 1В 316В 683В 601В 644 1В 316В 683В 601В 718 6 java.lang.Exception: java.lang.NoClassDefFoundError: org/apache/cxf/jaxws/JaxWsProxyFactoryBean
[2011-09-22T12:26:41.719+03:00] [oim_server1] [TRACE] [] [org.springframework.beans.factory.support.DefaultListableBeanFactory] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: org.springframework.beans.factory.support.AbstractBeanFactory] [APP: oim#11.1.1.3.0] [SRC_METHOD: doGetBean] Returning cached instance of singleton bean 'txManager'
[2011-09-22T12:26:41.719+03:00] [oim_server1] [TRACE] [] [org.springframework.transaction.jta.JtaTransactionManager] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: org.springframework.transaction.support.AbstractPlatformTransactionManager] [APP: oim#11.1.1.3.0] [SRC_METHOD: getTransaction] Creating new transaction with name [null]: PROPAGATION_REQUIRES_NEW,ISOLATION_DEFAULT
[2011-09-22T12:26:41.719+03:00] [oim_server1] [TRACE:32] [] [org.springframework.transaction.support.TransactionSynchronizationManager] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: org.springframework.transaction.support.TransactionSynchronizationManager] [APP: oim#11.1.1.3.0] [SRC_METHOD: initSynchronization] Initializing transaction synchronization
[2011-09-22T12:26:41.719+03:00] [oim_server1] [TRACE] [] [org.springframework.beans.factory.support.DefaultListableBeanFactory] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [SRC_CLASS: org.springframework.beans.factory.support.AbstractBeanFactory] [APP: oim#11.1.1.3.0] [SRC_METHOD: doGetBean] Returning cached instance of singleton bean 'toplinkSession'
[2011-09-22T12:26:41.719+03:00] [oim_server1] [TRACE:16] [] [org.eclipse.persistence.session.oim.connection] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [APP: oim#11.1.1.3.0] client acquired
[2011-09-22T12:26:41.719+03:00] [oim_server1] [TRACE:16] [] [org.eclipse.persistence.session.oim.transaction] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [APP: oim#11.1.1.3.0] acquire unit of work: 1992813264
[2011-09-22T12:26:41.719+03:00] [oim_server1] [TRACE:16] [] [org.eclipse.persistence.session.oim.transaction] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [APP: oim#11.1.1.3.0] TX binding to tx mgr, status=STATUS_ACTIVE
[2011-09-22T12:26:41.719+03:00] [oim_server1] [TRACE:32] [] [org.eclipse.persistence.session.oim.query] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [APP: oim#11.1.1.3.0] Execute query ReadObjectQuery(referenceClass=JobHistory )
[2011-09-22T12:26:41.720+03:00] [oim_server1] [TRACE:32] [] [org.eclipse.persistence.session.oim.query] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [APP: oim#11.1.1.3.0] Execute query ReadObjectQuery(referenceClass=JobHistory )
[2011-09-22T12:26:41.720+03:00] [oim_server1] [TRACE:32] [] [org.eclipse.persistence.session.oim.connection] [tid: OIMQuartzScheduler_Worker-1] [userId: oiminternal] [ecid: 0000JAGRjisCgoYFLryGOA1EUjqc000005,0] [APP: oim#11.1.1.3.0] reconnecting to external connection pool
[2011-09-22T12:26:41.723+03:00] [oim_server1] [TRACE] [] [org.springframework.jndi.JndiTemplate] [tid: [ACTIVE].ExecuteThread: '21' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 2ec07577f0893da0:3c1077a9:132906edc25:-8000-000000000000040d,0] [SRC_CLASS: org.springframework.jndi.JndiTemplate] [APP: oim#11.1.1.3.0] [SRC_METHOD: lookup] Looking up JNDI object with name [ejb.stateless.SchedulerService#oracle.iam.scheduler.api.SchedulerServiceRemote]

Query to get the tasks

Can anyone please provide me the OIM query to know if a particuar task is triggered for a particular date
for e.g First Name Updated task triggered for the date 15-sep-12?
Thanks

See below query :-
select pkg.pkg_name, mil.mil_name,mil.mil_create from pkg pkg, tos tos, mil mil
where pkg.pkg_key = tos.pkg_key
and tos.tos_key = mil.tos_key
and mil.mil_create <= to_date('2012-12-10 10:00:03','yyyy-mm-dd hh24:mi:ss')
and mil.mil_name = 'Change Email'

Fusion middleware 11g installation steps

Hello,
I am trying to install Oracle Fusion Middleware 11g and found some of the binaries to be installed.Please let me know if these are the software needed and
Also, please confirm which product needs to be installed first. Here, is what my guessing order is currently. Please correct me if I am wrong.
1.     Install Oracle 11g Database
2.     Create Repository for OIM 11g Through Repository Creation Utility(RCU) ofm_rcu_win32_11.1.1.3.3_disk1_1of1
3.     Install Web logic Server wls1033_oepe111150_win32
4.     Install Identity Management 11.1.2.0 ofm_idm_win_11.1.1.2.0_32_disk1_1of1
5.     Overwrite Identity Management 11.1.3.0 ofm_idm_win_11.1.1.3.0_32_disk1_1of1
6.     Install Identity And Access Management 11.1.1.3.0 ofm_iam_generic_11.1.1.3.0_disk1_1of1
7.     Install SOA Component ofm_soa_generic_11.1.1.2.0_disk1_1of1
8.     Overwrite SOA Component ofm_soa_generic_11.1.1.3.0_disk1_1of1
Thanks,
Krish.

Krish,
There are two main installable products in IdM 11g
A) OID/OVD/OIM 11.1.1.4 (current in 11.1.1.5) - You don't need SOA for this and steps to install/configure are documented on my blog http://onlineappsdba.com/index.php/2011/03/23/install-oracle-identity-management-oimidm-11114-oid-ovd-oif-high-level-steps/
B) OAM/OIM/OAAM/OIN/OAPM 11.1.1.3 - You need SOA 11.1.1.3 only if you are selecting OIM . For step by step installation and configuration check
http://onlineappsdba.com/index.php/2010/08/05/oracleidm-11g-step-by-installation-of-oam-oim-oaam-oapm-oin-111130-part-i-load-schema/ (This is 8 part series)
Note : If you are installing 11.1.1.3 then select weblogic 10.3.3 and for 11.1.1.4 select weblogic 10.3.4 ()
Atul Kumar
- Book "OAM/OIM 11g for Administrators" -> http://onlineappsdba.com/index.php/2011/02/23/my-book-oracle-identity-access-manager-11g-for-administrators-is-now-available-in-raw-format/

Issue in creation of group in oim database through sql query.

hi guys,
i am trying to create a group in oim database through sql query:
insert into ugp(ugp_key,ugp_name,ugp_create,ugp_update,ugp_createby,ugp_updateby,)values(786,'dbrole','09-jul-12','09-jul-12',1,1);
it is inserting the group in ugp table but it is not showing in admin console.
After that i also tried with this query:
insert into gpp(ugp_key,gpp_ugp_key,gpp_write,gpp_delete,gpp_create,gpp_createby,gpp_update,gpp_updateby)values(786,1,1,1,'09-jul-12',1,'09-jul-12',1);
After that i tried with this query.but still no use.
and i also tried to assign a user to the group through query:
insert into usg(ugp_key,usr_key,usg_priority,usg_create,usg_update,usg_createby,usg_updateby)values(4,81,1,'09-jul-12','09-jul-12',1,1);
But still the same problem.it is inserting in db.but not listing in admin console.
thanks,
hanuman.

Hanuman Thota wrote:
hi vladimir,
i didn't find this 'ugp_seq'.is this a table or column?where is it?
It is a sequence.
See here for details on oracle sequences:
http://www.techonthenet.com/oracle/sequences.php
Most of the OIM database schema is created with the following script, located in the RCU distribution:
$RCU_HOME/rcu/integration/oim/sql/xell.sql
there you'll find plenty of sequence creation directives like:
create sequence UGP_SEQ
increment by 1
start with 1
cache 20
to create a sequence, and
INSERT INTO UGP (UGP_KEY, UGP_NAME, UGP_UPDATEBY, UGP_UPDATE, UGP_CREATEBY, UGP_CREATE,UGP_ROWVER, UGP_DATA_LEVEL, UGP_ROLE_CATEGORY_KEY, UGP_ROLE_OWNER_KEY, UGP_DISPLAY_NAME, UGP_ROLENAME, UGP_DESCRIPTION, UGP_NAMESPACE)
VALUES (ugp_seq.nextval,'SYSTEM ADMINISTRATORS', sysadmUsrKey , SYSDATE,sysadmUsrKey , SYSDATE, hextoraw('0000000000000000'), 1, roleCategoryKey, sysadmUsrKey, 'SYSTEM ADMINISTRATORS', 'SYSTEM ADMINISTRATORS', 'System Administrator role for OIM', 'Default');
as a sequence usage example.
Regards,
Vladimir

Running a query On OIM Database inside an adapter task

Hi,
How can I run a SQL query to get some value from OIM database table inside an adapter task? How do I get Db connection without using JDBC API inside adapter task?
Thanks in advance

create a variable in the adapter factory of type object , map to adapter references- > qualifier database reference.
you can then use this variable, in your method signature where it requires a database instance. using this database instance you can run sql queries.
if you need to run a stored procedure, then simply create an adapter -> Fucntional Task-> Stored procedure.

OIM 9.1.0.2 Resource Profile Query

Hello
I need to get the usr_key or any info on the users in OIM that have a certain condition. I have a number of OID resources for users that have a status or 'provisioned' but when looking at the resource tasks the system validation is set to 'cancelled'. Due to this, updates are not flowing to these users. I am looking through the tables to try to find the resource task list and the status info so I can find the system validation cancelled and location those users. Does anyone have a query to search through and find all users with system validation = canceled and resource status as provisioned? Any help you can give would be appreciated.
Thanks
Nick

I'm positive there's a great way to do it with SQL, but you'll need to look at 4 tables:
1) OBJ (Objects) - Here you are looking in OBJ_NAME for 'OID User', once found get the OBJ_KEY value for the row.
2) OST (Object Status) - In this table, you can find all the statuses for the OID User resource based on the OBJ_KEY value. Look for the applicable ones and get the OST_KEY value for each row.
3) OIU (Object Instance for Users) - Now you can query this table for all results where OST_KEY equals the desired values as found in step 2.
4) USR (Users) - Here you can get the User ID's (usr_login), User Key (usr_key) or any other value for users to help with the query.

Query regarding SPML in OIM

Hi All,
I am working on SPML module of OIM. Really appreciate if someone could tell me the madness behind my curiosity 
1.     Through SPML can we set/recover User’s Challenge Question answer? I went through the search query response and couldn’t able to locate any attribute against which these values have been set.
2.     Another issue is that if I didn’t provide any organization to user while self-registration it doesn’t get provisioned with success result. I was expecting here that request should go to Admin Pending items but couldn’t able to locate it. Can’t we achieve the Self-registration type scenario that OIM provides by default through SPML?
3.     How can we assign the target resources to user (LDAP, RCAF etc) through SPML so that user’s account gets provisioned in these resources? Also if we want to trigger some process (Workflow), how can this be done using SPML.
Thanks
Amit

Any clue??

How to give query in lookup type udf in OIM 11g

Hi,
In OIM 9.x, we were able to provide query in lookup type field in users UDF to fetch data from DB and display it in lookup table.
Where as in OIM 11g, I cant find that option. We need to provide user id in lookuptype field based on some query. Please let me know where we can do the same in OIM 11g.
Thanks,
Kalpana.

In OIM 9.x, we had below query in one of the lookup type attribute:
select usr.usr_udf_empid,usr.usr_first_name,usr.usr_last_name from usr where usr.usr_emp_type='Full-Time' and usr.usr_status='Active' and usr.USR_UDF_EMPID is not null
The lookup used to show firstname, lastname & employee id of active employees in the lookup.
Where we can achieve the same in OIM 11g?
Thanks,
Kalpana.

Lookup Field with a Lookup Query on Process Form in OIM 11gR2

Does anyone know how to render a field on a process form so that when modifying the field for the resource a "Search and Select" window appears and allows the user to search for the value based on the lookup query defined for the field in Design Console? The lookup field has been defined as a lookup query through Design Console and tested by previewing the form in DC. When creating the Form through OIM System Administration the field is created as a Text Field, not a Lookup. Creating a new Field through OIM System Administration only allows you to create the field using a lookup code not using a lookup query. I've tried to remove / add the field in the UI (create sandbox, customize, etc.) and add it back as a Input LOV but it doesn't get added and the error in the logs say java.lang.RuntimeException: Input LOV is not supported for this attribute, please make this attribute searchable in order to drop this as an input LOV. The field is defined as searchable in the Form Designer in OIM System Administration. In fact I can't even add it back as an ADF Input Text Field w/ Label, I suspect I'll have to "Regenerate" the form to even get it back on the form. Any help is appreciated. Next step is to try to export the sandbox, massage and import.
Thanks,
Ryan

Finally got an answer out of Oracle after trying to figure this out as well. Apparently Lookup Queries are not supported at all by the R2 Web UI. They indicate that according to product management this will not be fixed.

OVD 11g: White pages application using OIM as datasource

Has anyone seen a good example of a white pages application that uses OIM Org structure and users to build a searchable white pages application?
I'd like to allow users to search for users via the html interface to OVD, but use OIM to populate all of it's data.
Any pointers would be greatly appreciated.
Thank you.

You would deploy the OAM Identity Asserter first in the list with SUFFICIENT JAAS Control Flag. Settings at a minimum include:
Application Domain: <I use the App domain that my OHS WebGate is leveraging typically. No white space please>
Access Gate: <Same Agent as WebGate>
Access Server: host:5575 of oam_server1
The OAM Identity Asserter needs to be paired with an Authenticator. OIM should have an authenticator in its domain already. If the users are in OIM, then that will suffice. Make sure it is ordered ahead of Default Authenticator.
Setup you proxy to include the following in mod_wl_ohs.conf:
<IfModule weblogic_module>
WebLogicHost myhost
<Location /oim>
SetHandler weblogic-handler
WebLogicPort 14000
</Location>
<Location /admin>
SetHandler weblogic-handler
WebLogicPort 14000
</Location>
<Location /workflowservice>
SetHandler weblogic-handler
WebLogicPort 14000
</Location>
<Location /XIMDD>
SetHandler weblogic-handler
WebLogicPort 14000
</Location>
<Location /SchedulerService-web>
SetHandler weblogic-handler
WebLogicPort 14000
</Location>
<Location /Nexaweb>
SetHandler weblogic-handler
WebLogicPort 14000
</Location>
<Location /jmx-config-lifecycle>
SetHandler weblogic-handler
WebLogicPort 14000
</Location>
<Location /spml-xsd>
SetHandler weblogic-handler
WebLogicPort 14000
</Location>
<Location /sodcheck>
SetHandler weblogic-handler
WebLogicPort 14000
</Location>
</IfModule>
Restart OHS.
In OAM, I set the Agent for the WebGate proxying to OIM to use Host Identifier "IDMDomain".

Need sql query to get OIM request pending approval details for one user

HI OIM Guru,
It would be great help if someone can provide me sql query by which i can find out how many requests are pending for approval for one user ?

1. Below query will give you status of all the request.
SELECT REQ.REQUEST_ID , REQ.REQUEST_STATUS FROM REQUEST REQ
2. You can have following status
Obtaining Operation Approval
Obtaining Template Approval
Operation Approval Approved
Operation Approval Rejected
Post Operation Processing Initiated
Request Approval Rejected
Request Closed
Request Completed
Request Created
Request Failed
Request Withdrawn
Template Approval Rejected
3. Now prepare the query from above sapmle, the requset status string should not contains foloowing values.
Rejected
Failed
Closed
Withdrawn
Completed
The builded query will give you the desired result for 11g
for 10 G
Get the OST_STATUS from Req table, and do you logic above stated
-Kuldeep
Edited by: Kuldeep on May 22, 2012 1:04 AM

Generating report from Backend Query in OIM

Hi,
I am trying to generate a report in OIM. The requirement is to generate a query that can be executed in the database to retrieve the following:
All the users in OIM with out the access (Not in provisioned or Enabled state) to Active Directory
I tried generating report using the out-of-box report for Resource Access List, which provides the list of users who are having access to particular resource, but there is no out-of-box report for providing report for users who do not have access to a particular resource.
Could any one help me write such a query. I know we need to look in to many tables before we fetch the details. A sample query would be really helpful.
Thanks

Users who have access to specific resource - it is based on organization level, simple query that lists organizations with resources that they have access to :
select a.act_name, o.obj_name, ap.acp_create, ap.acp_update
from act a, acp ap, obj o
where a.act_key = ap.act_key
and ap.obj_key = o.obj_key
Relation between users and organization is simple so it would be easy to you continue on your own...
Hope this helps!

OVD - OIM Query

Similar Messages

Maybe you are looking for