Provisioning Task Assignment

There is a provisioning task say 'Provision Resource manually'. In the Assignment tab of the task the Target Type is 'Group User with Least Load'. There is a task assignment adapter attached and variables are mapped and in Ready status. Also there is a group entered into the Group column. So to which provisioning group the task will be assigned? the group which is entered into the group column or to the group returned based on adapter execution?

adapter return value for key type should be STRING
adpater return value for key should be LONG
but in your code you must return group key as string. you can say this is bug. But you have to return string else it will cause exception.
while returning group id, just typecast to string . this will be working perfect

Similar Messages

  • How do you complete or re-attempt failed provisioning tasks

    Hi All,
    If a modify operation has been perfomed, and subsequent provisioning tasks failed, is there a way to get IdM to go back and attempt to complete the failed task and remaining tasks.
    For example, when the MX_VALIDTO attribute changes we call an event task to determine if MX_DISABLED should be set or not. This task is a generic pass which executes some logic which evaluates other attributes. This step failed because we caused an error to be raised due to an unexpected value in one of those other attributes.
    We have now modified the logic in the script and want to 're-provision' the failed task without triggering a new change on the identity.
    I know about the uRetryPrivilegeAdd and uRetryPrivilegeRemove internal functions, but it seems as if these only deal with cases where privilege assignment had failed. Is there something similar that will reconcile and clean up failed task heirarchies where it is just attribute / entry modifications rather than privilege assignments.
    Regards
    Paul

    Hi Paul,
    Hope all is going well with your project, the two bits of code you need for this are:
    Find all the failed privileges for an Identity
    var sql = "SELECT MSKEY,aValue,provstatus FROM MXPV_Priv_AddStatus WHERE (MSKEY = " +V_MSKEY +" and (ProvStatus = 1001 or ProvStatus = 1101))";
    sqlresult = uSelect(sql);
    This will give you a load of pairs of failed MSKEY - identity and aValue - privilege, which you need to split into strings via an array and then into values, and you can then retry using
    retry = uRetryPrivilegeAdd(provmskey,provavalue);
    I've put the full code on http://sap-idm.blogspot.com/2011/01/retrying-failed-provisioning-tasks-in.html in case you need more information.
    Good luck,
    Ian Daniel

  • Task not coming in Open Provisioning Task when Request is raised(OIM 9i)

    Hi
    When ever i am assigning the task to group that task is not getting updated in the open provisioning tasks. I i assign the task to xelsysadm instead of the group i am able to see the task in open provisioning tasks.
    I thought its permission issue and created a user U1 under the system administrators and assigned the task to this user while provisioning but now also its not getting updated in the open provisioning tasks.
    The above tasks if i saw in resource profile they are in pending status..
    Can any one update how to resolve this issue so that if i assign a task to group it updates in Open provisioning tasks..

    Verify Steps:
    Create Process Defn
    Check Auto Save and Pre Populate
    Save
    Add a task "Create User"
    Save
    Go to Assignment tab
    Select Target Type as Group and Select your Group Name say "ALL USER"
    Search any user, go to Resource Profile and Click Provision Resource and Submit

  • Provisioning tasks not getting initiated when done in bulk

    Hello IDM Gurus,
    Needed your help with an issue we're currently facing; We're having an odd problem with provisioning/deprovisioning to our ABAP repositories. For each repository we are using the Add Member/ Remove Member tasks; for all repositoies, both the Add Member and Remove Member event tasks trigger a similar task that basically through the means of a script checks to see whether a user already has privileges within the target repository or not, then accordingly either adds the new privilege to the existing account or creates a new account and adds the new privilege; after the initial check is made, the decision on whether to add the privilege to the existing account or create a new one and add the privilege is done through a uProvision call from the script itself to the appropriate provisioning task for the specific repository in question; the check for whether the account exists or not is done within the Provisioning task itself.The same process is followed for deprovisioning as well. An example of how this would work is:
    JohnDoe has no account in Repository A;
    Privilege X (associated with repository A) is added to his account;
    The script is called and a check is made; the provisioning task for repository A is called;
    The provisioning task checks and sees that JohnDoe doesn't have an account in repository A, so an account is created and Privilege X is added to the new account.
    After this, we add two new privileges Y and Z(both associated with repository A) to JohnDoe
    The script is called and a check is made; the provisioning task for repository A is called;
    The provisioning task checks and sees that JohnDoe has an account in repository A, so the two new privileges are simply added to the existing account.
    This all works perfectly as long as we only work with one repository at a time; i.e. only add and remove privileges from one repository at a time; make all changes related to privileges for one repository; hit update; then try doing the same again for another repository. Whenever we make multiple changes related to multiple repositories, random things start happening, some changes go across in full, but some just don't; there's no logic in why certain changes happen and certain don't.
    Does this have something to do with working with just one dispatcher? is it not able to handle that many changes at once? I tried using privilege/assignment grouping for each repository, grouping it by repository name as it should inherently group add and remove task, but even that didn't have any effect.  Privilege changes were still going missing.
    Any suggestions / ideas to rectify this behavior?
    I would appreciate any help with the issue! Thanks in advance!
    Best regards,
    Sandeep

    Hey Matt,
    Thanks a lot for your quick response! I tried changing the number of runtime engines from the default of 1 to 4 but it had no effect; I added 3 roles for 3 systems but only one system got an account provisioned to it; is 4 not enough? should I try a higher value? is the uProvision script not supposed to be called or used in that fashion for multiple simultaneous calls?
    If looking at the backend to resolve this, would I need to only be looking at the MXP_PROVISION and MXP_AUDIT tables?
    Thanks a lot in advance!
    Best regards,
    Sandeep

  • Retrying provisioning Task error in OIM11g

    Hi to all.
    I'm facing a strange issue when trying to retry a provisioning task. In particular, I have connected the OIM11g to an UNIX Server. When the provisioning task is rejected (I'm trying to provision an already provisioned user login, causing SSH_USER_USEREXISTS_FAIL error), the provisioning task goes correctly in "Rejected" status. With the same user that tries to finalize the privisioning, I try to "Retry the provisioning task". But this retry fails. It says me: "Unable to retry task", and the OIM log says "<XELLERATE.APIS> <BEA-000000> <The logged in user does not have permissions to perform this operation>". But the user is the same that I used to finalize the provisioning task.
    Could anyone help me? I've already tried to assign the user all the privileges to complete the retry of the task but this did not solved my issue.
    Thank you all in advance.
    Regards,
    Giuseppe.

    Hi All,
    I have the same requirement so I created a custom role and addded the above Data Object permissions for the role. In the organization I had added the custom role in Administrative role list with write access but still I am getting error saying 'Logged In user does not have permissions'. Added all the permissions present in Data Object Permissions for this role but still I am getting the same error. When I add the system Administrator role as super role to my custom role then the user who belongs to the custom role is able to retry the task but I cant give this permission to this role. So please suggest me if I miss anything.
    Thanks,
    Rajesh

  • Manual Provisioning task throwing error

    In OIM 10g we have a manual provisioning task which is assigned to an user. when he tries to click Set Response he is getting 'UNKNOWN' also as one of the options with the other two options 'Complete' and 'Cancel'. Also when trying to Complete the provisioning process it throws an error as
    DOBJ.SCHTM_SCH_DATA_CHANGED
    Schedule data cannot be changed once it has been set.
    Please let me know what might be the cause. Thanks
    Regards,
    Durgaprasad

    Hi Kevin,
    Thanks for your reply. I dont have a process task adapter attached to this task. I have a task assignment adapter only. Also i dont have any clue why 'UNKNOWN' option is getting displayed in the set response page.
    Regards,
    Durgaprasad

  • No email notification from manual provisioning task - 11gR2

    I have a disconnected application instance and I am using the standard DisconnectedProvisioning flow for provisioning - modified to assign the provisioning task to a group, using a rule which determines the group via the app. instance name.
    The flow itself works as expected and the Manual Task in the flow is assigned to the correct group - the task shows up in the Inbox of the member of the group in the Self Service console
    I would like to send an email to the user when the task is assigned and I have therefore configured SMTP Notification according to this http://allidm.com/blog/2012/11/configuring-smtp-notifications-in-oracle-identity-manager-11gr2/
    I have confirmed that the SMTP server works as expected - I am able to send and receive message using this server.
    On the Notification Tab of my Manual Task I have configured:
    General:
    Status: Assign / Recipient: Assignees
    Status: Complete / Recipient: Initiator
    Status: Error / Recipient: Owner
    Advanced:
    Remind Once: 0 days, 0 hours, 1 minute "After Assignment"
    Encoding: UTF-8
    Make Notifications Secure: False
    Show worklist/workspace URL in notification: True
    Make notification actionable: True
    Send Task attachment: False
    Group Notification Configuration: "Send individual emails" 
    I have redeployed my DisconnectedProvisioning flow to my SOA server a couple of times - remembering not to change the version number and to force overwriting the existing flow.
    My SOA and IDM servers have been restarted as well.
    When requesting the disconnected application instance using the catalog, the manual provisioning task is assigned to the correct user - however - he does not receive any email nor do I send any errors or stack traces from my SOA or IDM servers.
    There must be some check box somewhere that I forgot to tick!
    Does anybody have an idea - did I forget to configure something?
    Kind regards,
    - Tom

    Ok - so I did in fact forget to tick a check box!
    After setting up UMS using this: http://docs.oracle.com/cd/E27559_01/admin.1112/e27149/notification.htm#CACCEDGF and enabling notifications via:
    Enterprise Manager, SOA, soa-infra, SOA Infrastructure drop-down, SOA Administration, Workflow Config:
    Notification Mode: Email
    After restarting my SOA and OIM managed servers - I now receive emails as expected.
    Case closed :-)
    Kind regards,
    - Tom

  • My Tasks View in my custom task list fails to display the tasks assigned to me (that is the currently logged in user)

    Hi
    I am new to sharepoint 2010.
    I created a custom task list, where I  have many tasks assigned to users (I had tasks assigned to me as well). I created a view as "My tasks "and having a filter as Assigned To is equal to [Me]. When I do that my view fails to show the
    tasks assigned to me. This happens same with the Sharepoints 'My Tasks' view as well. I tested by creating some test tasks under my name and when I selected 'My Tasks' view no tasks are getting displayed.
    Please help.
    Thanks,
    Gokulkumar.

    Hi,
    According to your post, my understanding is that you wanted to display the tasks assigned the current logged in user.
    In my environment, if I used the System Account, My Task view didn’t display any tasks.
    However , if I used other users except the System Account, My Task view could display current user tasks correctly.
    I recommend to use other accounts except System Account to log in site. Then everything will work well.
    Thank you for your understanding.
    Best Regards,
    Linda Li
    Linda Li
    TechNet Community Support

  • How to get group key from a task assignment adapter

    Hi All,
    Senario:
    I have two groups, say G1 and G2.
    One Access policy, say P. (This access policy is associated with AD resource.)
    AD Resource Object R.
    I have defined an Approval process for Resource R.
    Access policy P is assigned to both Group G1 and G2.
    This Access Policy P is linked to Resource R
    According to above configuration,
    When I add User U1 to Group G1 ( or G2 ) through "Group Membership", Access Policy P is executed and the approval process which associate with the Resource R is executed.
    In my Approval process, I have a task assignment adapter.
    Within my adapter, I want to get the group key, which cause to fires this approval process. ( It may be G1's key or G2's key. )
    Could some one help me for this ?
    Regards,
    Thirlk
    Edited by: thirlk on Jun 28, 2009 10:55 PM

    See this thread
    Working on the same requirement.
    How to get the administrator group of a group from a approval process
    If you have any further question let me know.

  • SharePoint's role and its task assignment

    SharePoint's role and its task assignment list below:
    *Workflow
    *App
    *PowerShell
    *SharePoint migrering
    *Enterprise Content Managment
    *Business Intelligence
    *social business platform
    *SharePoint analyst
    *SharePoint Enterprise Search
    *Document management
    *SharePoint Cloud
    *SharePoint BDC (Business Data Catalog)
    What more am I missing that is important to add?
    Please remember that I'm a newbie in SharePoint 2013.

    I understand you have added ECM but I would also add Records Management, Machine Translation Service and Community Sites.
    If you want to add features then you should also include Office Web Apps, Cross Browser Support and Responsive Web Design.
    Amit

  • Task Assignment to Ggroup - Group Members Not Getting Email

    I have a process with an approval activity with initial user selection set to a group rather than a specific user. I want all selected users to receive an email notification that a new task awaits them. When I assign to a specific user, the custom email template is sent to the user. When I assign to a group, the group members don't get the task assignment email.
    How do I change that so that group members will receive email notification of task assignment?
    Thanks in advance!
    Eric

    One possible solution:
    You can use our Group Lookup component to get a comma-separated list of the emails of the members of the group. Then, in the step before the User>assignTask step, send the group an email. The only problem is that you won't be able to embed a link directly to the task, because the task doesn't exist yet.
    Doc: http://avoka.dnsalias.com/confluence/display/Public/Lookup+DSC
    Download: http://www.avoka.com/avoka/escomponents.shtml
    To work around this problem, you can use the technique outlined here:
    http://blogs.avoka.com/2008/10/20/customize-user-task-escalation-after-assignment/
    http://avoka.dnsalias.com/confluence/display/Public/Customize+User+Task+Escalation+After+A ssignment
    If you need more assistance, contact info-at-avoka.com
    Howard

  • Project 2013 REST API - getting all tasks assigned to a user

    I'm trying to get all tasks assigned to a user to display something like you would see in "My Tasks" using the REST API.
    I found this: http://social.technet.microsoft.com/Forums/projectserver/en-US/a5d8760d-8e27-432b-8187-592cadf302ae/get-my-tasks-tasks-via-rest-api-or-web-services?forum=sharepointdevelopment
    But it doesn't seem to pertain to Project 2013.
    Any idea on how I could do this?
    As an aside, I'm having some trouble with finding guidance in the documentation. Are there any Project 2013 developer resources that break things down a little more than the SDK? Everything I've found is pretty Sharepoint-centered, not really getting into
    the specifics of Project.

    Check the samples folder which gets installed with SDK, there you will find some samples, however may not be the REST but with CSOM you could try something like this, i am sure you would be able to convert this pretty easily, in case required
    projContext = new ProjectContext(pwaPath);
    var PrjList = projContext.LoadQuery(projContext.Projects.Where(Prj => Prj.Name == newProjName));
    projContext.ExecuteQuery();
    var GotPrj = PrjList.First();
    //DraftProject projCheckedOut = GotPrj.CheckOut();
    projContext.Load(GotPrj.Tasks);
    projContext.ExecuteQuery();
    foreach (var tsk in GotPrj.Tasks)
    this.textBox1.Text += Environment.NewLine + "Task Name: " + tsk.Name + " || Task Work: " + tsk.Work +" || Task Remaining Work: " +tsk.RemainingWork;
    projContext.Load(tsk.Assignments);
    projContext.ExecuteQuery();
    foreach (var tskAssgn in tsk.Assignments)
    projContext.Load(tskAssgn.Resource);
    projContext.ExecuteQuery();
    this.textBox1.Text += Environment.NewLine + tskAssgn.Resource.Name + "--Res ID--" + tskAssgn.Resource.Id +
    "----Assgn ID: " + tskAssgn.Id + " || Actual Work: " + tskAssgn.ActualWork +
    " || Assgn Remaining Work: " + tskAssgn.RemainingWork
    + " || Assgn minDate: " + tskAssgn.Start
    + " || Assgn maxDate: " + tskAssgn.Finish
    Thanks | epmXperts | http://epmxperts.wordpress.com

  • What  is difference btw project Assignment, Resource Assignment and task Assignment.

    Hi,
    I am new project accounting Module .
    what  is difference btw project Assignment, Resource Assignment and task Assignment.

    Project Assignment, Resource Assignment refers to the resource management part and Task assignment is basically the work assignment to the resource.
    An assignment/requirement is created in PJR for create demand for the resource requirement of the project and when the resource is aligned he can be assigned to the task in the work plan.
    Refers to the top down approach in this case.
    Additionally a resource can be assigned to the work plan and a assignment can be created to get the resource allocated to the project.
    Refers to the bottom up approach in this case

  • OIM - Task Assignment Adapter - How to get the object instance key?

    Hello experts,
    I'm trying to use a task assignment adapter to assign an approval task dynamically. Basically, the user can request a resource like "CustomApp Profiles" and we create an object form to let them choose the profile that he needs. Each profile has an owner, which is populate in a Lookup (Owner is the code and Profile is the decode).
    So, in the approval task, I need to get the profile selected by user in the object form and search into the lookup who is the owner of that profile. But I don't know how can I get the object instance key using the parameters that can be mapped to a task assignment adapter.
    Looking into the OIM documents, I believe that the easier way is using the request key, because the REQ_KEY is a foreign key in OBI table.
    Did anyone knows how can I get the object instance key using the request key? Can I use some API or should I execute a SQL statement directly in OIM database?
    Best Regards,
    Nitto

    To retry a task that is in a rejected state, you use the SCH_KEY which is the task key.  In OIM, all rejected tasks are listed in the OTI table.  It contains all the important information about a rejected or pending task.
    You can use the APIs found in the tcProvisioningOperationsIntf class to retrieve open tasks.
    -Kevin

  • Query for tasks assigned individually to all members of a user group

    I am looking for a query that will allow me to create a list view that will show all tasks assigned to the current user (in the Assigned To field), as well as to other members of the user group that the current user belongs to. The scenario is that we want
    a student to see tasks assigned to them, as well as to other students in the class. Each class is its own user group. I have seen a lot of examples where the filter shows tasks assigned to the current user and the current users group - that is NOT what I am
    looking for.
    For example - Todd (me), Fred and John are members of one user group. When I look at this class view, I should see tasks assigned to me, as well as those assigned directly to Fred and John.
    Does anyone have a CAML query for this? I am thinking it would need to include the SPGroup element. Thanks!

    Hi William,
    I've tried this, but it isn't working for me. Should I chnge the Smart Group, to an ordinary one?
    Thanks

Maybe you are looking for