Automatically assignment of Business Roles

[Former Member]

Hi @ All

I would like to ad a basic business role for new employees which are coming from HCM to trigger a workflow.

Tried it with:

Attribute                                   Value

MXREF_MX_ROLE                    <Rolename>

it the pass. Did not work.

For technical roles this works fine with MXREF_MX_PRIVILEGE.

Is there an other way?

BR Gerhard

[Steffi_Warnecke · Accepted solution]

Hello Gerhard,

I think the problem is the role name. You called it NOTESWORKFLOW (first screenshot), yet in the pass you write ROLE:NOTESWORKFLOW. Could you either change the name of the role to ROLE:NOTESWORKFLOW or the value in the pass to NOTESWORKFLOW to see if it's working then?

Regards,

Steffi.

[Former Member · Accepted solution]

Hi Steffi,

I have tried it that way, same result

putNextEntry failed storingtestuss

Exception from Add operation:com.sap.idm.ic.ToPassException: ToIDStore.addEntry failed storing entry 'testuss'. IDStore returned error message: " Referenced value does not exist:Attribute: MXREF_MX_ROLE" when storing attribute 'MXREF_MX_ROLE=<NOTESWORKFLOW>'

Exception from Modify operation:com.sap.idm.ic.ToPassException: ToIDStore.modEntry failed updating entry 'testuss'. IDStore returned error message: "Entry does not exist" when fetching entry

BR Gerhard

[Steffi_Warnecke · Accepted solution]

Hmm, could you try to add this role to an existing user via a pass? Just to see if it's working then. Does creating a new identity with that pass work without the role add?

[Former Member · Accepted solution]

For me its seems like you are not using the corect identity store in your ToIdentityStore Path. As I can see in the screenshots it seems, that you have more then one identity store?!

Are the store in which you created the role and the one you selected in the ToIdentityStore Path the same?

If they are the same, have you tried it with:

MXREF_MX_ROLE = {A}11308

[Former Member · Accepted solution]

Hello Christoph,

the pass and the role are in the same ID Store.

But you're right, it has something to do with the ID Store.

My productive ID Store is SAP Master, ID Store Number 2.

"Enterprise People is Number 1.

In the Java Stack and in the Global constant "SAP_MASTER_IDS_ID" is use ID Store 2.

when I create a role in ID Store Enterprise people, the whole thing works!!!!

P.S. MXREF_MX_PRIVILEGE also does not work:-(

[Steffi_Warnecke · Accepted solution]

Hello Gerhard,

so if you change the Identity Store in the last screenshot to your ID store (now it says Enterprise People), that in doesn't work, but the way it is now it works? Did I understand that correctly?

Regards,

Steffi.

[Former Member · Accepted solution]

Hi Steffi,

it's really weird. When I create a role in "Enterprise People" (which is not my productive ID store) and try to assign it with the pass in my productive ID Store (SAP_MASTER) it works.

It looks like he does not recognize the roles in the SAP_MASTER ID Store.

Also Self-created attributes he does not recognize.

[Steffi_Warnecke · Accepted solution]

Hello Gerhard,

did you change the ID store in the pass to SAP_MASTER? Because in the screenshot it's still Enterprise People. I'm talking about the "Destination"-tab, here:

Regards,

Steffi.

[Former Member · Accepted solution]

That's it. I can't believe it Thank You Soo much.

[Steffi_Warnecke · Accepted solution]

You are very welcome. ^^ In my experience it's the little things, that make the most problems, because most of the time we don't notice them anymore. *g*

Regards,

Steffi.

[Former Member]

That should work Gerhard - Checking the role name is probably the first step.  You can try with just the MSKEY rather than MSKEYVALUE but that sometimes doesn't work (there are a few times I've encountered issues).

As Steffi said, post a screenshot and we can have a closer look.

The {A} is optional so it should work without it...

Peter

[Former Member]

Hey, thank you very much for your reply,

Here are my screenshots:

1. The Role name:

I have created the role in the MMC.

2. The pass

I put it in the "create identity pass" of the PF to test it. After that i put it in the "Write HCM Employee To SAP Master" of the HCM Staging Area to ad the role to the User. 

I already tried it with {A}<ROLE:NOTESWORKFLOW>, same result.

2. The error message:

BR Gerhard

[Former Member]

Hi Gehard,

on the pass that you created you need to include the atribute

changetype and on value you need to set modify

regards,

Eduardo

[Former Member]

Definitely one of the issues is ROLE:... - the name in the role def is the whole name.

Try setting:

MSKEYVALUE     %MSKEYVALUE%

MX_ENTRYTYPE     MX_PERSON

MXREF_MX_ROLE 11308

I've sometimes found that it looses the plot on Entry Type - it should remove that line for you and reset the dropdown box value.

If it works with the MSKEY then you can move forward.

Peter

[Steffi_Warnecke]

Hello Gerhard,

could you show a screenshot of the pass? Maybe there is just something small missing.

Did you add it like this?

MXREF_MX_ROLE     {A}<ROLE:ROLENAME>

Regards,

Steffi.