Skip to Content
avatar image
Former Member

BYPASS_MEMBER_TASK not working for Attribute MXMEMBER_MX_PERSON while it is working for MXREF_MX_PRIVILEGE


Hi,

We are trying to delete privileges from user using the following code in the script using BYPASS_MEMBER_TASK

task_property="{D}{BYPASS_MEMBER_TASK=1}";

var tempvalue=task_property+PrivMskey;

var SetPrivToUser2 = uIS_SetValue(tempvalue,IDStore,"MXMEMBER_MX_PERSON",mskey2,"",2);

but this not working ,we are getting an error Entry doesnot exist attribute:MXMEMBER_MX_PERSON.

If we are trying to delete the privilege from ToIdentity store pass with the same concept of {D}{BYPASS_MEMBER_TASK=1} PrivMskey it's working fine.

We had raised a same thread fro Add privilege and it worked with {BYPASS_MEMBER_TASK=1} in the script and {A}{BYPASS_MEMBER_TASK=1} in the To IdentityStore pass.how-to-avoid-grc-provisioning-dynamically

Please find the screenshot of ToIdenity store pass and the error screenshot which we are recieving when we run the script containing

{D}{BYPASS_MEMBER_TASK=1}PrivMSKey

Thanks,

Dhiman

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • Best Answer
    Dec 23, 2014 at 01:55 PM

    Hi Dhiman,

    Did you read the application help for the function uIS_setValue? The usage, syntax, example are very well explained in the Application help and IDM related documents. Below is @Matt Pollicove advise to new SAP IDM consultants.

    I'd also add that attending Training is pretty important as well.

    IDM is not like other modules in it's architecture, implementation or design.  Attending formal training is a HUGE benefit.

    While using uIS_SetValue, you need not mention {D} operator. The operation is controlled by AttrOperation parameter.

    So your script should have,

    uIS_SetValue(mskey, IDStore,MXREF_MX_PRIVILEGE,tempvalue,2);


    where,

    mskey = user mskey

    tempvalue = {BYPASS_MEMBER_TASK=1}PrivMskey

    Kind regards,

    Jaisuryan


    Add comment
    10|10000 characters needed characters exceeded