Identity center.Modify table MXIV_SENTRIES

[srilakshmi_s2]

Hi,

In Identity center , We would like to create a pass to modify/delete data in Identity center . We were trying to modify values for some of the Attributes of MX_PRIVILEGE .

In that pass , we included source as "From databse" and selected From Identity store check box. then gave a SQL Query to get the records satisfying a condition . then in destination we chose MX_PRIVILEGE , and gave

MSKEYVALUE %MSKEYVALUE%

changetype modify

SYSID <NEW VALUE>

We could modify SYSID but could not modify MSKEYVALUE(Is it used as primary key here?) . please advise how to do that.

How can I use efficiently the changetype attribute in my pass. where it needs to be included in the destination tab.

If you have someother solution for this also ,please let me know.thanks

Thanks

[Former Member]

It's never a good idea to affect the database views or tables (MXIV_SENTRIES is a view by the way)

Just so you know however, MSKEYVALUE is not the primary Key, rather MSKEY is.

I think you might want to reconsider how you are modifying the privilege, which are usually associated with Roles in IdM.

If you spell out your use case a little better, we might be able to come up with some recommendations.

[srilakshmi_s2]

Matt,

You are right , thanks for corecting my sentence . MXIV_SENTRIES is a view and MSKey is the primary key .

here the situation is :

We have loaded so many privileges (roles) for a particular SAP system into Identity store. We give ROLEID,SYSTEMID AND ROLEDESC in ASCII input file and updated the identity store using read pass . The write pass inturn stores values for all the attributes of the entry type based on the input file data.

FOR EX:

The MSKEYVALUE attribute of the entry type MX_privilege is given value <SYSTEM_ID>:<ROLE_ID> .

SYSID attribute is used to store <SYSTEM_ID> ETC.

Now , we would like to change the name of <SYSTEM_ID> to <SYSTEM_ID_NEW> .

First option,I thought of deleting all the records in MXIV_SENTRIES pertaining to that MSKEY and reload the new data .for this I need some help for how to use changetype delete .please advise .

Secondly I thought of modifying the AVALUE for those Attributes wherever <SYSTEM_ID> come into picture into new value.For this I used changetype as modify(still I would like to know how to use appropriatly this attribute) .It worked for SYSID .It replaced the old value with new value. ButI could not modify MSKEYVALUE value to <SYSTEM_ID_NEW>:<ROLE_ID>.

About the write pass:

In the source tab, I have checked "From Identity store" and written a query to fetch those records which satifies current scenario.When I create a write pass , in the destination tab , the attribute and values will be given. In that first row is automatically blue in color and we have MSKEYVALUE there in almost all the passes . I had to give the exact value and not the new one to replace ..But MSKEYVALUE should be replaced with the new value .'

Please advise as which can work in this situation , delete /modify . Also if you have someother view please provide your thoughts.Appreciate your help in this .!

[Former Member]

Your best bet is to edit the entries already in the system, if all you want to do is rename their MSKEYVALUE.

Take a look at this link:

/people/matthew.pollicove/blog/2009/03/19/renaming-the-nw-idm-mskeyvalue-attribute

I wrote it with MX_PERSON entries in mind, but there is no reason it would not work for other entry types.

Hope this helps,

Matt

[Former Member]

Your best bet is to edit the entries already in the system, if all you want to do is rename their MSKEYVALUE.

Take a look at this link:

/people/matthew.pollicove/blog/2009/03/19/renaming-the-nw-idm-mskeyvalue-attribute

I wrote it with MX_PERSON entries in mind, but there is no reason it would not work for other entry types.

Hope this helps,

Matt