Contract guarantee is an IdM identity which represents a manager of the identity with contract in the company hierarchy. Guarantees are in common scenarios assigned to contracts automatically based on the company organization structure. Guarantees can be also assigned manually.

For manual adding, removing and replacing contract guarantee there are available three bulk actions performed for selected identities. All these actions are applied on all contracts of selected identities. To perform any of these actions user needs to be granted IDENTITY\_READ, IDENTITY\_AUTOCOMPLETE permissions and some additional permission for particular bulk action (see below).

Add guarantee bulk action enables to add multiple selected guarantees to all contracts the identity have. User performing this action has to be extra authorized to CONTRACTGUARANTEE\_CREATE.

Remove guarantee bulk action removes all multiple selected guarantees from all contracts the identity have. Only identities which are, in fact, contract guarantees for the selected users will be shown here. User performing this action has to be extra authorized to CONTRACTGUARANTEE\_DELETE. If none of selected guarantees is guarantee of the processed contract, such contract is skipped.

By default, this bulk action can be only used on a maximum of 500 users. This can be increased by setting the property `idm.sec.core.filter.check.size.maximum` to a higher number.

If the selected users have more than 45 contract guarantees in total, no filtering is done for performance reasons and all active identities are shown instead. If this happens, the user is notified that they see all users.

Replace guarantee bulk action is able to replace the original guarantee for the new one for all contracts the identity have. Only identities which are, in fact, contract guarantees for the selected users will be shown here. User performing this action has to be extra authorized to CONTRACTGUARANTEE\_UPDATE. If selected guarantee is not a guarantee of the processed contract, such exchange doesn't take place.

By default, this bulk action can be only used on a maximum of 500 users. This can be increased by setting the property `idm.sec.core.filter.check.size.maximum` to a higher number.

If the selected users have more than 45 contract guarantees in total, no filtering is done for performance reasons and all active identities are shown instead. If this happens, the user is notified that they see all users.

___

Result log contains records of successfully created, deleted and replaced contract guarantees (rec. 1. in the picture). Number 2. in the picture depicts the situation, when the new guarantee wasn't created because of missing permissions. If this happens the record contains instead of contract guarantee entity identity contract which the new guarantee wasn't created for.