Automatic role definitions - Import all rules

This LRT - ImportAutomaticRoleByAttributesCSVExecutor will let you import automatic roles definitions by attribute. You are able to import dynamic number of rules to each role definition. Supported attributes types are:

Below you can see the structure of the csv.

role;name;identityAttrName1;identityAttrValue1;identityAttrName2;identityAttrValue2;identityEavAttrName1;identityEavAttrValue1;contractAttrName1;contractAttrValue1;contractEavAttrName1;contractEavAttrValue1
role;5 pravidel;username;kucerar;externalCode;12345;phone;123456789;main;false;fce;delnik
role;username;username;kucerar;;;;;;;;
role;povfc;;;;;;;;;fce;delnik

Description of columns:

As you can see you are able to import dynamic number of rules. So one automatic role definition can have one rule a the other definition can have 5 for example. The names of columns with attributes can be configured, only thing which is mandatory to start with "1" as suffix and increment it by one if want more attributes with same type. Names of all columns are configurable in LRT config see image below:

LRT params:

You can use this LRT even for rules updating. As long as the name of role definition is already in IdM we will update it. Update is performed as deleting previous rules and saving the new ones. Because definition name is not unique value, if LRT found more then one definition with same it will not perform update, because we don't know which rule we want to update. So in this case new role definition is created.

Recalculate automatic roles

This task only imports the automatic roles but does not calculate them! In other words, the rules are now active but have to be recalculated in order to be assigned to existing identities. If you want to recalculate roles, run the task Recalculate all automatic roles by attribute (ProcessAllAutomaticRoleByAttributeTaskExecutor)