Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
Last revision Both sides next revision
devel:documentation:accounts:dev:account-management [2019/03/26 12:20]
svandav [Name of account in IDM] 		devel:documentation:accounts:dev:account-management [2019/03/26 12:33]
svandav
Line 1: Line 1:
-====== Account Management ====== +====== Account management (ACM) ====== 
-{{tag> account uid identity}}+{{tag> account management uid identity ACM}}
  
  
Line 22: Line 22:
 <note important>Basic account management does not provide **delete** of accounts for now. Only allows their **creation**.</note> <note important>Basic account management does not provide **delete** of accounts for now. Only allows their **creation**.</note>
  
-===== Script - Can be account created? =====+==== Script - Can be account created? ====
   * This script can be defined on the system provisioning mapping.   * This script can be defined on the system provisioning mapping.
   * Is executed before any IdM account (AccAccount) is created (for identity type are executed too).   * Is executed before any IdM account (AccAccount) is created (for identity type are executed too).
Line 28: Line 28:
   * This script returns `Boolean.TRUE` (for create the account) or `Boolean.FALSE` (for not create the account).   * This script returns `Boolean.TRUE` (for create the account) or `Boolean.FALSE` (for not create the account).
  
-==== Script example - role catalogue====+=== Script example - role catalogue===
 We will now show how we can use the script. We will now show how we can use the script.
 Situation:  Situation: 
Line 105: Line 105:
  
 =====Incremental account management and provisioning===== =====Incremental account management and provisioning=====
-{{tag>incremental account management ACM}}+{{tag>incremental account management ACM provisioning}}
  
 <note tip>Supported since version 9.6.0.</note> <note tip>Supported since version 9.6.0.</note>
Line 114: Line 114:
  
 <note>If the identity is saved, provisioning is still made **for all assigned accounts**.</note> <note>If the identity is saved, provisioning is still made **for all assigned accounts**.</note>
 +
 +<note important>**Differently from previous versions**, editing / adding / removing a single assigned role does **not recalculate all assigned roles** and related accounts of a identity! If you need to perform account management for the entire identity, then use the bulk operation **Recalculate accounts and provision**. This operation is available on the table of all users.</note>
  
  
  
  
  • by svandav