How To fill VALID_TO date into PRIV assignement from a pass ToIDS

[Former Member]

Hi all,

I would like to know how I can add privilege with a "valid to" date directly from a job with a ToIDS pass ?

It sounds that adding a privilege already owned by the target user with a different valid to date, will update the EXPIRYTIME of the assignment. Does it works through ToIDS pass as well ?

Thanks for your help,

Regards,

[paul_abrahamson_sap · Accepted solution]

set the MXREF_MX_PRIVILEGE attribute to the desired privilege using the pending / time values inside {} before the privilege name in <>

e.g.

{VALIDFROM=!!VALIDTO=2010-10-20T09:00:00}<PRIV:AD:ACCOUNT>

Will cause the privilege PRIV:AD:ACCOUNT to expire at 9:00am on 20th October 2010.

This works in a To Identity Store pass in a job aswell as in a provisioning / action task.

Edited by: Paul Abrahamson on Oct 20, 2010 8:55 AM