Adding validatity date for Privilege

[Murali_Shanmu]

Hi,

I am using a "To identity store pass" to update the Privilege assignment for a user. I understand that if I am going to update just one Privilege, I can hard code the date as shown below.

MXREF_MX_ROLE {VALIDFROM=2009-12-01!!VALIDTO=2010-01-01}<ManagerTechnicalRole>

I have a bunch of Technical roles which need to be modified for several users. How would you suggest passing this validity date dynamically ? I have the relevant details loaded from the .csv file into a Temporary table (using From ASCII Pass). This table has got validity dates for each privilege.

Cheers,

Murali

[Murali_Shanmu · Accepted solution]

In the "To Identity Store" pass,  can I concatenate values as below:

MXREF_MX_ROLE {VALIDFROM=%beginDate%!!VALIDTO=%endDate%}%myPrivilege%

In the above statement beginDate, endDate and myPrivilege are columns from the Temporary table. Or should I use Scripts to achieve this ?

Please suggest,

Cheers,

Murali.

[Former Member · Accepted solution]

Yes, your example should work fine, but remember the <> around the role reference unless you're providing the mskey in %myprivilege%:

MXREF_MX_ROLE {VALIDFROM=%beginDate%!!VALIDTO=%endDate%}<%myPrivilege%>

Also you might need to provide the dates as YYYY-MM-DDTHH:MI:SS if providing a time in addition to the date. That can be formatted on the source SQL statement or in a script depending on your preference and the source data formats.

Best regards,

Chris

[Murali_Shanmu · Accepted solution]

Thanks Chris.