Issue in To Identity store Pass while adding system privilege

[Former Member]

Hi

We have a scenario to auto assign privilege after user creation.

I followed steps as suggested in the link

http://scn.sap.com/people/matthew.pollicove/blog/2009/03/19/renaming-the-nw-idm-mskeyvalue-attribute...

to rename the mskeyvalue immediately after user creation using some custom logic.

Post which i need to auto assign privilege for that user. I created a 'To Identity' store pass and defined the following variables

MSKEY      %MSKEY%

MXREF_MX_PRIVILEGE     <PRIVILEGE_1>

ChangeType     Modify

When above pass gets invoked it is failing with below error

ToIDStore.modEntry failed updating entry '67160'. IDStore returned error message: "Entry does not exist" when fetching entry

Can anyone please advise what could be the problem here ?

Thanks

Karthik

[Murali_Shanmu · Accepted solution]

Hi Karthik,

As per Matt's blog - "MSKEYVALUE is the external facing unique value for the Identity Store, while the MSKEY is the internal value used in the database"

Instead of MSKEY provide MSKEYVALUE like below

MSKEYVALUE      %MSKEYVALUE%

MXREF_MX_PRIVILEGE     <PRIVILEGE_1>

ChangeType     Modify

Also, could you elaborate on your approach. At what point is this pass going to be executed. Are the users being created when the initial load is run for an ABAP system ?

Cheers,

Murali

[Former Member · Accepted solution]

Thanks Murali. It worked.

Actually user creation is happening manually via UI console.