on 02-25-2014 11:07 AM
Hi,
Could you please help to build these SQL requests?
Best regards,
Mery
Hi Mery,
I believe at least some of these topics should already be found if you search the IdM space (both forums/blogs and wiki) first. If then there are still topics that are not clear post again and the community can try and help.
Best regards,
Chris
IdM Spacer moderator
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Christopher,
Could you please correct me if I am missing somthing here: All assignment for a user
select mcThisMSKEYVALUE, mcAttrName, mcOtherMSKEYVALUE
from idmv_link_ext
where mcLinkType=2 -- mcLinkType: Assignment (i.e. user-role, user-privilege, user-group)
and mcThisMSKEYVALUE='Admin'
How to make a filter (Direct/From BR/From Rule) ? on the AttrName?
Thanks,
Mery
Hi Mery,
a good start is the below blog from one of our IdM developers
Here are some examples I use
/* returns assignment info (including inherit count and assigned direct
information */
SELECT mcUniqueId, mcThisMSKEY, mcOtherMSKEY, mcAttrName, mcThisOcName,
mcOtherOcName, mcThisMSKEYVALUE, mcOtherMSKEYVALUE, mcLinkState,
mcExecState, mcAssignedDirect, mcAssignedInheritCount FROM idmv_link_ext
where mcThisMSKEYVALUE = '<USER_MSKEYYVALUE>' order by
mcUniqueId
/* returns the attributes for all assignments */
SELECT * FROM idmv_value_basic_all where mskey in (SELECT mcOtherMskey
FROM idmv_link_ext where mcThisMSKEYVALUE = '<USER_MSKEYYVALUE>') order
by mskey
/* get all assigned entries of the business role */
SELECT mcUniqueId, mcThisMSKEY, mcOtherMSKEY, mcAttrName, mcThisOcName,
mcOtherOcName, mcThisMSKEYVALUE, mcOtherMSKEYVALUE, mcLinkState,
mcExecState, mcAssignedDirect, mcAssignedInheritCount FROM idmv_link_ext
where mcOtherMskeyValue = '<BUSINESSROLE_MSKEYVALUE>'
Thanks,
Chris
User | Count |
---|---|
84 | |
24 | |
12 | |
9 | |
7 | |
6 | |
5 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.