cancel
Showing results for 
Search instead for 
Did you mean: 

Using views to get IdM Data

Former Member
0 Kudos

Hi,

Could you please help to build these SQL requests?

  • List all the users with direct assignment privileges
  • List all the user with inherited assignment privileges (From Business Roles)
  • List all the user with inherited assignment privileges (From Rules)
  • List all assignment privileges inherited from a subset of Business Roles not all Business Roles

Best regards,

Mery

Accepted Solutions (1)

Accepted Solutions (1)

ChrisPS
Contributor
0 Kudos

Hi Mery,

            I believe at least some of these topics should already be found if you search the IdM space (both forums/blogs and wiki) first. If then there are still topics that are not clear post again and the community can try and help.

Best regards,

Chris

IdM Spacer moderator

Former Member
0 Kudos

Hi Christopher,

Could you please correct me if I am missing somthing here: All assignment  for a user

select mcThisMSKEYVALUE, mcAttrName, mcOtherMSKEYVALUE

  from idmv_link_ext

  where mcLinkType=2 -- mcLinkType: Assignment (i.e. user-role, user-privilege, user-group)

  and mcThisMSKEYVALUE='Admin'

How to make a filter (Direct/From BR/From Rule) ? on the AttrName?

Thanks,

Mery

ChrisPS
Contributor
0 Kudos


Hi Mery,

            a good start is the below blog from one of our IdM developers

Here are some examples I use

/* returns assignment info (including inherit count and assigned direct
information */
SELECT mcUniqueId, mcThisMSKEY, mcOtherMSKEY, mcAttrName, mcThisOcName,
mcOtherOcName, mcThisMSKEYVALUE, mcOtherMSKEYVALUE, mcLinkState,
mcExecState, mcAssignedDirect, mcAssignedInheritCount FROM idmv_link_ext
where mcThisMSKEYVALUE = '<USER_MSKEYYVALUE>' order by
mcUniqueId


/* returns the attributes for all assignments */
SELECT * FROM idmv_value_basic_all where mskey in (SELECT mcOtherMskey
FROM idmv_link_ext where mcThisMSKEYVALUE = '<USER_MSKEYYVALUE>') order
by mskey

/* get all assigned entries of the business role */
SELECT mcUniqueId, mcThisMSKEY, mcOtherMSKEY, mcAttrName, mcThisOcName,
mcOtherOcName, mcThisMSKEYVALUE, mcOtherMSKEYVALUE, mcLinkState,
mcExecState, mcAssignedDirect, mcAssignedInheritCount FROM idmv_link_ext
where mcOtherMskeyValue = '<BUSINESSROLE_MSKEYVALUE>'

Thanks,

Chris

Answers (0)