IdM: Automatically assign a privilege when create a user

[Former Member]

Dear all,

I want automatically assign a privilege to a user, when a create this user. How I have to do this? Must I use dynamic group?

My idee is: All of our people need a account in the SAP portal, so I want to assign automatically the privilege PRIV:PORTAL:ONLY to the user.

Best regards,

Hans

[Former Member · Accepted solution]

Dear Tero,

Thank you for your replay.

My user will create automatically in my IdM and not in the UI.

Do you think, I have to add the attribute MXREF_MX_PRIVILEGE to my task? The value of the attribute, was the MSKEY value auf my privilege?

Best regards,

Hans

[terovirta · Accepted solution]

If it's all users no exceptions then maybe something as simple as this in add event task of mx_person:

regards, Tero

[Former Member]

Thank, that is good way!

[laurent_vandenbemden]

Hello,

I implemented a similar solution last week to assign the PRIV:UME privilege as soon as a new user is created via the IDM UI.

Krz,

Laurent

[terovirta]

Lot of options depending your requirements..

Dynamic group is one option but it requires small configuration effort.

If it's all users, maybe then an add event task for MX_PERSON where you grant the privilege? Takes 5 minutes to do.

Are there any exceptions? Do you have also non-dialog users in your IdM?

Any requirements for deprovsioning?

Where do you get the users? If it's SAP HCM-integration case and no users are created in the UI, then add the privilege in the job that moves the identities from staging Id Store to your master Id Store.

regards, Tero