CA Identity Manager: PX Policy that removes roles from users.

Document ID : KB000010965
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

This document will walk you through the steps needed to create a PX Policy that will remove all of the provisioning roles from a user. You could use this PX Policy when disabling users who are no longer with your company, or any other use case that this is suited for in your business. 

Background:

This PX Policy is just an example, the policy written here is set to fire on Modify User but you'll likely want to run it on a custom disable user task or something other than modify user. Or, you'll want very specific entry rules to prevent this policy from removing the roles off of every user who you modify. 

Instructions:

Please note that this PX Policy will only work on Submitted Task type. 

2018-01-29 11_47_06-Identity Manager _ Modify Policy Xpress Policy_ Role Removal.jpg

2018-01-29 11_47_19-Identity Manager _ Modify Policy Xpress Policy_ Role Removal.jpg

 

2018-01-29 11_47_29-Identity Manager _ Modify Policy Xpress Policy_ Role Removal.jpg

2018-01-29 11_47_37-Identity Manager _ Modify Policy Xpress Policy_ Role Removal.jpg

2018-01-29 11_47_49-Identity Manager _ Modify Policy Xpress Policy_ Role Removal.jpg

2018-01-29 11_48_10-Identity Manager _ Modify Policy Xpress Policy_ Role Removal.jpg

2018-01-29 11_48_20-Identity Manager _ Modify Policy Xpress Policy_ Role Removal.jpg

2018-01-29 11_48_29-Identity Manager _ Modify Policy Xpress Policy_ Role Removal.jpg