Hi all, I have added a custom Resource in FIM Portal : a Department Object with several attributes and bindings. The most important is "Manager" attribute filled with user (mono valued). I want to build dynamically a Set with all users referenced as manager in Department objects. With last FIM updates, it's impossible to build a filter rule like that. I tried to change Xpath filter directly in advanced mode,but it doesn't work. I think it's a basic need in order to give special right. Is it possible to by-pass this problem? Thanks for your answers. Victor

Short answer: you can't do this. You're correct that in RC0 you could do this. Now the ability to dereference in set criteria is limited to the computed (and explicit) member of sets (and groups too for groups). Unfortunately you're going to need to get some info. back onto the managers to build this set, i.e. a "backlink" that references the managed resources from the user.

This is a classic condundrum ... the need for a "backlink" type of binding (think of person.memberOf vs. group.member ... the latter is a real binding, and the former is derived in the AD users and computers console). I could use UNIFY's Identity Broker technology to set up a generic management agent (ECMA) to achieve this via the sync engine ... exporting the department and user objects, together with the department.manager reference, to this ECMA ... and reading back a derived person.managedDepartment reference. You can also use a SQL database and a set of views to do this, but it's much messier. I guess the other option is to use a custom activity to maintain your "backlink" reference directly in FIM ... i.e. whenever department.manager changes, lookup the corresponding /Person[ObjectID='[//Target/manager]'] and update a person.managedDepartment multi-valued reference binding. Either way will work, but I have to admit it would be lovely to have the RC0 functionality back again! How much interest is there in a generic solution to this problem I wonder ...Bob Bradley, www.unifysolutions.net (FIMBob?)