FIM Portal Control Who can View/Do What
Hello Everyone,
I've set up my FIM portal and created my workflow
i need to have a user set i created be able to access user members that belong to another set and change a property (or attribute)
any knows how to do that ?
thanks !Hitch Bardawil
June 28th, 2011 10:00am
Hi Hitch,
that's exactly what MPRs do. Tick "Grant Access" and set your Requestor and Target sets, select the attributes and it will all work.http://www.wapshere.com/missmiis
Free Windows Admin Tool Kit Click here and download it now
June 28th, 2011 2:37pm
hello carol,
thnx
so setting an mpr will allow my set to enable the radio buton i have in the users properties ? and just that ?
what will they see when they login to the portal ?Hitch Bardawil
June 29th, 2011 12:31pm
People can only see fields they have rights to if you include the "my:RightsLevel" section in the field definition:
<my:Control my:Name="EmployeeType" my:TypeName="UocDropDownList" my:Caption="{Binding Source=schema, Path=EmployeeType.DisplayName}" my:Description="{Binding Source=schema, Path=EmployeeType.Description}" my:RightsLevel="{Binding Source=rights, Path=EmployeeType}">
http://www.wapshere.com/missmiis
Free Windows Admin Tool Kit Click here and download it now
June 29th, 2011 1:13pm
What they see when they logon to the portal is up to you. By default, assuming you have enabled these MPRs:
General: Users can read non-administrative configuration resources User management: Users can read attributes of their own
The users will be able to access the portal and view their own properties (some of them anyway). They will be able to see the Requests and Approvals area and DGs.
If you choose to enable this MPR:
User management: Users can read selected attributes of other users
Users will be able to view other users and search for users, etc.
You can either customise these MPRs or add new MPRs that supplement these or not enable these and create your own.
If you have a custom attribute that you wish a set of users to access then you will need to add that attribute to the user
Resource Control Display Configuration (RCDC) and then create an MPR that allows the set of users the ability to modify that attribute for another set of users. Doing so will
allow the control that you added to the RCDC to be editable (in edit mode).
July 4th, 2011 9:39am
Great ! i'll try that,
thank you !Hitch Bardawil
Free Windows Admin Tool Kit Click here and download it now
July 7th, 2011 3:59am