Hello, I’ve created a custom resource “MyCostCenter” and want to apply the following filter to this custom resource: <Filter xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" Dialect="http://schemas.microsoft.com/2006/11/XPathFilterDialect" xmlns="http://schemas.xmlsoap.org/ws/2004/09/enumeration">/Person[CostCenter ='1']</Filter> To achieve this I already set up a new Filter Permission that includes · The custom resource MyCostCenter as allowed membership references · and CostCenter as allowed attributes When I'm trying to set up the filter in a custom resource object of the type MyCostCenter an " Access Denied " error is thrown with the additional error description "Filter definition is not permitted" The administrator, who perform the update, has full control for the custom resource in question Any ideas how solving this problem?

If you want to apply a filter to a custom resource you must ensure that an appropiate Filter Permission has been established for that custom resource. In the FIM Portal go to Administration | Filter Permission and create a new filter permission with at least the following configuration: Allowed attributes: all attributes you use in your filter expression, e.g. CostCenter the system attributes External System Scoping Filter, Filter, Resource Type and Search Scope Filter Allowed membership reference: a set that contains all objects of the custom resource Hope this helps /Matthias

Your right Matthias, I've created a new filter permission with all attributes I used in MyCostCenter, but I've forgotten the system attributes, especially the Ressource Type. By adding the system attributes the "access denied" is past. Nice work!