FIM XPath and Security Group filter

Hi,

I'm able to create a SG with a simple xpath filter like this: /Person[(ObjectID = '7fb2b853-24f0-4498-9534-4e10589723c4')]

Now, I want to crate a SG with a more complex filter like this one:

/Person[ObjectID = /UserEntityAssociation[EntityRef = /Entity[EntityCode = '100'] and RoleRef=Role[DisplayName = RESP]]/Manager]

The Expression I'm using in the filter works on a FIM Webservice defaultClient.Enumerate

Is this a FIM limitation or a configuration issue?

I doubt it's a permissions issues because I'm able to change the xpath expression. I just cant put a more complicated one.

The error I get on the portal is this:

Error processing your request: The server was unwilling to perform the requested operation.
Reason: Unspecified.
Attributes:
Correlation Id: e8a666f0-4b7b-4e4d-b64e-3d3e8c7538ad
Request Id:
Details: Request could not be dispatched.

Many thanks,

DD



  • Edited by DevDiver 18 hours 48 minutes ago
February 24th, 2015 11:31am

Hello DevDiver,

Unfortunately, filter for group and set are restricted by the System. You cannot use an Xpath expression in your Xpath filter. You can only use simple XPath.

You can find this limitations here

under the Understanding set limitations section

Re

Free Windows Admin Tool Kit Click here and download it now
February 24th, 2015 11:48am

Thanks Sylvain, that's quite helpfull.

Attention to the link you mentioned, it has some chars at the end invalidating the navigation.

the link helped me to understand the existing limitations, so I created a set with the desired Objects to work with.

Althouh, I cannot create a SG with this filter:

Person[ObjectID = /Set[ObjectID = '203ecb88-8100-4f67-ac84-41067da6acdb']/ComputedMember/Utilizador]

I cant even create a set with these:

/Set[ObjectID = '203ecb88-8100-4f67-ac84-41067da6acdb']/ComputedMember

These xpath expressions are valid, they work via the webservice enumerate and they are not included in the FIM Service limitations, I think.

Is there anyway I can make this work?

Many thanks,

DD


  • Edited by DevDiver 15 hours 26 minutes ago
February 24th, 2015 3:15pm

Normally you can use this kind of filter:

/Person[ObjectID = /Set[ObjectID = '203ecb88-8100-4f67-ac84-41067da6acdb']/ComputedMember]

Without the last attribute "Utilizador"

Regards,

Free Windows Admin Tool Kit Click here and download it now
February 25th, 2015 3:25am

Yes, that did work. I mean the expression was accepted by FIM.

The Set[ObjectID = '203ecb88-8100-4f67-ac84-41067da6acdb'] gives me a custom Resource. I need to get the "Person" out of it via the "Utilizador" attribute but I cant figure out how.

The "Utilizador" attribute is a reference to Person.

Any idea?

Many thanks,

DD


  • Edited by DevDiver 1 hour 39 minutes ago
February 25th, 2015 4:55am

I am not sure of what you want to do. You want to get all people that are referenced by the attribute Utilizador of person that are in a specific set?

If it's that, it's not allowed by filter for group.

Regards,

Free Windows Admin Tool Kit Click here and download it now
February 25th, 2015 5:24am

Yes, I want to get all the Persons that are in that specific set.

The set objects are of a custom resource type and in that custom resource the "Utilizador" attribute is a Person reference.

I guess that can be not allowed on filtering for groups but I expected it to be allowed for a Set Expression.

Thanks,

DD

 
February 25th, 2015 5:35am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics