Jorge's Quest For Knowledge!

All You Need To Know About Identity And Security On-Premises And In The Cloud. It's Just Like An Addiction, The More You Have, The More You Want To Have!

(2009-11-09) Multiple Objects In A SET

Posted by Jorge on 2009-11-09


In FIM 2010 RC1 is not supported (nor possible) to create another instance of the All Objects SET. However, it is possible to create SUBs of that SET. For example, if you need to have a SET containing, for example, ALL PERSONS and ALL GROUPS, you would think to be able to define something similar to "/Person and /Group". Unfortunately, that is not possible through the GUI or using the way I just specified in the Advanced View. However, you need to combine multiple objects in ONE SET, you can do it in the following ways as an example:

  • All Persons and All Computers –> /*[( ObjectType = ‘Person’) or (ObjectType = ‘Computer’)]
  • All Persons and All Computers from domain ADCORP–> /*[(( ObjectType = ‘Person’) or (ObjectType = ‘Computer’)) and (Domain = ‘ADCORP’)]
  • All Active Persons and All Computers domain ADCORP –> /*[((( ObjectType = ‘Person’) and (EmployeeStatus = ‘Active’)) or (ObjectType = ‘Computer’)) and (Domain = ‘ADCORP’)]

Example 2 is shown below.

image

REMARK: The ‘Person’ object type is by default available in FIM. The ‘Computer’ object type was added to FIM by me.

REMARK: The ability to also show the advance view of the filter in the same page was achieved by changing the OVC (now called RCDC) for the objects with object type ‘SET’

UPDATE: The statement in the underlined line at the beginning is INCORRECT! It is possible to specify different object types in a SET without using a subset of /*. An XPATH which equals:

/Person | /Computer DOES WORK. To unite the results I had used ‘OR’, which does not work this way, instead of using ‘|’.

See the examples below where each returns the same result, but using a different XPATH filter

image

image

Thanks to Tomek for pointing this out to me!

Cheers,
Jorge
———————————————————————————————
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always evaluate/test yourself before using/implementing this!
* DISCLAIMER:
https://jorgequestforknowledge.wordpress.com/disclaimer/
———————————————————————————————
############### Jorge’s Quest For Knowledge #############
#########
http://JorgeQuestForKnowledge.wordpress.com/ ########
———————————————————————————————

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: