Jorge's Quest For Knowledge!

All About Identity And Security On-Premises And In The Cloud – It's Just Like An Addiction, The More You Have, The More You Want To Have!

(2009-11-09) Multiple Objects In A SET

Posted by Jorge on 2009-11-09

In FIM 2010 RC1 is not supported (nor possible) to create another instance of the All Objects SET. However, it is possible to create SUBs of that SET. For example, if you need to have a SET containing, for example, ALL PERSONS and ALL GROUPS, you would think to be able to define something similar to "/Person and /Group". Unfortunately, that is not possible through the GUI or using the way I just specified in the Advanced View. However, you need to combine multiple objects in ONE SET, you can do it in the following ways as an example:

  • All Persons and All Computers –> /*[( ObjectType = ‘Person’) or (ObjectType = ‘Computer’)]
  • All Persons and All Computers from domain ADCORP–> /*[(( ObjectType = ‘Person’) or (ObjectType = ‘Computer’)) and (Domain = ‘ADCORP’)]
  • All Active Persons and All Computers domain ADCORP –> /*[((( ObjectType = ‘Person’) and (EmployeeStatus = ‘Active’)) or (ObjectType = ‘Computer’)) and (Domain = ‘ADCORP’)]

Example 2 is shown below.


REMARK: The ‘Person’ object type is by default available in FIM. The ‘Computer’ object type was added to FIM by me.

REMARK: The ability to also show the advance view of the filter in the same page was achieved by changing the OVC (now called RCDC) for the objects with object type ‘SET’

UPDATE: The statement in the underlined line at the beginning is INCORRECT! It is possible to specify different object types in a SET without using a subset of /*. An XPATH which equals:

/Person | /Computer DOES WORK. To unite the results I had used ‘OR’, which does not work this way, instead of using ‘|’.

See the examples below where each returns the same result, but using a different XPATH filter



Thanks to Tomek for pointing this out to me!

* This posting is provided "AS IS" with no warranties and confers no rights!
* Always evaluate/test yourself before using/implementing this!
############### Jorge’s Quest For Knowledge #############
######### ########


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: