Sign in
 
HomeLibraryWikiLearnGalleryDownloadsSupportForumsBlogs
Resources for IT Professionals >
> 
> 
> 
group validation workflow question

Unanswered group validation workflow question

  • Thursday, February 07, 2013 3:11 PM
     
     
    Sign In to Vote
    0
    Why would the Group Validation Workflow fail a FIM administrator deleting a group telling us in the request that displayed owner is not set when there is a displayed owner set on the group?
     

All Replies

  • Monday, February 11, 2013 8:31 AM
     
     
    Sign In to Vote
    0

    Hi,

    Can you give more detail. Sounds to me like a flow issue where the owner gets removed.

     
  • Monday, February 11, 2013 1:59 PM
     
     
    Sign In to Vote
    0

    Hi

    In FIM Open the Group Validation Workflow and in the Activities Edid FIM Default Group Validation Activity.

    Uncheck FIM Group Validation.

    It should work fine.

    Also you can see in the description for that checkbox why this error is generated.

    I guess this error is Because the group hasnt deleted yet in the authorization workflow stage and the attributes are being removed and simulated. So the validation fails.

    I would suggest a different MPR for group deletion without this workflow.

    Regards Furqan Asghar

     
  • Monday, February 11, 2013 2:04 PM
     
     
    Sign In to Vote
    0
    The MPR and the validation workflow has been set as is since I first installed 2 years ago.  Why is it failing now?  What changed from the FIM perspective?  I didn't change anything related to this and I'm the only one that could have.
     
  • Monday, February 11, 2013 6:32 PM
     
     
    Sign In to Vote
    0
    So is it failing for one perticular group only or several groups?

    Regards Furqan Asghar

     
  • Monday, February 11, 2013 8:09 PM
     
     
    Sign In to Vote
    0

    One group....Administrators Set.  It was the only one allowed to do it besides group owner, but they used a different MPR and validation workflow than the one that is failing.

    There is the default MPR for static groups and dynamic groups that has all people as the requestor, but when i look at the request that got denied, it was the one I mention above....just for adminstrators to have full control over all groups, which has been in place from the beginning.


    • Edited by gdtilghman Monday, February 11, 2013 8:09 PM
    •