none
Criteria based group membership xPath RRS feed

  • Question

  • Hi'

    I wan't to create a group, where the members are the one who has the same value in Description as the Group has in Displayname.

    Pseudo: Person where Description Eq Group Displayname

    /Person[(DisplayName = '%ObjectID%/Displayname')]   <-- is not right, but can it even be done? Is %ObjectID% only available for RCDC or is it possible to use in Set / Group membership criteria?


    /Frederik Leed

    Tuesday, June 11, 2013 9:44 AM

All replies

  • You are probably looking for something along the lines of:

    /Person[Description = /Group[ObjectID = <uid-of-group>]/DisplayName]

    Tuesday, June 11, 2013 12:24 PM
  • Yes, exactly, the thing is, i wan't to flow it as a constant when i'm creating the group so it has to be dynamic.

    /Frederik Leed

    Tuesday, June 11, 2013 12:41 PM
  • If you create a new Criteria Based Group... where:

    DisplayName = "New Criteria Group"
    Members = [Description is 'New Criteria Group']

    Now, any Person where Description = 'New Criteria Group' will be a computed member of this new group.

    Is this what you are after? You will not be able to dynamically self reference the DisplayName of the current group, but you really should not need to since this can be defined when the group is created, either manually or program generated.

    Hope this helps,

    Tuesday, June 11, 2013 1:29 PM
  • Offcourse, you are absolutely right, i don't need to do it dynamically, it's totally posssible to use variables in constants. Thanks! :)

    I'm using it to create securitygroups reflecting the organisation from HR.


    /Frederik Leed

    Tuesday, June 11, 2013 6:42 PM
  • Hi again...

    So now i'm about to provision the groups based on the organization objects i created in MV. But... member attribute is offcourse a reference attribute and i'm not flowing the xPath to that attribute, but what group attribute contains the xPath value, if any?


    /Frederik Leed

    Wednesday, June 19, 2013 7:13 AM
  • OK, it seems to be the Filter attribute.

    Now i "just" need to be able to pass a variable in the XML that goes in to the Filter attribute.

    <Filter xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" Dialect="http://schemas.microsoft.com/2006/11/XPathFilterDialect" xmlns="http://schemas.xmlsoap.org/ws/2004/09/enumeration">/Person[DisplayName = 'JohnDoe']</Filter>

    Quite possible with syncrules, but what i need to do is create a SecurityGroup in FIM CS and this is not done with Syncrules, with MA flowrules.


    /Frederik Leed


    • Edited by FrederikLeed Wednesday, June 19, 2013 7:38 AM changed something
    Wednesday, June 19, 2013 7:17 AM