Access denied error - More than one boolean attribute in the same page RRS feed

  • Question

  • We have a tab in FIM that has 3 boolean attributes. 2 set of users have got different level of access to those attributes. When one of the boolean is checked, FIM is trying to set the value to false for other 2 attributes and they are getting access denied error. In RCDC, I changed the default value to false for all those 3 attributes but still getting the same error. Is there any other solution?

      <my:Property my:Name="Text" my:Value="Termination" />
      <my:Property my:Name="Checked" my:Value="{Binding Source=object, Path=ForceDeprovision, Mode=TwoWay}" />
      <my:Property my:Name="DefaultValue" my:Value="false" />


    • Edited by fim_sc Monday, May 11, 2015 3:02 PM
    Monday, May 11, 2015 3:01 PM

All replies

  • Can you populate those values with false when you provision the users? Either in the sync or via a workflow.



    Monday, May 11, 2015 7:08 PM
  • I thought about that idea but what do we do with all the 100,000 existing users?
    Tuesday, May 12, 2015 4:38 PM
  • You could populate the values on the next full sync you have scheduled.

    Alternatively, you could write a PowerShell script to update them. I've done this and split users out by first letter of last name, but in the case of 100,000 users you might be better off with splitting them into CSV files of 1,000 or so. You can run multiple versions of the script at the same time, but it can have a performance hit on the FIM Service.

    • Proposed as answer by UNIFYBobMVP Saturday, May 30, 2015 5:09 PM
    Tuesday, May 12, 2015 4:59 PM
  • Thanks all. I solved it by writing different types of policies for checking and unchecking. (Modify, Transition out)
    Monday, June 29, 2015 3:49 PM