none
FIM Object Visualizer

All replies

  • Hi Markus,

    The download link wants to run an installer straight away, however the FIM server I want it for has no internet access. I did download the source code and compile it separately which seems ok - but could there be a compiled version to download?

    Also - what's the current replacement for the AttributeFlowViewer? I tried the old version on my FIM server export files but get an exception.

    Thanks 


    http://www.wapshere.com/missmiis

    Monday, April 16, 2012 6:11 AM
  • Thanks for the feedback, Carol.

    I have uploaded a compiled version of the tool to the "Downloads" page.

    AttributeFlowViewer - do you by chance mean the flow precedence viewer?
    That one is included.

    The general plan is to move all viewers into the CodePlex tool.
    Please let me know if I have missed one...

    Cheers,
    Markus


    Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation

    Monday, April 16, 2012 2:40 PM
    Owner
  • No the old AttributeFlowViewer from the MIIS resource toolkit that showed your classic flow rules all in one nice html document. The Attribute Precedence viewer shows me the import flow rules - but it's also very useful to have the export flows as well.

    Thanks for the compiled version, and the slick looking updated tool!


    http://www.wapshere.com/missmiis

    Monday, April 16, 2012 11:09 PM
  • Thanks, Carol.
    I will add an EAF report to the tool.

    Cheers,
    Markus


    Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation

    Tuesday, April 17, 2012 2:47 AM
    Owner
  • Markus,

    In a future release,  is it possible you can allow the specifying of an Identity to make the web services call to the FIM Services with?  It uses the identity of the logged in user who launches the application which is normally good, since you could do a RunAs to specify alternate credentials when launching the app.

    However, If you install this as a Click Once app, you lose the ability to do a RunAs when launching the app:  http://social.msdn.microsoft.com/Forums/en/winformssetup/thread/d463bb73-f4f8-454e-b146-bf9863558dc3

    I can use it by launching it on a server, but I'd prefer to launch it from a workstation and not need to be logged in with the admin account to do so.

    Thanks,

    Jef


    ----- http://jeftek.com

    Tuesday, April 17, 2012 4:59 PM
  • An easier workaround I found is to run the GetData.ps1 ON the Server itself and copy the XML file to the workstation to open tine FIMOV gui (Since I don't have .NET 4.0 on server)

    or

    Run Powershell as the FIM Admin user on the workstation, and run the GetData.ps1, and load the XML file in the FIMOV GUI.

    I should have added...Can there be a way to load a pre-existing XML data file into the GUI? :)

    Thanks!


    ----- http://jeftek.com


    Tuesday, April 17, 2012 6:41 PM
  • This is a good discussion, Jef.

    Our expectation is that the data retrieval happens in most cases by using some sort of external method - e.g. running a PS script.
    The actual script code is pretty simple and we are trying to keep it that way.

    We do also expect the tool in most cases not to be used on a FIM server - e.g.: your on your laptop to review a deployment or to create a report of a deployment.

    One question in this context is, for example, what the simplest method is to get the XML file from the FIM server to the computer on which the tool is running.
    Right now, it is necessary to copy the file manually.

    Cheers,
    Markus


    Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation

    Wednesday, April 18, 2012 3:23 PM
    Owner
  • Markus,

    In the GUI, how can I load the XML file I copied from my server?    If I click on the "Get data" it appears to attempt to connect to FIMService to "Get the Data".

    I'd like it to "Load Data" and load up the XML file I copied to the Data directory from the server.

    I have a pretty large environment, and I don't want to retrieve live data each time I open FIMOV.   I could see me exporting the data weekly, and opening FIMOV to review it as needed.

    thanks,

    Jef


    ----- http://jeftek.com

    Wednesday, April 18, 2012 3:41 PM
  • Jef,

    that's simple (I need to spend more time on the documentation to make this clearer... ).

    The tool looks for "Data.xml" in the ".\Res\Data" folder.
    Since it is a bit difficult to figure out what the actual path in the case of a ClickOnce app is, I've added "Open Data Folder" to the Data menu.

    Keep in mind that the tool overwrites an existing Data.xml when you click "Get Data".

    Cheers,
    Markus


    Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation

    Wednesday, April 18, 2012 4:01 PM
    Owner
  • Markus,

    I now see what I was missing.

    1 - Run Getdata.PS1 on Server

    2 - Copy DATA.XML to workstation .\RES\Data

    3 - Open FIMOV App

    4 - Clicking on the command in the SHOW menu will load the existing data in the .\RES\Data

    Sorry, I thought I had to load the XML file into the app first before I could show it. :)

    Thanks,

    Jef


    ----- http://jeftek.com

    Wednesday, April 18, 2012 4:15 PM
  • FYI - I'm currently working on a new version of FIMOV that adds support to 'open' a data file and allows you to overwrite the default data file in the .\RES\Data folder.

    Other new enhancements are:

    • Support for providing alternative credentials (new FIM Server Settings dialog)
    • Running the PowerShell script in a separate thread (so the FIMOV UI doesn't freeze)

    Thanks,
    Dominik


    Thursday, April 19, 2012 9:57 PM
  • Wow - I seem to have gone to sleep and finally woken in 2012 to find that there is something called FIMOV which presumably replaces the HTA we used to use?  I have "gone to town" myself on the original version to generate my own extended suite of XSLT/PS1 report pairs, and my latest extension to this was to take all the generated HTML reports and compile them into a single CHM using http://msdn.microsoft.com/en-us/library/ms669985.  It looks pretty good if you ask me, but once you have constructed your CHM project, complete with TOC, is still manually intensive to (a) get all the xml data files (single click), (b) generate all the HTML reports, copy to the clipboard, and paste into a pre-created XHTML file (once per report), and (c) recompile the HTML in the CHM project.  I'd love to share this with you guys to enhance this offering, so long as the outcome is still extensible (as I will always want to create my own report variations).

    Bob Bradley (FIMBob @ http://thefimteam.com/) ... now using Event Broker 3.0 @ http://www.fimeventbroker.com/ for just-in-time delivery of FIM 2010 policy via the sync engine

    Saturday, April 21, 2012 2:13 PM
  • Hi FIMBob,

    the answers are yes and yes :o)
    This is the successor of the HTA version and the general idea is to enable folks to use their own XSLTs.
    We are not there yet - but this is still the plan.

    Using CHMs to create reports seems to be an interesting approach.
    However, as you have mentioned, from the manual labor perspective, this looks like an approach that seems to be an approach that requires a lot of work.
    I would definitely like to see what you have done with your CHMs...

    Cheers,
    Markus


    Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation

    Tuesday, April 24, 2012 11:42 PM
    Owner
  • Markus - here's a couple of screenshots so you can see how this looks:

    • Entitlements (an example of a "FIM subsystem" policy report):

    Subsystem report

    • Search for "housekeeping" keyword:

    Search result for

    Carol and I think we can go close to fully automating this ... given time and energy :)


    Bob Bradley (FIMBob @ http://thefimteam.com/) ... now using Event Broker 3.0 @ http://www.fimeventbroker.com/ for just-in-time delivery of FIM 2010 policy via the sync engine

    Wednesday, April 25, 2012 12:52 AM
  • Wow, I'm with Bob - I seem to have gone to sleep and finally woken in 2012 to find that there is something called FIMOV which presumably replaces the HTA we used to use!!

    Was looking at documenting something recently and wasn't looking forward to it, but now I'm looking forward to a lot less pain.

    +1 to Carol's comments about having an EAF documentation tool. In fact, I've noticed that only the Synchronization Rules within the Portal are documented. Since I use a lot of classic synchronization rules, these are lost in the documentation. The Management Agent screen is probably the logical place to have this, but all it has is some basic connection info, with the attributes included as part of the MA. No join rules or anything else present.

    It would be nice to see a single summary of all IAFs and EAFs for each Management Agent, including both those from the Portal SR's and the Sync Service MA configs. That way I can easily see the flows for a single MA.

    Also, the copy data button does not appear to work for me (nothing appears on clipboard), but I can view source, so that's not such an issue for me.

    Would also be good to see some extra detail on the Workflow screens. the name, description and type of the workflow don't really help me much - would be good to see an activity breakdown with some of the config settings.

    And lastly.. the ability to export it all into a single document. Or at least each page with its subpages (eg, a single output file of all the Workflow settings, similar to how the Sets screen is done)

    Anyway, that's the end of my suggestions/demands.

    Great little tool! I'll be interested to compare it against the FIMAlyzer (which I'm actually yet to look at)

    - Ross Currie


    MCTS: Forefront Identity Manager 2010, Configuring

    Monday, December 17, 2012 8:57 AM