Auto-Create groups based on attribute?
I'm looking to create departmental groups automatically, based on the department attribute of a user, so that when a new department appears, FIM will automatically create that group, and put all users with that department into the group. I thought I read somewhere that this was possible in FIM 2010.I know I can put them into sets based on the attribute, and then use the sets to put them in a specific group (manually created), but how can I link the set to a dynamically created-group?Thanks,Keith
December 22nd, 2009 7:04pm
Keith,The attribute based groups capability found in the old group populator is not directly provided in the FIM Portal. While I haven't tried this out you could try something like this:1) Create a set of departmental groups2) Create a set of users that don't belong to any of the departmental groups3) Set up an MPR that triggers when a user joins the set in step 24) Have an action workflow (custom) launched by the MPR in step 3 that creates a new group with a filter department= the department from the user that just got added to the set.5) Another action workflow or step in that workflow to add the group created in step 4 to the set in step 1David Lundell www.ilmBestPractices.com
Free Windows Admin Tool Kit Click here and download it now
January 1st, 2010 12:26am
Thanks David. This makes sense, but I am hung up on how to accomplish step 2. I'm confused as to how that set definition would be done. Any thoughts?Thanks,Keith
January 7th, 2010 12:59am
Hi Kieth! I admit David presented a hard nut for you to crack but i recommend you to have a look at the Xpath filter reference to start with because it could be hard to create a Set with multi-step references... I'll present a similar solution... In any way you'll need a custom workflow... Let this workflow be triggered on add of a user. Add an EnumerateResourcesActivity to the wf that enables you to search for a group that match your users department value using XPath. If a suitable group can't be found you can create it as a dynamic group that automatically gets it's members using XPath by using the Create Resource Activity... You can get more info on Enumerate Resources Activity here and here . //HenrikHenrik Nilsson
Blog: http://www.idmcrisis.com
Company: Cortego (http://www.cortego.se)
Free Windows Admin Tool Kit Click here and download it now
January 7th, 2010 2:03am