Mass Load Roles

 5 Replies
 0 Subscribed to this topic
 15 Subscribed to this forum
Sort:
Author
Messages
Jose
Basic Member
Posts: 15
Basic Member
    Hello,

    I am trying to figure out how to mass load roles to each ESS users. Going to each user and adding these roles is very time consuming and was in search of finding a faster way of doing this task.

    Also, is there a way to have roles, prodline, and CheckLS set as a template so when a new user is added, we dont have to bother with adding roles, prodline, checkLS.
    Dave Amen
    Veteran Member
    Posts: 75
    Veteran Member
      Hi Jose,
      What you're looking for is the Mass Assignment tool in the LS9 Resource Manager.
      With this, you can use any combination of attributes as selection criteria (maybe ESS Portal Role to get all ESS Users?).
      Once you've entered the selection criteria, you can add Roles or change other attributes for many users in one fell swoop!

      But please be careful - this thing is a loaded gun. It can fix thousands of users in seconds, and it can also destroy LDAP, so use it with caution!

      As far as a template for new users, I don't have answer for that. Anyone else?

      Best regards,
      Dave
      (303) 773-3535
      Roger French
      Veteran Member
      Posts: 549
      Veteran Member
        There is a Perl script (floating around) which I've adapted and used for a few years now, which uses a 'template' to create the actual new users' XML records, which then can be loaded.

        Give me your email address and I can send it to you.

        Roger
        Michael Landis
        New Member
        Posts: 2
        New Member
          I'm not clear on whether you're trying to create new ESS accounts for new employees/users, or simply add an ESS role to existing user accounts.  I've created scripting solutions for both types of scenarios using ksh, so either way, it can be done.  Updating roles of existing LS users is the trickier endeavor because loadusers wants to replace the existing roles with what is specified in the Roles= value of your XML file. (Although I read a blurb today that this behavior may change soon to append instead of replace.) I accomplish this by using ldapsearch to query the LDAP first to get the list of existing roles for the user, then add my new role to that list and generate my XML record. If you're wanting to create a new user account with the ESS role, that's a little easier task, and you can plug just about any of the RM fields or Identities. The vast majority of our adds, terms and job-change updates are highly automated now.

          Jose
          Basic Member
          Posts: 15
          Basic Member
            I'm trying to do 2 things:

            1) I would like to add 4 roles to existing users. However, some of the existing users already have specific roles assigned to them and I dont want those being replaced.

            2) When creating new users, I would like for the 4 roles to be included, CheckLS=YES, product line = PROD, portal role "Associate" so that I dont have to add this information each time I create a user.
            JeffR
            Advanced Member
            Posts: 22
            Advanced Member
              I created a Process Flow that actually does both things you are looking to do. I can update roles and groups for existing employees and I create the RM for new hires and rehires giving them ESS access.