Anonymous_User Absent Member.
Absent Member.
607 views

Query Values in Entitlement Search in 4.7

Using Role-Based Entitlement Driver in a IDM SE 4.7 setup with Designer
4.7, all on current patches.
Have an entitlements-enabled AD driver running. I go to create a Test
Policy in the Driver Set; it shows me the driver, and its published
entitlements, but when I go to query the driver for value (in this case
Groups), no query is made through the driver, and Designer 4.7 just
returns the message:

"We were unable to obtain the query values for your entitlemnet because
the entitlement driver [ad driver name has not been started."

It has. I can repeat this on a test setup too. If I use Designer 4.6,
the query runs perfectly, and returns a list of all the AD Groups.

Also the browser in the Dynamic member Filter for BaseDN allows me to
select various object types, but not OUs. I can type these though.

I could use iManager and switch the mode to "Legacy" entitlements but
this is better avoided.

I suspect these are bugs with Designer 4.7, but would be interested in
others views.

PaulK
Labels (1)
0 Likes
1 Reply
Anonymous_User Absent Member.
Absent Member.

Re: Query Values in Entitlement Search in 4.7

Strike the bit about Legacy entitlements. The client is stuck with
those with the dumb Entitlement Service Driver anyway.

But the possible Designer bug seem to exist in both format modes.

On 14/06/18 13:43, PaulK wrote:
> Using Role-Based Entitlement Driver in a IDM SE 4.7 setup with Designer
> 4.7, all on current patches.
> Have an entitlements-enabled AD driver running.  I go to create a Test
> Policy in the Driver Set; it shows me the driver, and its published
> entitlements, but when I go to query the driver for value (in this case
> Groups), no query is made through the driver, and Designer 4.7 just
> returns the message:
>
> "We were unable to obtain the query values for your entitlemnet because
> the entitlement driver [ad driver name has not been started."
>
> It has.  I can repeat this on a test setup too.  If I use Designer 4.6,
> the query runs perfectly, and returns a list of all the AD Groups.
>
> Also the browser in the Dynamic member Filter for BaseDN allows me to
> select various object types, but not OUs.  I can type these though.
>
> I could use iManager and switch the mode to "Legacy" entitlements but
> this is better avoided.
>
> I suspect these are bugs with Designer 4.7, but would be interested in
> others views.
>
> PaulK


0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.