Child Context Context Types

10-2 Oracle Fusion Middleware Developers Guide for Oracle Identity Manager

10.2 Context Types

Context Manager supports the following context types: ■ SELF: Operation is initiated through Oracle Identity Manager Self Service. ■ ADMIN: Operation is initiated through Identity Administration or Advanced Administration. This is the default context. ■ RECON: Operation is performed by reconciliation. ■ REQUEST: Operation is performed by a request. ■ POLICY: Operation is performed because of access policy. Calling ContextManager.getContextType should tell the type of context. Some of the information that you can retrieve under various contexts are: ■ Reconciliation context: The profile from which the reconciliation event has been created can be retrieved by ContextManager.getValueprofileName method call. ■ Scheduled tasks run in ADMIN context: Some of the information that can be retrieved are: – Job name: ContextManager.getValueJOBNAME – Task name: ContextManager.getValueTASKNAME ■ Request context: You can retrieve the request key by using the following code: HashMapString, ContextAware requestContext = HashMapString, ContextAware ContextManager.getValuerequestData, true; requestContext.getrequestKey; ■ Policy context: ContextManager.getContextKey provides the policy that is evaluated. If multiple policies are applicable, then this returns the highest priority policy key. Part II Part II Application-Specific Connectors This part describes how to develop application-specific connectors. It contains the following chapters: ■ Chapter 11, Developing Resource Objects ■ Chapter 12, Developing Provisioning Processes ■ Chapter 13, Developing Process Forms ■ Chapter 15, Developing Lookup Definitions, UDFs, and Remote Manager 11 Developing Resource Objects 11-1 11 Developing Resource Objects The Resource Management features of the Administrative and User Console enable you to manage resource objects for an organization or individual user. Managing resources includes the following activities: ■ Searching for and viewing the details of a resource ■ Provisioning, disabling, enabling, and revoking a resource from users or organizations ■ Managing resource administrator and authorizer roles ■ Viewing, creating, and modifying workflows ■ Creating and managing IT resources This chapter includes the following topics related to managing resources: ■ Viewing Resource Details ■ Working with Users and Organizations Associated with Resources ■ Using the Resource Administrator Option ■ Using the Resource Authorizers Option ■ Using the Resource Workflows Option to View Workflows ■ Using the Resource Workflows Option to Create and Modify Workflows ■ Creating IT Resources ■ Managing IT Resources ■ Managing Resources By Using the Design Console

11.1 Viewing Resource Details

To view the details of a resource:

1. Login to the Administrative and User Console, and then click Advanced.

2. In the Welcome page, under Configuration, click Manage Resource.

Alternatively, click the Configuration tab, click Resource Management, and then select Manage Resource. The Resource Search page is displayed. 3. Use the fields at the top of the page to select the search criteria, and enter the corresponding search value in the adjoining field or use the asterisk wildcard 11-2 Oracle Fusion Middleware Developers Guide for Oracle Identity Manager character. To use the Resource Type and Target criteria, select a value from the corresponding box. 4. From the Resource Audit Objective list, select the required option. The Resource Audit Objective list lets you group resources by any data type. You can select multiple values for the same resource. You can also add audit schedule values for quarterly, semiannual, and annual reviews in the list of values of the field, and select a combination, such as SOX and quarterly, as audit requirements. The predefined values in the Resource Audit Objective list are as follows: ■ SOX Hosts Financially Significant Information ■ HIPAA Hosts Private Healthcare Information ■ GLB Hosts Non-Public Information ■ Requires Quarterly Review ■ Requires Annual Review

5. Click Search.

The results table is displayed. 6. Click the name of a resource. For example, you can select a resource named Active Directory. The Resource Detail page is displayed. 7. To view detailed information about the resource, use the menu. The detailed information depends on the type of object, such as user or organization. For example, the detailed information that you can view for the organization object includes the following: ■ Organization Associated With This Resource ■ Resource Administrators ■ Resource Authorizers

11.2 Working with Users and Organizations Associated with Resources

You can enable, delete, and revoke resources that are associated with an user or organization. You can also determine mapping categories for resources that are provisioned more than once to a user or organization. To work with an organization that is associated with a resource: 1. Perform Steps 1 through 3 of the procedure described in the Viewing Resource Details on page 11-1.

2. Select the Organization Associated For the Resource option.

The Organization Associated For the Resource page is displayed. 3. Use the options to filter the list of associated organizations. Note: The procedure in this section is for working with an organization associated with a resource. You can also find the users associated with a given resource in the exact same way, as described for organizations in this section. Developing Resource Objects 11-3 Selecting the All option lists all the organizations. The By Status option filters the organizations on the basis of values in the Resource Status column. The organizations associated with the resource are listed under the Organization Name column. The resource status in this case, indicates that the resource is provisioned for each of the organizations listed. To modify the resource for the organization, select one of the following: ■ Enable ■ Disable ■ Revoke The value in the Identifier column corresponds with a field type that you can map from the Process Definition form in the Design Console by using the Map Descriptive Field. This value lets you distinguish which mapping category is defined, such as Process Type, Organization Name, or Request Key, when the same resource has been provisioned several times to the same organization.

11.3 Using the Resource Administrator Option

On the Resource Detail page, select Resource Administrator. The Resource Administrators page displays the names of roles that are assigned as administrators to this resource. This page also displays the Write Access and Delete Access permissions. These are permissions that the administrator roles have on the resource, but not with resource parameters. Write access allows the role to make changes to the resource. Delete access allows the role to delete the resource. You can perform the following operations: ■ Assigning Roles as Administrators for Resources ■ Updating Permissions of an Administrative Role

11.3.1 Assigning Roles as Administrators for Resources

To assign a role as administrator for resources:

1. Click Assign.

The Assign Administrators page is displayed. This page displays all role names that can be assigned to this resource. Select the options to activate the write and delete access and assign the role to this resource.

2. Click Assign.

The Confirm Assign page is displayed. This page displays the new roles that are to be assigned as administrators for the resource.

3. Click Confirm Assign or click Cancel.

The Resource Administrators page is displayed with a list of all role names associated with this resource. You can modify this information. Note: Make sure that resource you want to delete is not used, for example, the resource is not provisioned or does not have a form associated to it.