Sun Identity Manager 8.1 Business Administrator's Guide

ProcedureTo Load Accounts

  1. In the Administrator interface, click Accounts in the menu, then click Load from File.

    Identity Manager displays the Load Accounts from File page.

    Figure 7–1 Load From File

    Figure showing the Load Accounts from File screen.

  2. Use this page to specify the necessary account loading options.

    The options include:

    • User Form. When load creates an Identity Manager user, the user form assigns an organization as well as roles, resources, and other attributes. Select the user form to apply to each resource account.

    • Account Correlation Rule. An account correlation rule selects Identity Manager users that might own each unowned resource account. Given the attributes of an unowned resource account, a correlation rule returns a list of names or a list of attribute conditions that will be used to select potential owners. Select a rule to look for Identity Manager users that may own each unowned resource account.

    • Account Confirmation Rule. An account confirmation rule eliminates any non-owner from the list of potential owners that the correlation rule selects. Given the full View of an Identity Manager user and the attributes of an unowned resource account, a confirmation rule returns true if the user owns the account, and false otherwise. Select a rule to test each potential owner of a resource account. If you select No Confirmation Rule, Identity Manager accepts all potential owners without confirmation.

      Note –

      In your environment, if the correlation rule will select at most one owner for each account, then you do not need a confirmation rule.

    • Load Only Matching. Select to load into Identity Manager only those accounts that match an existing Identity Manager user. If you select this option, load will discard any unmatched resource account.

    • Update Attributes. Select to replace the current Identity Manager user attribute values with the attribute values from the account being loaded.

    • Merge Attributes. Enter one or more attribute names, separated by commas, for which values should be combined (eliminating duplicates) rather than overwritten. Use this option only for list-type attributes, such as groups and mailing lists. You must also select the Update Attributes option.

    • Result Level. Select a threshold at which the load process will record an individual result for an account:

      • Errors only. Record an individual result only when loading an account produces an error message.

      • Warnings and errors. Record an individual result when loading an account produces a warning or an error message.

      • Informational and above. Record an individual result for every account. This causes the load process to run more slowly.

  3. In the File to Upload field, specify a file to load, and then click Load Accounts.

    Note –
    • If the input file does not contain a user column, you must select a confirmation rule for the load to proceed correctly.

    • The task instance name associated with the load process is based on the input file name; therefore, if you reuse a file name, then the task instance associated with the latest load process will overwrite any previous task instances.

      About CSV File Format illustrates the fields and options available in the Load from File screen.

    If an account matches (or correlates with) an existing user, the load process will merge the account into the user. The process will also create a new Identity Manager user from any input account that does not correlate (unless Correlation Required is specified).

    The bulkAction.maxParseErrors configuration variable sets a limit on the number of errors that can be found when a file is loaded. By default, the limit is 10 errors. If the maxParseErrors number of errors is found, then parsing stops.