Monday, July 11, 2011

OIM - Find resources assigned to user

Wanna dig through OIM (Oracle Identity Manager) for resources assigned to users? Here is a query to solve it:

SELECT DISTINCT oiu.oiu_key,
  oiu.req_key,
  oiu.oiu_offlined_date,
  obi.obi_key,
  obi.obi_status, obj.obj_key,
  obj.obj_name,
  orc.orc_key,
  orc.orc_create,
  orc.orc_update,
  orc.orc_status, orc.orc_tos_instance_key,
  ORC_TASKS_ARCHIVED,
  ost_status,
  obj.sdk_key     AS OBJECTFORMKEY, '0' AS OBJECTFORMCOUNT,
  objsdk.sdk_name AS OBJECTFORMNAME, tos.sdk_key AS PROCESSFORMKEY,
  '0'             AS PROCESSFORMCOUNT, procsdk.sdk_name AS PROCESSFORMNAME,
  oiu.oiu_serviceaccount
FROM obj obj
LEFT OUTER JOIN sdk objsdk
ON obj.sdk_key=objsdk.sdk_key, oiu oiu
LEFT OUTER JOIN orc orc
ON oiu.orc_key=orc.orc_key
LEFT OUTER JOIN tos tos
ON orc.tos_key=tos.tos_key
LEFT OUTER JOIN sdk procsdk
ON tos.sdk_key=procsdk.sdk_key,  obi obi,  ost ost
WHERE oiu.obi_key=obi.obi_key
AND oiu.ost_key  =ost.ost_key
AND obi.obj_key  =obj.obj_key
AND oiu.usr_key IN (

select usr_key from usr where usr_status = 'Active'


)




This query will show you the same result as getObjects API call for all active OIM users.


 

No comments:

Post a Comment