Hello Gurus,
I am trying to modify the Assignment Validity of Existing Role (IDM 7.2 SP10, Oracle DB) with 2 non-overlapping validity period and getting below error.
putNextEntry failed storing ABC12345
Exception from Add operation:com.sap.idm.ic.ToPassException: ToIDStore.addEntry failed storing entry 'ABC12345'. IDStore returned error message: "Entry already exists" when creating entry
Exception from Modify operation:com.sap.idm.ic.ToPassException: ToIDStore.modEntry failed modifying entry 'ABC12345'. IDStore returned error message: " Not allowed to change a current assignment to a future assignment:Attribute: MXREF_MX_ROLE" when storing attribute 'MXREF_MX_ROLE={LINKID=12345!!VALIDFROM=2016-07-01!!VALIDTO=9999-12-31}55555'
Here Role 55555 is assigned to the Identity ABC12345 with validity 01-01-2016 to 31-12-9999 with Link ID (mcUniqueID) =12345.
Now, I wanted to change the assignment validity as 01-01-2016 to 15-06-2016 and then again from 01-07-2016 to 31-12-9999 for the same role to the same user.
As per SAP documents, It seems that it is possible for new assignment.
Fedya Toslev: Please confirm that whether it is valid for only role assignment or valid for existing role assignment validity modification too.
In my pass, I am passing LINK ID too along with the Validity Period. I would appreciate if anyone can suggest alternate way to achieve this?
Regards,
C Kumar