Hi,
When trying to add a global role to a user the request verification fails with the message: "AFX will not handle this item because the command 'AddUserToRole(AddUserToBizRole)' is not supported on endpoint 'AG Role Connector'"
The message 'AddUserToRole(AddUserToBizRole)' is a bit cryptic to me. Does the message refer to the "Add Role to Account" capability in the AFX Connector? What could then be the problem? I have "Add Role to Account" mapped as below.
Any ideas?
BR
/Fredrik
Edwin,
I have added a connector for the Role Set and that connector do have an "Add Role to Account" capability (enabled) but not an "Add Role to User" capability. How can I enable that capability? I have used the "Database" connector template but I guess that is wrong.
Regards,
Fredrik
Not all connectors have add user to role available.
If you need to use a connector that doesn't have the add user to role then you have to setup a fulfilment node in your fulfilment WF. Have the fulfilment node handle the user to role assignment by calling the account to role capability in the AFX
regards
Edwin
Edwin,
Yes, I found a "User To Role" capability in the JavaCodeBased connector. Is it correct to say that the "User To Role" endpoint is called ONLY if the global role was registered by a Collector and not created manually in L&G?
I'm note sure I really understand the Role logic in L&G, the documentation says a lot but often not why I should do things. I have access to the documentation at RSA SecurCare Online but is there more L&G knowledge/docs that can be found elsewhere?
Thanks,
Fredrik
It should also be called when the role is created in Via manually.
Besides the help there is not more documentation available on this topic
Edwin
Hi,
add role to account is not the same as add role to user. See if you enabled the add role to user capability
regards
Edwin