When you integrate CA GovernanceMinder and CA IdentityMinder, the following incompatibility can occur.
CA GovernanceMinder privileges are additive, meaning that a user is given every privilege dictated by the roles that they belong to. However, in CA IdentityMinder, an account can be subtractive, meaning that a user can have fewer privileges than its account template dictates.
The normal import and export process between CA GovernanceMinder and CA IdentityMinder does not detect the difference between assigned privileges due to the previous issue, so there is a discrepancy between CA IdentityMinder data and CA GovernanceMinder data.
CA GovernanceMinder detects missing privileges during an import process, and then adds the missing privileges during export. To enable this solution, select the Model Compatibility check box under the Connectors (Export) screen.
Note: Model compatibility is not run during continuous export. To retain this functionality, schedule a full export to run at regular intervals.
Copyright © 2014 CA.
All rights reserved.
|
|