Previous Topic: Upgrade r12 or r12.5 Environments with Access Roles

Next Topic: Update System Manager Role

Update Role Definitions

Each upgrade of CA Identity Manager requires an update of role definitions. This update is required so that the environment has the current version of roles and tasks and the product works as documented. Use the following procedure to import a role definition file that applies in your situation.

Follow these steps:

  1. In the Management Console, click Environments.
  2. Select the environment.
  3. Go to Role and Task Settings.
  4. Click Import.
  5. Scroll up to see role definition files under the heading, Category: Upgrade to SP.
  6. Select a single role definitions file based on the following table:

Role Definitions File

Source for Upgrade

Provisioning Server

Organization in User Store

Upgrade-12-to-12.5SP-RoleDefinitions-NoOrganization.xml

r12

No

No

Upgrade-12-to-12.5SP-RoleDefinitions-Organization.xml

r12

No

Yes

Upgrade-12-to-12.5SP-RoleDefinitions-ProvisioningNoOrganization.xml

r12

Yes

No

Upgrade-12-to-12.5SP-RoleDefinitions-ProvisioningOrganization.xml

r12

Yes

Yes

Upgrade-12.5-to-12.5SP-RoleDefinitions-NoOrganization.xml

r12.5 or higher

No

No

Upgrade-12.5-to-12.5SP-RoleDefinitions-Organization.xml

r12.5 or higher

No

Yes

Upgrade-12.5-to-12.5SP-RoleDefinitions-ProvisioningNoOrganization.xml

r12.5 or higher

Yes

No

Upgrade-12.5-to-12.5SP-RoleDefinitions-ProvisioningOrganization.xml

r12.5 or higher

Yes

Yes

For example, if the Identity Manager environment was created for r12.5 SP2, it uses a provisioning server, and the Identity Manager user store has a flat hierarchy (no organization), select the following file:

Upgrade-12.5-to-12.5SP-RoleDefinitions-ProvisioningNoOrganization.xml.

Note: Other role definition files on this page apply for different procedures, such as adding Smart Provisioning.Those files are not part of the current procedure.

After you import the role definition file, you can view and execute new tasks by assigning them to the appropriate admin role.