Access to Managed Objects

A business logic task handler can access a managed object in the following ways:

Using the CA Identity Manager provider objects to access a managed object in the data store.
Any changes made to a managed object through the providers are immediately committed to the data store. No CA Identity Manager events are generated, and no workflow approvals, auditing, or security checks are performed.
Using the CA Identity Manager BLTHContext get... methods to access a run-time instance of a managed object in the task session.
The information you can access in a task session includes the subject of the task (such as a User object in a Create User task) and the subject’s relationships (such as the roles and groups that a user is assigned to). You can also access any objects that were modified during the task (such as user objects that were disabled or deleted).

Any changes made to a managed object through BLTHContext get... methods are made to the run-time instance of the managed object in the task session. CA Identity Manager generates events for the task, and workflow approvals, auditing, and security checks can be performed.

The changes are not committed to the data store until all events associated with the task have been executed.

More Information: