This process was implemented in March 2015.
The graph will extract the KIM entities that are using the Technical Admin Role
| Code Block |
|---|
select * from KRIM_ROLE_MBR_T where ROLE_ID='63' and isnull(ACTV_TO_DT) and MBR_TYP_CD=='P' |
and the KIM entities in the Technical Admin Group
| Code Block |
|---|
select * from KRIM_GRP_MBR_T where GRP_ID='10061' and isnull(ACTV_TO_DT) |
Then it compares these entities against the current extract of IAM people. Any that do not match must be deactivated:
| Code Block |
|---|
update KRIM_GRP_MBR_T set ACTV_TO_DT=CURRENT_DATE, LAST_UPDT_DT=CURRENT_DATE
where MBR_ID=$UUID and MBR_TYP_CD='P';
update KRIM_ROLE_MBR_T set ACTV_TO_DT=CURRENT_DATE, LAST_UPDT_DT=CURRENT_DATE
where MBR_ID=$UUID; |