KIM Technical Admin. role Deactivation Process

KIM Technical Admin. role Deactivation Process

This process was implemented in March 2015.

The graph will extract the KIM entities that are using the Technical Admin Role 

select * from KRIM_ROLE_MBR_T where ROLE_ID='63' and isnull(ACTV_TO_DT) and MBR_TYP_CD=='P'

and the KIM entities in the Technical Admin Group

select * from KRIM_GRP_MBR_T where GRP_ID='10061' and isnull(ACTV_TO_DT)

Then it compares these entities against the current extract of IAM people. Any that do not match must be deactivated:

update KRIM_GRP_MBR_T set ACTV_TO_DT=CURRENT_DATE, LAST_UPDT_DT=CURRENT_DATE 
where MBR_ID=$UUID and MBR_TYP_CD='P';
update KRIM_ROLE_MBR_T set ACTV_TO_DT=CURRENT_DATE, LAST_UPDT_DT=CURRENT_DATE
where MBR_ID=$UUID;

 

Manual Verification of Deactivation Process