KIM Technical Admin. role Deactivation Process

This process was implemented in March 2015.

The graph will extract the KIM entities that are using the Technical Admin Role 

select * from KRIM_ROLE_MBR_T where ROLE_ID='63' and isnull(ACTV_TO_DT) and MBR_TYP_CD=='P'

and the KIM entities in the Technical Admin Group

select * from KRIM_GRP_MBR_T where GRP_ID='10061' and isnull(ACTV_TO_DT)

Then it compares these entities against the current extract of IAM people. Any that do not match must be deactivated:

update KRIM_GRP_MBR_T set ACTV_TO_DT=CURRENT_DATE, LAST_UPDT_DT=CURRENT_DATE 
where MBR_ID=$UUID and MBR_TYP_CD='P';
update KRIM_ROLE_MBR_T set ACTV_TO_DT=CURRENT_DATE, LAST_UPDT_DT=CURRENT_DATE
where MBR_ID=$UUID;

 

Manual Verification of Deactivation Process