tutorial:adm:identities_bulk_actions

Bulk action for identities

Bulk actions on identities are used for making easy and asynchronous changes on multiple identities.

Supported bulk actions on identities

  • Remove,
  • disable manually,
  • enable manually,
  • roles assignment,
  • role removing,
  • resave,
  • role deduplication.

How can I choose identities for bulk action

There are two ways to define for what identities will be the bulk action processed. First way is to select all identities:

And second is to choose identities by one through all pages.

Selecting identities by select box through all pages works only for agendas that implement backend bulk action. On classic agendas this doesn't work.
If you choose all identities, there exist a chance that processed items will be different than currently filtered identities. Because you execute the bulk action with a filter (not specified set of identities) and this filter may have different results after some time needed to process the action.

Bulk actions

Remove identities

Bulk action Remove identities doesn't have any specific settings. You can only choose what identities will be processed.

Required permission for execute:

  • Identity delete and read

Disable manually identities

Bulk action Disable identities doesn't have any specific settings. You can only choose what identities will be processed. The bulk action only changes identity state to DISABLED_MANUALLY. Now it isn't possible to deactivate identity that is already deactivated.

Required permission for execute:

  • Identity update and read

Enable manually identities

Bulk action Enable identities doesn't have any specific settings. You can only choose what identities will be processed. The bulk action evaluates the new identity state. The identity must be in state DISABLED_MANUALLY before running the bulk action.

Required permission for execute:

  • Identity update and read

Roles assignment

This bulk action supports specific settings:

  • Roles - roles that will be assigned,
  • Approve - if you have permission for execute without approving new roles (IdmRoleRequest - Execute), you can uncheck this selecbox,
  • Assign to main contract only - new roles will be assigned only to main contract instead of assigning for every valid or future valid contract,
  • Valid from - if valid from is not filled, then will be filled from contract automatically,
  • Valid till - if valid from is not filled, then will be not set (assigned role will be removed by contact validity).

Required permission for execute:

  • Identity read and change permission,
  • Contract read or autocomplete,
  • Role request create,
  • Role request concept create.

Role removing

This bulk action supports specific settings:

  • Roles - roles that will be removed,
  • Approve - if you have permission for execute without approving remove roles, you can uncheck this selectbox,
  • Remove only from the main contract - the roles will be removed only from the main contract instead of removing from all contracts.

This bulk action remove all identity roles from all contracts or just main.

Required permission for execute:

  • Identity read and change permission,
  • Contract read or autocomplete,
  • Role request create,
  • Role request concept create.

Resave identity

Bulk action resave identity. Bulk action executes simple save on identity.

Required permission for execute:

  • Identity read and change permission,
  • Contract read or autocomplete,
  • Role request create,
  • Role request concept create.

Role deduplication

Bulk action for remove duplicity between roles. For more information and removing algorithm see duplicit_roles

Required permission for execute:

  • Identity read and change permission,
  • identity role read,
  • identity contract autocomplete.

Example