NetIQ Documentation: NetIQ Identity Manager 4.0.2 Null Service and Loopback Service Drivers Implementation Guide - Migrating Identity Vault User Permission Assignments

4.5 Migrating Identity Vault User Permission Assignments

You can migrate user permission assignments from the Identity Vault into the User Application as resource assignments. You can either select a specific user object or migrate users in bulk. Migration of permission assignments of users is possible if the driver supports Permission Collection and Reconciliation service. For more information, see Section 4.1.3, Configuring the Driver Settings.

Depending on the following Entitlements GCV settings, the driver migrates the Identity Vault user permission assignments into the User Application:

If Enable Permissions Reconciliation for Group entitlement is set to Yes, group membership assignments are migrated.
If Enable Permission Reconciliation for all Custom entitlements is set to Yes, all custom assignments are migrated. Otherwise, selective custom assignments are migrated.

In iManager, open the Loopback Services driver Overview page:
1. Click to display the Identity Manager Administration page.
2. In the Administration list, click Identity Manager Overview.
3. If the driver set is not listed on the Driver Sets tab, use the Search In field to search for and display the driver set.
4. Click the driver set to open the Driver Set Overview page.
5. Click the Loopback Services driver icon to display its Overview page.
Click Migrate, then select the Migrate into Identity Vault option.

IMPORTANT:In case of Loopback Service driver, the Subscriber channel connects to the Publisher channel and the Identity Vault is viewed as a connected system. The Migrate from Identity Vault option is not supported for this driver.
Click Edit List, then select the user class from Class List for migrating all users from the Identity Vault into the User Application.
For migrating specific users, select CN from the Attribute List and enter CN of the user you want to migrate to the User Application.
Select OK.

IMPORTANT:Be cautious while deleting a resource from the User Application. If a resource is assigned to users, the Loopback Service driver revokes all resource assignments from the Identity Vault users.