This content has been marked as final. Show 3 replies
This I am afraid is an issue I have also had in OIM 11g. Support told us you cannot import authorization policies for new request templates in OIM 11g. This is not something they plan to fix. To avoid the issue you have to import the request templates on their own (no auth policy and therefore no template user roles) and manually assign the roles in the new environment (which then creates the authorisation policy).
What I think you may find is that the authorisation policies do what you expect, i.e. limit the templates to the correct roles, but the "Template User Roles" do not show in the Request Template and you cannot modify the request template.
I'm sorry I don't have any further answer as to how you can correct an environment once it is wrong.
Did you try with exporting and reimporting the Templates ?
Which version of OIM are you using ?
And, you can always play around with Authorization Policies.
Below link is just a hint, you need to explore more as per your requirement.