Is there a way to programmatically pull a list of distinct users with DV Author role in OAS 2024?

Question

We are currently using OAS 2024 and assign the DV Author role to our business users, which is nested within specific domain application roles. Is there a way to easily retrieve the list of distinct users with DV Author role privileges from the OAS backend? Is this information stored somewhere in the system that can be accessed programmatically?

RanaAshutosh-Oracle · Answer

You can try WLST Commands. Please refer : listAppRolesMembers https://docs.oracle.com/middleware/12213/opss/IDMCR/security_wlst.htm#GUID-348D30DF-0091-433A-B536-6CA769CAD687

Gianni Ceresa · Answer

Where do your users come from? Are you using the WebLogic embedded lightweight LDAP for users or you are using an Active Directory or company LDAP?

There are webservices to get application roles and members, you can also use WLST to get a list of members of an application role, you can also query the OPSS schema in the database (it isn't as simple as it sounds, the schema store a LDAP-like structure).

The challenge you need to solve is inheritance: you maybe have only a limited number of direct members of that application role, but then you need to iterate over every other application role to get their members.

Then, when you find a group, you need to find the members of that group. And there as well there are various ways depending where your groups are sourced from.

Keeping it simple: everything is possible, just not simple or a single command…