CA Service Management

Expand all | Collapse all

EEM database info

  • 1.  EEM database info

    Posted Aug 22, 2016 06:28 AM

    Hi,

     

    1. I'm trying to understand EEM database structure. I'm looking for tables (or config files) where informations about Applications Groups are stored (application= Service Catalog). I'm looking for relations between groups and users too.

     

    2. Where can I download the EEM SDK tool?

     

    Best regards,

    Sutot



  • 2.  Re: EEM database info

    Broadcom Employee
    Posted Aug 22, 2016 07:30 AM

    Hello Salvatore.

     

    As for your information and informing, the EEM SDK is no longer available for building customized interfaces or wrappers, as it is not a standalone product anymore.

    If you would like to customize EEM, you would need to engage our CA services.

     

    For an answer about the EEM database scheme/schema, Further research is needed.

     

    Thanks and kind regards, Louis. van Amelsfort.



  • 3.  Re: EEM database info

    Posted Aug 22, 2016 08:04 AM

    Hi Louis,

     

    thank you for your answer.

     

    What I need is to automatically add/remove users to EEM Application Group. I was thinking to do this with a custom script using the EEM SDK (or doing direct queries on database).

     

    Is there another way to do this?

     

    Best regards,

    Sutot



  • 4.  Re: EEM database info
    Best Answer

    Broadcom Employee
    Posted Aug 22, 2016 08:44 AM

    Hi Salvatore.

     

    And the below 'removes'/'deletes' an existing user:

    <Remove>

      <!--For now,

                     use global groups and global folder for easy testing

                     since the EIAM Web Gui does not show app level

                     SafeUserGroups and SafeUsers-->

      <!--Global folders-->

      <GlobalFolder name="/USM"/>

      <GlobalFolder name="/USM/Users"/>

      <!--Global users-->

      <GlobalUser folder="/USM/Users" name="name01">

       <UserName>username01</UserName>

       <FirstName>firstname01</FirstName>

       <LastName>lastname01</LastName>

       <DisplayName>display name01</DisplayName>

       <Password>password01</Password>

      </GlobalUser>

    </Remove>

     

    Kind regards, Louis.



  • 5.  Re: EEM database info

    Broadcom Employee
    Posted Aug 22, 2016 08:23 AM

    Hi Salavtore.

    To import users into the EEM environment, you can perform the below steps.

    1. open a commandprompt
    2. cd C:\Program Files\CA\SC\EmbeddedEntitlementsManager\bin
    3. create a file (with e.g. notepad) xmlfile01.xml with content:
    The syntax of the xml file that should be imported using safex.exe
    <Safex>
    <!-- Attach as global user, no product instance, to register -->
    <Attach/>
    <!--Add GLOBAL folders, groups and users -->
    <Add>
      <!--For now,
                     use global groups and global folder for easy testing
                     since the EIAM Web Gui does not show app level
                     SafeUserGroups and SafeUsers-->
      <!--Global folders-->
      <GlobalFolder name="/USM"/>
      <GlobalFolder name="/USM/Users"/>
      <!--Global users-->
      <GlobalUser folder="/USM/Users" name="name01">
       <UserName>username01</UserName>
       <FirstName>firstname01</FirstName>
       <LastName>lastname01</LastName>
       <DisplayName>display name01</DisplayName>
       <Password>password01</Password>
      </GlobalUser>
    </Add>
    <Detach/>
    </Safex>

    4. Run: safex [-h hostname -l locale] -u eiamadmin -p password -f xmlfile.xml
    5. EEM-UI/Manage Identities>GO>LeftJand 'users list' shows:
       +USM
       ++users
       +++display name01

     

    Would this help you further? Thanks and kind regards, Louis.



  • 6.  Re: EEM database info

    Posted Aug 22, 2016 08:53 AM

    Hi Louis,

     

    vary thanks for your answer.

     

    I tested your suggestion and it works fine for adding users. But what I need is to relate existing users with one or more EEM Application Groups (not global groups). In xml file that you suggested is possible to add a tag to relate a user to an existing Application Group?

     

    Best regards,

    Sutot



  • 7.  Re: EEM database info

    Broadcom Employee
    Posted Aug 22, 2016 09:32 AM

    Hi Salvatore.

     

    To set an application, you can use the below statement:

    <Attach label="application instance label"/>

    E.G. <Attach label="Service Catalog"/>

     

    And 'group' related statements follow here:

     

     

    UserGroups

     

     

     

    <Safex>

     

    <Attach label="application instance label" />

     

    <Add>

     

    <UserGroup folder="/" name="salesman">

     

    <Description>Sales team</Description>

     

    </UserGroup>

     

    <UserGroup folder="/" name="marketing">

     

    <Description>Marketing team</Description>

     

    </UserGroup>

     

    <UserGroup folder="/" name="engineering">

     

    <Description>Marketing team</Description>

     

    </UserGroup>

     

    </Add>

     

    </Safex>

     

     

    GlobalUserGroup

     

     

     

    <Safex>

     

    <Attach />

     

    <Add>

     

    <GlobalUserGroup folder="/" name="Staff">

     

    <Description>Staff group description</Description>

     

    </GlobalUserGroup>

     

    <GlobalUserGroup folder="/" name="Administrators">

     

    <GroupMembership>Staff</GroupMembership>

     

    <Description>Administrator group description</Description>

     

    </GlobalUserGroup>

     

    </Add>

     

    </Safex>

     

     

    For further implementation of this kind of functionality, please do consider to engage CA Services?

    Who can help you on site to further implement this then?

     

    Thanks and kind regards, Louis.



  • 8.  Re: EEM database info

    Posted Aug 22, 2016 11:17 AM

    Hi Louis,

     

    unfortunately is not on my charge to engage CA Services

     

    "Add" and "Remove" command are working well. But when I try to update an existing user using "Modify" tag I receive the following message and the user is not updated.

     

    Where I'm wrong?

     

    Sutot

     

    C:\Program Files\CA\SC\EmbeddedEntitlementsManager\bin>safex -v 3 -u eiamadmin -

    p password -f c:\test_user.xml

    Setting Translation file:safex.tr

    Setting back end to "localhost"

     

    Setting locale to "en_us"

     

    OK:Successfully Authenticated

    OK: action[Attach] with ApplicationInstance label[Service Catalog]

     

    Current XML file location: line 16 column 16

    error: action[Modify] object[GlobalUser] name[/name01]

    Safe Error: [EE_NOTFOUND Object Not Found]

    Sponsor Error: [ISE_NOSUCHOBJECT no such object exists]

    Debug [Modify Error: PozError]

    Debug [PE_NOTFOUND Object Not Found]

    Debug [pozObject::modify: error invoking iPoz::ObjectModify on host localhost]

    Debug [Object modify failed]

    Debug [ISE_NOSUCHOBJECT no such object exists]

    Debug [/iTechPoz/Entities/Users/name01]

    OK: action[Detach] from ApplicationInstance label[Service Catalog]

    Encountered [1] error(s) processing XML data.

    OK:Total objects Added 0

    OK:Total objects Modified 0

    OK:Total objects Removed 0

    OK:Total objects Skipped 0

    OK:Total objects Exported 0

     

    C:\Program Files\CA\SC\EmbeddedEntitlementsManager\bin>



  • 9.  Re: EEM database info

    Posted Aug 22, 2016 01:43 PM

    Maybe I resolved: using Application Users (tag "User" instead of "GlobalUser") it works out.

     

    Another question: using <Modify> and <GroupMembership> now I can add a user to a group. How can I remove him from a group without deleting the user? I tried with following code to add "user01" to "group02" and remove him from "group01", but unsuccessfully: "user01" was added to "group02" but not removed from "group01".

     

    <Safex>

    <Attach label="Service Catalog" />

    <Modify>

      <User folder="/" name="user01">

       <GroupMembership>group02</GroupMembership>

       <Remove>

        <GroupMembership>group01</GroupMembership>

       </Remove>

      </User>

    </Modify>

    <Detach/>

    </Safex>

     

    Best regards,

    Sutot



  • 10.  Re: EEM database info

    Broadcom Employee
    Posted Aug 23, 2016 02:11 AM

    Hi Sutot.

     

    Thanks for your response on this so far.

    And as unfortunate as it is (I do understand this in full) this became now situation where the real and full solution should be obtained from elsewhere, rather than this community thread.

    As mentioned earlier, this kind of customization and implementation can best be handled by CA Services engineers.

    And with that said, please do try to get funds internally to perform these kind of tasks for your company.

     

    After further researching for you, I found some 'examples' of xml script file content. And I made a .docx file out of these.

    Please provide me your email address and I will send you that document to possibly help you further.

     

    Thanks for your understanding and kind regards, Louis.



  • 11.  Re: EEM database info

    Posted Aug 23, 2016 02:51 AM

    Hi Louis,

     

    thank you for your help.

     

    Best regards,

    Sutot



  • 12.  Re: EEM database info

    Broadcom Employee
    Posted Aug 23, 2016 04:18 AM

    Hi Salvatore.

     

    The email has been sent.

     

    Per my earlier comment in the community (https://communities.ca.com/thread/241759681), attached the document with ‘some examples’.

    With this, I also do apologize for pointing you to CA Services.

    However, as mentioned, that’s the best approach in these kind of circumstances.

     

    Thanks for your understanding and kind regards, Louis.

     

    The attached file is named CAEEM_12.0_Prog_ENU.docx