Identity Manager synchronizes data as it changes. If you want to synchronize all data immediately, you can choose from the following options:
Migrate Data From eDirectory: Allows you to select containers or objects you want to migrate from eDirectory™ to an application. When you migrate an object, the Identity Manager engine applies all of the Matching, Placement, and Create policies, as well as the Subscriber filter, to the object.
Migrate Data Into eDirectory: Allows you to define the criteria Identity Manager uses to migrate objects from an application into eDirectory. When you migrate an object, the Identity Manager engine applies all of the Matching, Placement, and Create policies, as well as the Publisher filter, to the object. Objects are migrated into eDirectory using the order you specify in the Class list.
Synchronize: Identity Manager processes all objects for classes listed in the Subscriber class filter. Associated objects are merged. Objects without an association are processed as Add events.
To use one of these options:
In iManager, select > .
Locate the driver set containing the z/OS RACF driver, then double-click the driver icon.
Click the appropriate migration button.
To migrate users and groups from RACF, you must migrate all of the groups first, and then migrate all of the users. This is because RACF group profiles do not always contain a complete list of their member users. Add group and modify group events never contain group members in the Publisher channel of the z/OS RACF driver.
To migrate users and groups from eDirectory, you must migrate all of the groups first, and then migrate all of the users. This is because the Subscriber channel policies process the User object Group Membership attribute, but not the Group Object Member attribute.