OIM 11G R2 PS3 Lab 13: How to hide tiles in OIM 11g R2 PS3?

1) Login to Identity console and create a sandbox

2) Press Home button then click on customize

3)  Click on Structure, blank space, select the gridcell of the tile you want to hide and click on edit button

4)  Click on show component's drop down arrow and click on expressions

5)  Below is the old condition

6) Replace with below condition

#{oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null}

7) Click on ok button

6) Select the sandbox which is used for this customization and click on Publish button

7) Click on Yes button

Testing

8) Login with End user

9) End user wont be able to see Provisioning Tasks and Pending Approvals Tiles, Since we hide those tiles. Only Administrator can see that.

Thanks,
Arihant

How to hide Administration Tab in OIM Admin console from End Users (Role Base UI Access)

Below are the steps for hiding Administration Tab in OIM Admin console

1) Login to Identity console and create a sandbox

2) Click on Customize,Click on View than select Source

3) If prompted of warning about customization say Edit

4) From bottom panel scroll down to Administration.

5) click on Administration , Make sure complete Administration box is selected.

6) Click on Edit at top panel. it will open up a POP up window.

7) Go at the bottom of the page and select Show Component

8) At Type a Value or expression remove true and put below EL expression  and click on test it should show true then click on OK

#{oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null}

9)  Click on apply then OK

10) Publish the active sandox to make the changes available

 

11) Before making EL changes as end user(testuser5)  

    After making EL changes as end user(testuser5)

    As a xelsysadm user

Below are some other options that you can use as per your requirement.

To show a UI component if the logged-in user has the System Administrators admin role:
#{oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null}

Multipal condition
#{(oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null) || oimcontext.currentUser.roles['HelpDesk'] != null}

To show a UI component if the user's UDF attribute called UDF_NAME equals to UDF_VALUE:
#{oimcontext.currentUser['UDF_NAME'] == 'UDF_VALUE'}

Similarly, the EL expression can be modified to check if the logged-in user has any other admin role.
To show a UI component if the usr_key attribute of the logged-in user is 1:
#{oimcontext.currentUser['usr_key'] == 1}

To show a UI component if the logged-in user belongs to the Xellerate Users organization:
#{oimcontext.currentUser['Organization Name'] == 'Xellerate Users'}

To show a UI component if the logged-in user's last name is Smith:
#{oimcontext.currentUser['Last Name'] == 'Smith'}

Thank you
Arihant Baid