Skip to content

Instantly share code, notes, and snippets.

@dminnelli
Last active April 12, 2017 07:44
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dminnelli/3b92c6d9b122a382bd089cab48e6d96d to your computer and use it in GitHub Desktop.
Save dminnelli/3b92c6d9b122a382bd089cab48e6d96d to your computer and use it in GitHub Desktop.
FIM/MIM Configuration Management sample file for LithNet Import-RMConfig cmdlet
<Lithnet.ResourceManagement.ConfigSync>
 <Operations>
<!-- Create Set -->
<ResourceOperation operation="Add Update" resourceType="Set" id="AgencyPhoneSet">
<AnchorAttributes>
<AnchorAttribute>DisplayName</AnchorAttribute>
</AnchorAttributes>
<AttributeOperations>
<AttributeOperation operation="replace" name="DisplayName">_Agency (AGENCY) All Phones</AttributeOperation>
<AttributeOperation operation="replace" name="Filter" type="filter">/Phone[Agency = 'AGENCY']</AttributeOperation>
</AttributeOperations>
</ResourceOperation>
  <!-- Create Rights MPR -->
<ResourceOperation operation="Add Update" resourceType="ManagementPolicyRule" id="AgencyPhoneUpdateMPR">
<AnchorAttributes>
<AnchorAttribute>DisplayName</AnchorAttribute>
</AnchorAttributes>
<AttributeOperations>
<AttributeOperation operation="replace" name="DisplayName">_Agency (AGENCY) Administrators can update Phones in AGENCY</AttributeOperation>
<AttributeOperation operation="replace" name="PrincipalSet" type="ref">Set|DisplayName|_Agency (AGENCY) Administrators</AttributeOperation>
<AttributeOperation operation="replace" name="Disabled">false</AttributeOperation>
<AttributeOperation operation="replace" name="GrantRight">true</AttributeOperation>
<AttributeOperation operation="replace" name="ManagementPolicyRuleType">Request</AttributeOperation>
<AttributeOperation operation="replace" name="ResourceCurrentSet" type="xmlref">AgencyPhoneSet</AttributeOperation>
<AttributeOperation operation="replace" name="ResourceFinalSet" type="xmlref">AgencyPhoneSet</AttributeOperation>
<AttributeOperation operation="replace" name="ActionParameter">ReducedVisibilityPhone</AttributeOperation>
<AttributeOperation operation="add" name="ActionType">Read</AttributeOperation>
</AttributeOperations>
</ResourceOperation>
<!-- Create Rights MPR -->
<ResourceOperation operation="Add Update" resourceType="ManagementPolicyRule" id="AgencyPhoneReadMPR">
<AnchorAttributes>
<AnchorAttribute>DisplayName</AnchorAttribute>
</AnchorAttributes>
<AttributeOperations>
<AttributeOperation operation="replace" name="DisplayName">_Agency (AGENCY) Administrators can read Phones in AGENCY</AttributeOperation>
<AttributeOperation operation="replace" name="PrincipalSet" type="ref">Set|DisplayName|_Agency (AGENCY) Administrators</AttributeOperation>
<AttributeOperation operation="replace" name="Disabled">false</AttributeOperation>
<AttributeOperation operation="replace" name="GrantRight">true</AttributeOperation>
<AttributeOperation operation="replace" name="ManagementPolicyRuleType">Request</AttributeOperation>
<AttributeOperation operation="replace" name="ResourceCurrentSet" type="xmlref">AgencyPhoneSet</AttributeOperation>
<AttributeOperation operation="replace" name="ResourceFinalSet" type="xmlref">AgencyPhoneSet</AttributeOperation>
<AttributeOperation operation="replace" name="ActionParameter">*</AttributeOperation>
<AttributeOperation operation="add" name="ActionType">Modify</AttributeOperation>
<AttributeOperation operation="add" name="ActionType">Read</AttributeOperation>
</AttributeOperations>
</ResourceOperation>
<!-- Update Rights MPR -->
<ResourceOperation operation="Update" resourceType="ManagementPolicyRule" id="AgencyUserUpdateMPR">
<AnchorAttributes>
<AnchorAttribute>DisplayName</AnchorAttribute>
</AnchorAttributes>
<AttributeOperations>
<AttributeOperation operation="replace" name="DisplayName">_Agency (AGENCY): Administrator can Update Service Options for AGENCY Users</AttributeOperation>
<AttributeOperation operation="add" name="ActionParameter">ReducedVisibilityPhone</AttributeOperation> 
</AttributeOperations>
</ResourceOperation>
<!-- Update Rights MPR -->
<ResourceOperation operation="Update" resourceType="ManagementPolicyRule" id="AgencyUserReadMPR">
<AnchorAttributes>
<AnchorAttribute>DisplayName</AnchorAttribute>
</AnchorAttributes>
<AttributeOperations>
<AttributeOperation operation="replace" name="DisplayName">_Agency (AGENCY): Administrator can Read Service Options for AGENCY Users</AttributeOperation>
<AttributeOperation operation="add" name="ActionParameter">ReducedVisibilityPhone</AttributeOperation>
<AttributeOperation operation="add" name="ActionParameter">ChargeZone</AttributeOperation>
<AttributeOperation operation="add" name="ActionParameter">ClusterId</AttributeOperation>
</AttributeOperations>
</ResourceOperation>
<!-- Update Rights MPR -->
<ResourceOperation operation="Update" resourceType="ManagementPolicyRule" id="AgencyUserViewMPR">
<AnchorAttributes>
<AnchorAttribute>DisplayName</AnchorAttribute>
</AnchorAttributes>
<AttributeOperations>
<AttributeOperation operation="replace" name="DisplayName">_Agency (AGENCY) Administrator can view Agency user in AGENCY</AttributeOperation>
<AttributeOperation operation="delete" name="ActionType">Modify</AttributeOperation>
</AttributeOperations>
</ResourceOperation>
 </Operations>
</Lithnet.ResourceManagement.ConfigSync>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment