This section describes the procedure to create mapping for PermissionSets.

To create mapping for PermissionSets

1. Open the Synchronization Editor tool.
2. Open the specific synchronization project.
3. Navigate to Configuration | One Identity Manager Connection |Update Schema.
4. Activate the project.
5. Navigate to the Mappings tab and click + to create a mapping.
6. In the New mapping window:
   1. In the General section, enter the values in the fields as shown in the table

      Table 468: Create new mapping for PermissionSets - General section

      Field	Value
      Mapping name	PermissionSets
      Mapping direction	Both directions

      NOTE: Select the option Maps objects referenced by multiple references.

   2. In the Relation section, enter the values in the fields as shown in the table

      Table 469: Create new mapping for PermissionSets - Relation section

      Field	Value
      One Identity Manager schema class	PermissionSets
      Target system schema class	PermissionSets(all)

   3. Click Ok and click Next.
7. In the Mapping Wizard:
   1. In the Select task section, select the template Create rules based on template, click Next.
   2. In the Select source mapping section, select Group and click Next.
   3. Verify the Analysis Result and click Next and then click Finish.
8. To add the virtual parameter
   1. Select Mappings| PermissionSets .
   2. Select + to create a property.
   3. In the Create property window, from the Property type list, select Members of M:N schema types .
   4. Enter the following values, for example, in the fields mentioned in the table, and select the options listed below:

      Table 470: Virtual parameters

      Field/ Option	Value
      Name	vrtUser
      Display name	vrtUser

      Select the following options, below the Display name field, according to your requirements:

      • Ignore case
      • Try to mark the objects for deletion (outstanding)
   5. Click + to add the schema type.

   6. Select the Member key properties for Group as listed in the table below

      Table 471: Member key properties

      Entity	Value
      M:N schema type	UCIUserHasItem
      	UID_UCIItem
      	UID_UCIUser
      Primary key property	OjectGUID

   7. Click Ok.

   8. Add a new mapping rule Value Comparison Rule with vrtUser <--> members~value.

   9. Run the synchronization.