Microsoft BHOLD Model Generator Operations Guide

  • Article

 

Applies To: Forefront Identity Manager

This operations guide provides information for using BHOLD Model Generator and BHOLD Model Loader to design and deploy a normalized role model in BHOLD Core. BHOLD Model Generator and BHOLD Core are modules of the Microsoft BHOLD Suite Service Pack 1, and BHOLD Model Generator is a utility provided with BHOLD Suite. For more information about Microsoft BHOLD Suite and the BHOLD Core role model, see Microsoft BHOLD Suite Concepts Guide.

This Guide consists of the following sections:

  • Model Generator overview describes the purpose of Model Generator and provides a high-level view of how to use it to bring identity data from other identity stores (such as Active Directory) into the BHOLD Core role model database.

  • Preparing Model Generator input files explains how to create the input files that contain information about the identities, relationships, and responsibilities of people in your organization so that data can be brought into the BHOLD Core database and linked to form an initial role model.

  • Before you begin guides you through decisions you need to make about how roles will be created and named.

  • Using the BHOLD Model Generator wizard steps you through the various stages of the BHOLD Model Generator wizard to create your role model.

  • Importing the role model into the production BHOLD database explains how to use the BHOLD Model Loader utility to import the role model that you created in a test environment into your production BHOLD Core database.

When to use this guide

Use this guide when:

  • You want to test various role model designs to determine how best to create a role model in your production environment.

  • You want to create your initial role model and import it into your production environment.

This guide assumes a thorough understanding of BHOLD Core, how it works, and the principles of designing a normalized role model in BHOLD. Although the procedures provide guidance for using the BHOLD Model Generator and Model Loader, you must understand how objects in the BHOLD Core role model relate to each other and their purpose, specifically the purpose and types of roles. In addition, you must understand how applications and permissions relate to roles, and how users are linked to roles in the role model. To use the BHOLD Model Generator wizard and Model Loader utility, you must be able to log on the BHOLD Core server by using the root account.

For information about installing BHOLD Core and BHOLD Model Generator, see Microsoft BHOLD Suite SP1 Installation Guide.