Extracting a security principal half map

To extract user and group data:

1. In the FileNet® Deployment Manager Tree View pane, expand the Environments node and double-click an environment.
2. On the Overview tab, click Retrieve Data button for Security Principal Data.
3. From the Update Principal Half Map dialog box, select the security principal data source:

   Option	Description
   Deploy data set	For a source half map, it is best to retrieve principal data from a FileNet P8 deployment data set or a Process Configuration Console export file because these sources contain only the principals that must be converted for the destination environment. Retrieving from these sources takes much less time than retrieving all the principals from a large LDAP directory. Tip: If you merge principals that are retrieved from both a deployment data set and a Process Configuration Console export file, the half map might contain duplicate entries. To eliminate duplicate entries, perform a retrieval from the LDAP directory that is filtered on the half map of the environment. This action fully resolves the principals and eliminates the duplicate entries. See also Important Considerations. Click Next. In the Select Deploy Dataset field, enter the fully qualified name of the deploy data set from which the security principal data is to be retrieved.
   Content Engine LDAP Provider	For a destination half map, use the LDAP directory for the destination environment, with a filter applied if the LDAP directory is large. See also Important Considerations. Click Next. Click Retrieve Realms. The accessible LDAP realms are displayed. Select the LDAP realm to use. Select the filter to be applied in retrieving the users and groups: None Retrieve data for all users and groups in the selected realm from the LDAP provider. Retrieving all of this principal data can require some time, depending on the size of the LDAP directory. You might use this option if you expect that the objects you are exporting require most of the principals in the LDAP realm. Use the Environment Principal Half Map Retrieve data only for those users and groups that are identified in the security principal half map for a specified environment. If you select this filter, select the environment to use for the security principal half map from a list of currently defined environments. Use a Label File Retrieve data only for those users and groups that are identified in a specified file. If you select this filter, select a file to use. This file must be a text file that contains the short name and, optionally, a label for each user or group to retrieve. Enter the values (short names first) for each user and group on a separate line and use a comma to separate the short name and label. For example: suser, systemuser CEAdmin, administrator Alternatively, you can include only the short name values of each user and group, which causes FileNet Deployment Manager to base its query on the short names only. For example: suser CEAdmin Refer to the sample label file generated in the Samples directory. For more information, see Create sample files.
   Configuration Export File	For a source half map, it is best to retrieve principal data from a Content Platform Engine deploy data set or a Process Configuration Console export file because these sources contain only the principals that must be converted for the destination environment. Retrieving from these sources takes much less time than retrieving all principals from a large LDAP directory. Tip: If you merge principals that are retrieved from both a Content Platform Engine deploy data set and a Process Configuration Console export file, the half map might contain duplicate entries. To eliminate duplicate entries, perform a retrieval from the LDAP directory that is filtered on the half map of the environment. This operation fully resolves the principals and eliminates the duplicate entries. See also Important Considerations. In the Select Process Configuration XML File field, enter the fully qualified name of the Process Configuration Console export file from which the security principal data is to be retrieved.

4. For the chosen security principal data source, if you are updating an existing security principal half map, select one of the following options:
   • Merge: Adds any new security principal data to the security principal half map. If an item with the same ID is retrieved from the environment, existing data is updated with any changes. This option does not delete any data from the security principal half map.
   • Overwrite: Replaces the contents of the security principal half map with the new data.
5. Click Finish.

   FileNet Deployment Manager processes the specified file, retrieves the security principal data, and creates a half map that contains this data (HalfMap_Principal.xml) in the DeploymentTreeRootFolder\Environments subfolder for the specified environment.