OIM KB Update — Run 2026-04-27 (2)

Focus: IT Shop shop-availability mechanics with DB-backed evidence (AccProduct/AccProductGroup, product placement tables/views, and entitlement IT Shop flags).

Sources used (priority order)

1. Live sandbox OneIM DB on im.sandbox.local (via scripts/sandbox/Invoke-SandboxSql.ps1).

2. Sandbox host installed/MDK material under C:\Dev\OneIM10.0.0-MDK\MDK and C:\Dev\OneIdentityManager.10.0 (via WinRM helpers).

3. Vendor docs and other reliable sources (URLs + access date recorded in notes).

Outputs

DB evidence: projects/identity-management/oim-kb-update/sandbox-db/2026-04-27-itshop-availability-db-evidence.md
KB note updates: see “Changed files” section in the final summary.

Notes

This run aims to answer: why AccProductInBaseTree is empty in this sandbox (despite BaseTree.UID_AccProduct being set for IT Shop product nodes) and what minimal table(s) actually drive shop placement/availability.

What changed / learned

Live DB evidence: AccProductInBaseTree is empty (COUNT(*) = 0) and the view AccProductInITShopOrg reads only from it, so it also yields 0 rows in this sandbox.
Live DB evidence: the IT Shop subtree (BaseTree.UID_OrgRoot='QER-V-ITShopOrg') still contains 16 PR nodes with BaseTree.UID_AccProduct set.
Procedure evidence: QER_PITShopProductNodeCreate_b exists and (string search / file inspection) does not reference AccProductInBaseTree, suggesting product-node logic uses BaseTree + “BaseTreeHas<type>” relations rather than that mapping table in this environment.
Official doc evidence (10.0 PDF): describes service categories, product-to-shelf assignment, and QER | ITShop | AutoPublish | ADSGroup.

Changed files

projects/identity-management/oim-kb-update/sandbox-db/2026-04-27-itshop-availability-db-evidence.md
projects/identity-management/oim-kb-update/sandbox-host/2026-04-27-itshop-file-hints.md
projects/identity-management/knowledge-base/oim-it-shop-structure-and-availability.md