Hi 

any one used sweep action to update security and add new Active Dir Group to a million of docs in Filenet content Engine and can share the Script/ Best practice?

Thanks 

Moshe Elbaz

------------------------------
Moshe Elbaz
IFN
Tel AVIV
------------------------------

Hi,

Yes, it's doable, but with ~1M documents I would be cautious about a "big bang" sweep.

From a best-practice standpoint, I would only update documents where the AD group is actually missing from the ACL, and I would segment and throttle the job (e.g., by class / date range / folder) and run it off-hours.

It is also worth mentioning the Security Proxy alternative, which is often preferable to updating 1M individual ACLs. If documents share a limited number of security profiles, consider using Security Proxy / inherited security: permissions can be inherited not only from a folder security parent, but also via an object-valued property configured as an "inherited" security proxy. In that model, you update the proxy object(s) once (by adding the new AD group) instead of touching every document.

Good luck,

------------------------------
Olivier Baltus
NSI Luxembourg
------------------------------

Original Message:
Sent: Wed December 31, 2025 03:52 AM
From: Moshe Elbaz
Subject: SECURITY UPDATE of millions of docs

Hi 

any one used sweep action to update security and add new Active Dir Group to a million of docs in Filenet content Engine and can share the Script/ Best practice?

Thanks 

Moshe Elbaz

------------------------------
Moshe Elbaz
IFN
Tel AVIV
------------------------------

Hi , in TEL Germany they provide an asset IBM FileNet UpdateManagerCE  https://w3.ibm.com/w3publisher/service-assets-and-utilities/overview/assets/ibm-filenet-updatemanagerce where you can also change the security. Here you can update in tranches and you get a separate log to track the changes. I add the link to the tool. 

------------------------------
Claudia Völk-Fanenbruck
------------------------------

Original Message:
Sent: Wed December 31, 2025 03:52 AM
From: Moshe Elbaz
Subject: SECURITY UPDATE of millions of docs

Hi 

any one used sweep action to update security and add new Active Dir Group to a million of docs in Filenet content Engine and can share the Script/ Best practice?

Thanks 

Moshe Elbaz

------------------------------
Moshe Elbaz
IFN
Tel AVIV
------------------------------

Hi Moshe,

in addition; please check if the metadata you want to update are indexed. This will speed up the update process big time!!

------------------------------
Peter A. den Ouden
ECM Product Owner & Sr. Solution Architect
Dutch Tax Administration
Apeldoorn, Netherlands
+31 6 49594277
------------------------------

Original Message:
Sent: Wed December 31, 2025 03:52 AM
From: Moshe Elbaz
Subject: SECURITY UPDATE of millions of docs

Hi 

any one used sweep action to update security and add new Active Dir Group to a million of docs in Filenet content Engine and can share the Script/ Best practice?

Thanks 

Moshe Elbaz

------------------------------
Moshe Elbaz
IFN
Tel AVIV
------------------------------