Performs a test on attribute values in the current operation. The test performed depends on the specified operator.
Specify the name of the attribute to test.
Select the condition test type.
Operator |
Returns True when... |
---|---|
Available |
There is a value available in the current operation (<add-attr>, <add-value> or <attr>) for the specified attribute. |
Not Available |
Available would return False. |
Equal |
There is a value available in the current operation (other than a <remove-value>) for the specified attribute that equals the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text. |
Not Equal |
Equal would return False. |
Greater Than |
There is a value available in the current operation (other than a <remove-value>) for the specified attribute that is greater than the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text. |
Not Greater Than |
Greater Than or Equal would return False. |
Less Than |
There is a value available in the current operation (other than a <remove-value>) for the specified attribute that is less than the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text. |
Not Less Than |
Less Than or Equal would return False. |
Changing |
The current operation contains a change (<modify-attr> or <add-attr>) of the specified attribute. |
Not Changing |
Changing would return False. |
Changing From |
The current operation contains a change that removes a value (<remove-value>) of the specified attribute that equals the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text. |
Not Changing From |
Changing From would return False. |
Changing To |
The current operation contains a change that adds a value (<add-value> or <add-attr>) to the specified attribute that equals the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text. |
Not Changing To |
Changing To would return False. |
Contains the value defined for the selected operator. The value is used by the condition. The operators that contain the value field are:
Equal
Not Equal
Changing To
Changing From
Not Changing To
Not Changing From
Greater Than
Not Greater Than
Less Than
Not Less Than
Some condition tests have a mode parameter that indicates how the comparison is done.
Mode |
Description |
---|---|
Case Sensitive |
Character-by-character case sensitive comparison. |
Case Insensitive |
Character-by-character case insensitive comparison. |
Regular Expression |
The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression. See Sun’s Web site. The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed using the appropriate embedded escapes. |
Source DN |
Compares using semantics appropriate to the DN format for the source data store. |
Destination DN |
Compares using semantics appropriate to the DN format for the destination data store. |
Numeric |
Compares numerically. |
Binary |
Compares the binary information. |
Structured |
Compares the structured attribute according to the comparison rules for the structured syntax of the attribute. |
The operators that contain the comparison mode parameter are:
Equal
Not Equal
Changing To
Changing From
Not Changing To
Not Changing From
Greater Than
Not Greater Than
Less Than
Not Less Than
The example adds a User object to the appropriate group, Employee or Manager, based on Title. It also creates the group, if needed, and sets up security equal to that group. The policy name is Govern Groups for User Based on Title Attribute, and it is available for download from the NetIQ Support Web site. For more information, see Downloading Identity Manager Policies
in NetIQ Identity Manager Understanding Policies Guide. To view the policy in XML, see 003-Command-Add-CreateGroups.xml.
The condition is checking to see if the attribute of Title is equal to .*manager*, which is a regular expression. This means that it is looking for a title that has zero or more characters before manager and a single character after manager. It would find a match if the User object’s title was sales managers.