If Destination Attribute

Performs a test on attribute values of the current object in the destination data store. The test performed depends on the specified operator.

Fields

Name

Specify the name of the attribute to test. Supports variable expansion. For more information, see Variable Selector.

Operator

Select the condition test type.

Operator

Returns True When...

Available

There is a value available in the destination data store for the specified attribute.

Equal

There is a value available for the specified attribute in the destination data store that equals the specified value when compared by using the specified comparison mode.

Greater Than

There is a value available for the specified attribute in the destination data store that is greater than the content of the condition when compared by using the specified comparison mode. If mode="structured", the content must be a set of <component> elements; otherwise, it must be text.

Less Than

There is a value available for the specified attribute in the destination data store that is greater than the content of the condition when compared by using the specified comparison mode. If mode="structured", the content must be a set of <component> elements; otherwise, it must be text.

Not Available

Available would return False.

Not Equal

Equal would return False.

Not Great Than

Greater Than or Equal would return False.

Not Less Than

Less Than or Equal would return False.

Value

Contains the value defined for the selected operator. The value is used by the condition. Each value supports variable expansion. For more information, see Variable Selector. The operators that contain the value field are:

  • Equal

  • Greater Than

  • Less Than

  • Not Equal

  • Not Greater Than

  • Not Less Than

Comparison Mode

The condition has a comparison mode parameter that indicates how a comparison is done.

Mode

Description

Case Sensitive

Character-by-character case sensitive comparison.

Case Insensitive

Character-by-character case insensitive comparison.

Regular Expression

The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression. For more information, see the Oracle Java documentation.

The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed by using the appropriate embedded escapes.

Source DN

Compares by using semantics appropriate to the DN format for the source data store.

Destination DN

Compares by using semantics appropriate to the DN format for the destination data store.

Numeric

Compares numerically.

Binary

Compares the binary information.

Structured

Compares the structured attribute according to the comparison rules for the structured syntax of the attribute.

The operators that contain the comparison mode parameter are:

  • Equal

  • Greater Than

  • Less Than

  • Not Equal

  • Not Greater Than

  • Not Less Than

Example

The example uses the condition If Attribute to govern group membership for a User object based on the title. The policy is Govern Groups for User Based on Title Attribute, and it is available for download from the NetIQ Support Web site. For more information, see Downloading Identity Manager Policies in the NetIQ Identity Manager Understanding Policies Guide. To view the policy in XML, see 004-CommandGroupChangeOnTitleChange.xml.

Policy for a user changing from manager to employee

The policy checks to see if the value of the title attribute contains manager.

Destination attribute