If Operation Attribute

Performs a test on attribute values in the current operation. The test performed depends on the specified operator.

Fields

Name

Specify the name of the attribute to test. Supports variable expansion. For more information, see Variable Selector.

Operator

Select the condition test type.

Operator

Returns True When...

Available

There is a value available in the current operation (<add-attr>, <add-value> or <attr>) for the specified attribute.

Available would return False if there is only a <remove-value> or a <remove-all-values> value for the specified attribute.

Changing

The current operation contains a change (<modify-attr> or <add-attr>) of the specified attribute.

Changing would return True if it is an <add-attr>, <add-value>, <remove-value>, or <remove-all-values> operation for the specified attribute.

Changing From

The current operation contains a change that removes a value (<remove-value>) of the specified attribute that equals the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text.

Changing To

The current operation contains a change that adds a value (<add-value> or <add-attr>) to the specified attribute that equals the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text.

Equal

There is a value available in the current operation (other than a <remove-value>) for the specified attribute that equals the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text.

Supports variable expansion.

Greater Than

There is a value available in the current operation (other than a <remove-value>) for the specified attribute that is greater than the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text.

Supports variable expansion.

Less Than

There is a value available in the current operation (other than a <remove-value>) for the specified attribute that is less than the content of the condition when compared by using the specified comparison mode. If mode=structured, then the content must be a set of <component>'s. Otherwise, it must be text.

Supports variable expansion.

Not Available

Available would return False.

Not Changing

Changing would return False.

Not Changing From

Changing From would return False.

Not Changing To

Changing To would return False.

Not Equal

Equal would return False.

Not Greater Than

Greater Than or Equal would return False.

Not Less Than

Less Than or Equal would return False.
Value

Contains the value defined for the selected operator. The value is used by the condition. Each value supports variable expansion. For more information, see Variable Selector. The operators that contain the value field are:

  • Changing From

  • Changing To

  • Equal

  • Greater Than

  • Less Than

  • Not Changing From

  • Not Changing To

  • Not Equal

  • Not Greater Than

  • Not Less Than

Mode

The condition has a comparison mode parameter that indicates how a comparison is done.

Mode

Description

Case Sensitive

Character-by-character case sensitive comparison.

Case Insensitive

Character-by-character case insensitive comparison.

Regular Expression

The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression. For more information, see the Oracle Java documentation.

The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed by using the appropriate embedded escapes.

Source DN

Compares by using semantics appropriate to the DN format for the source data store.

Destination DN

Compares by using semantics appropriate to the DN format for the destination data store.

Numeric

Compares numerically.

Binary

Compares the binary information.

Structured

Compares the structured attribute according to the comparison rules for the structured syntax of the attribute.

The operators that contain the comparison mode parameter are:

  • Changing From

  • Changing To

  • Equal

  • Greater Than

  • Less Than

  • Not Changing From

  • Not Changing To

  • Not Equal

  • Not Greater Than

  • Not Less Than

Example

The example adds a User object to the appropriate Employee or Manager group based on Title. It also creates the group, if needed, and sets up security equal to that group. The policy name is Govern Groups for User Based on Title Attribute, and it is available for download from the NetIQ Support Web site. For more information, see Downloading Identity Manager Policies in the NetIQ Identity Manager Understanding Policies Guide. To view the policy in XML, see 003-Command-Add-CreateGroups.xml.

Policy to see if the title indicates manager
Operation attribute

The condition checks to see if the attribute of Title is equal to .*manager.*, which is a regular expression. The condition looks for a title that has zero or more characters before manager and a single character after manager. It would find a match if the User object’s title was sales managers.