3.5 Defining Policies

All policies are defined in one of two ways:

  • Using the Policy Builder interface to generate DirXML Script. Existing, non-XSLT rules are converted to DirXML Script automatically upon import.

  • Using XSLT style sheets.

Schema Mapping policies can also be defined (and usually are) using a schema mapping table.

3.5.1 Policy Builder and DirXML Script

The Policy Builder interface is used to define the majority of policies you might implement. The Policy Builder interface uses a graphical environment to enable you to easily define and manage policies.

The underlying functionality of rule creation within Policy Builder is provided by DirXML Script, however, you do not need to work directly with DirXML Script.

Instead, you have access to a wide variety of conditions you can test, actions to perform, and dynamic values to add to your policies. Each option is presented using intelligent drop-down lists, providing only valid selections at each point, and quick links to common values.

See NetIQ Identity Manager - Using Designer to Create Policies, for more information on Policy Builder. See DirXML Script for more information on DirXML Script.

HINT:Although it is not necessary for using Policy Builder, the DirXML Script DTD is available in the Identity Manager DTD Reference Documentation.