If Operation Entitlement

Conditionally performs a test on entitlements of the current object in the current operation.

Fields

Disabled

Specify whether the action is enabled or disabled, where true indicates enabled and false indicates disabled. The default value is false.

Name

Specify the name of the entitlement. Supports variable expansion.

Object

Select the target object. This object can be the current object, or can be specified by a DN or an association.

Mode

Select whether this action should be added to, before, or after the current operation, or written directly to the destination data store.

No Trace

Specify whether this action should be traced during the execution of the policy. The default value is false, which disables the trace.

Example

The If Operation Entitlement action supports the following string arguments:

String Name

Description

Available

The named entitlement is available and granted in the current operation.

Changing

The current operation contains a change (grant or revoke) of the named entitlement.

Changing From

The current operation contains a change that revokes a value of the named entitlement that has a value that equals the content of the condition when compared using the specified comparison mode. Supports variable expansion.

Changing To

The current operation contains a change that grants a value of the named entitlement that has a value that equals the content of the condition when compared using the specified comparison mode. Supports variable expansion.

Equal

The named entitlement is available and granted in the current operation and has a value that equals the content of the condition when compared using the specified comparison mode.Resource Name in LDAP format;Resource association description;Entitlement Value. Supports variable expansion.

lt

The named entitlement is available and granted in the current operation and has a value that is less than the content of the condition when compared using the specified comparison mode. Supports variable expansion.

gt

The named entitlement is available and granted in the current operation and has a value that is greater than the content of the condition when compared using the specified comparison mode. Supports variable expansion.

Not Available

This value returns true when the available value returns false.

Not Changing

This value returns true when the changing value returns false.

Not Changing From

This value returns true when the changing from value returns false.

Not Changing To

This value returns true when the changing to value returns false.

Not Equal

This value returns true when the equal value returns false.

Not lt

This value returns true when the lt value returns false.

Not gt

This value returns true when the gt value returns false.