do-remove-resource

The <do-remove-resource> action initiates a request to the Roles Based Provisioning Module (RBPM) to revoke the Resource assignment specified by resource-id for an Identity. The target Identity is specified by either <arg-dn> or <arg-association> if specified or by the current object otherwise. If specified by <arg-dn>, the DN must in LDAP format. The request is made to the RBPM enabled User Application server specified by url using credentials specified by id and <arg-password>. Additional optional arguments to the Resource assignment request may be specified by named <arg-string>'s.

Name	Description
description	A description of the reason for the request used for auditing purposes. Default: Request generated by policy.
:CorrelationID	An identifier used to correlate resource revocation. Default: Operation event correlation id is used if no value is specified.

There will be one of these two local variables available to the enclosing policy depending on the success or failure of this request.

• success.do-remove-resource : This local variable will be available only if the resource is revoked successfully. And it contains the DN of request.
  
• error.do-remove-resource : This local variable will be available only if any type of error occurs while requesting the resource revocation. And it contains the error string.

Example

<do-remove-resource
    id="CN=UAAdmin,OU=Sa,O=Data"
	url="http://localhost:8080/IDMProv"
	resource-id="CN=Computer,CN=ResourceDefs,CN=RoleConfig,CN=AppConfig,CN=UserApplication,CN=DriverSet,O=System"
	time-out="30000">
  <arg-password>
    <token-named-password name="resource-admin"/>
  </arg-password>
  <arg-string name="description">
    <token-text>Requested by policy because requireComputer set to false</token-text>
  </arg-string>
</do-remove-resource>