3. Content Rule
( type ? , parameters ? , filters ? , query-xml ? , member-assignment-query ? , member-assignment-extensions ? , query-extensions ? , account ? )
The <entitlement> node defines an <entitlement>. It contains the dn of the actual <entitlement> definition which is stored in the XMLData attribute in IdentityVault. This element contains additional information about the <entitlement> type, filters and additional extensions that can be used by clients for data-collections.
See <entitlement-configuration>
- type
- entitlement type
- parameters
- parameter list
- filters
- filters to include or exclude query results
- query-xml
- modifications for queries
- member-assignment-query
- memeber assignment information for accounts
- member-assignment-extensions
- memeber assignment information for groups
- query-extensions
- optional query extensions
- account
- get account information
Attribute Value(s) Default Value dn CDATA
the LDAP DN of the entitlement object in the IDV#REQUIRED name CDATA
the IDV name of the entitlement#IMPLIED parameter-format legacy | idm4
indicates the format for the parameters. Pre IDM 4.0 format is refered as legacyidm4 resource-mapping true | false
flag indicating whether or not this entitlement should be included in the resource mappingtrue resource-mapping-state add | pending
indicates whether resource associations should be added effective immediately or pending approvaladd role-mapping true | false
flag indicating whether or not this entitlement should be included in the role mappingtrue
( type ? , parameters ? , filters ? , query-xml ? , member-assignment-query ? , member-assignment-extensions ? , query-extensions ? , account ? )
- entitlements
- entitlement list
Top Elements || All Elements || Tree