member-assignment-extensions

The <member-assignment-extensions> are only applicable for <entitlement> type group. The IDM Data Collection Service (DCS) has the requirement to be able to obtain member assignment information from managed and unmanaged accounts. Because member assignment information can be bulky (groups and roles can potentially have many assigned members), the query extensions to retrieve this information are optional and have to be added by the querying agent on an as-needed basis. Member assignment information is available on both account and group entitlements but it has to be retrieved slightly differently. For entitlement with type name "group" the content of the query-xml child node of the member-assignment-query node is expected to be extensions to the existing query defined in the entitlement XML like e.g. search-attr or read-attr nodes.

Example

<member-assignment-extensions>
	<query-attr name="query-type">entitlement-assignment</query-attr>
	<query-xml>
		<read-attr attr-name="member"/>
	</query-xml> 
</member-assignment-extensions>