Initiates a request to the Roles Based Provisioning Module (RBPM) to assign the Resource specified in the Resource DN field to an Identity. The target Identity is specified in the Authorized User DN field. This action is only available if the Identity Manager server version is set to 4.0.2. If a policy containing this action encounters an error, Designer generates the error as the local variable error.do-add-resource.
Specify the name of the resource to assign, in LDAP format. Supports variable expansion..
Specify the URL of the User Application server hosting the Roles Based Provisioning module. Supports variable expansion.
Specify the name of the user authorized to request the resource assignment, in LDAP format. Supports variable expansion.
Specify the number of milliseconds you want Identity Manager to try to establish a connection to the User Application server before timing out. The default value is 0.
Specify the authorized user password. You can enter a clear text password (not recommended) or use the Argument Builder to specify a Named Password.
Select the target object type. This object can be the current object, or can be specified by a DN or an association.
(Optional) Specify additional argument strings for the Resource assignment request. You can enter the strings manually, or select the Edit the Strings icon. to open the Named String Builder and specify the strings.
The Add Resource action supports the following string argument:
String Name |
Description |
---|---|
description |
A description of the reason for the request used for auditing and (if necessary) approval purposes. Default: Request generated by policy. |
NOTE:You can specify parameter values for the added resources. You can use the plus sign (+) to insert a new string, or select the Edit the Strings icon. to open the String Builder and specify the strings.
You must specify the parameter names as param1, param2, and so on.
If you add a dynamic resource, you must specify the parameter name as EntitlementParaKey and provide the value of the parameter in JSON format (for Identity Manager 4.0 and later) or the legacy entitlement format (for earlier versions of Identity Manager).