Creating Entitlements
21
no
vd
ocx
(e
n)
13
Ma
y 20
09
For example, you might only want to use an entitlement one time to assign a building location
to a user. However, because a user could belong to multiple groups, you might want an
entitlement that assigns a user to a group to be able to be used multiple times to assign the user
to multiple groups.
4
You are asked if this entitlement is intended to be used by Role-Based Entitlement policies
through iManager. If you want this entitlement to be granted or revoked automatically, select
Yes
to the Role-Based Entitlements question, click
Next
, then continue with
Step 5
.
or
If you want the granting or revoking of this entitlement to be a manual process (approved by
someone), select
No
to use the User Application, then skip to
Step 6
.
5
(Conditional) If you select
Yes
to the Role-Based Entitlements question, you are asked if you
want to use the Role-Based Entitlements priority to resolve any conflicts that might happen
when this entitlement is assigned by different Role-Based Entitlement Policies with different
values. You can resolve the conflict by either using the Role-Based Entitlements priority, or by
merging the values. This example uses priority.
Merging the values merges the entitlements of all involved Role-Based Entitlement policies, so
if one policy revokes an entitlement but another policy grants an entitlement, the entitlement is
eventually granted. Solving conflicts by priority works if you need to ensure that only one
policy is applied to this entitlement at any time.
6
Click
Finish
.
7
If you see the Add To Filter window, answer
Yes
if you want the driver to listen for this
entitlement. This enables entitlements for the driver. The DirXML-EntitlementRef attribute
allows the driver filter to listen for entitlement activities, which is necessary in order to use the
entitlements you are creating.
or
If you don’t want to see the Add To Filter window on entitlements you are creating for any
driver in Designer, select
Remember Selection - Don’t Prompt Again
, then click
OK
. However,
after the attribute is added to this driver filter, you won’t see the Add To Filter window again.
Before you can edit this entitlement, you are asked to save the editor’s changes before continuing.
Once the editor is saved, the entitlement displays in the Modeler view.
4.2.3 Valued Entitlement that Queries an External Application
1
Make sure you’ve completed
Step 1
through
Step 5 on page 18
. The following steps start where
those steps ended.
2
On the Define Application Query page, fill in the fields to define the query and map the query
results.
Summary of Contents for IDENTITY MANAGER 3.6.1 - ENTITLEMENTS
Page 4: ...4 Identity Manager 3 6 1 Entitlements Guide novdocx en 13 May 2009...
Page 6: ...6 Identity Manager 3 6 1 Entitlements Guide novdocx en 13 May 2009...
Page 8: ...8 Identity Manager 3 6 1 Entitlements Guide novdocx en 13 May 2009...
Page 12: ...12 Identity Manager 3 6 1 Entitlements Guide novdocx en 13 May 2009...
Page 26: ...26 Identity Manager 3 6 1 Entitlements Guide novdocx en 13 May 2009...
Page 44: ...44 Identity Manager 3 6 1 Entitlements Guide novdocx en 13 May 2009...
