Novell IDENTITY MANAGER 3.6.1 - ENTITLEMENTS, Manual

Page: 28 / 44

28 Identity Manager 3.6.1 Entitlements Guide
no
vd
ocx
(e
n)
13
Ma
y 20
09
account in Active Directory if the user is not entitled to an account in Active Directory. Modify
or remove this rule if you want the entitlement policy to apply to matching accounts in Active
Directory. This might result in the Active Directory account being deleted or disabled.
Š
Creation (Subscriber channel): The Creation policy contains the following rules pertaining
to entitlements:
Š Account Entitlement: Block Account Creation When Entitlement Not Granted. When you
use the User Account entitlement with the Identity Manager User Application or Role
Based Entitlements, accounts are created only for users that are specifically granted the
account entitlement. This rule vetoes user account creation when the entitlement is not
granted.
Š
Identity Vault Accounts Are Enabled if Login Disabled Does Not Exist.
Š Prepare To Check Group Entitlements After Add. Group entitlements are processed after
the add completes, because the added object needs to exist in order to be added to a group.
The add is flagged with an operational property that is checked in the input transform
when the add processing completes.
Š
Signal the Need To Check Exchange Entitlements After the Add.
Š
Map User Name to Windows Logon Name. When userPrincipalName is configured to
follow the eDirectory
TM
user name, set userPrincipalName to the eDirectory object name
plus the name of the Active Directory domain.