Troubleshooting Role-Based Entitlements
33
no
vd
ocx
(e
n)
17
Sep
te
m
be
r 20
09
This functionality is useful if, for example, you configure your environment to use Role-
Based Entitlements to place users in a hierarchical structure on another system. You
would want the user to be placed in either one place or another, not in two places at the
same time.
Keep in mind that the setting is independent for each entitlement offered by each driver.
As a general rule, if you use the “priority” setting, you should place administrator or
manager policies higher in the list than policies for end users or individual contributors.
You should put groups with narrower membership higher than groups with broader
membership.
8.2.2 Changing the Conflict Resolution Method for an
Individual Entitlement
1
In iManager, click
Identity Manager > Identity Manager Overview
, then select a driver set.
2
Click the Driver status button, then select
Stop driver.
3
Click the driver icon for the driver that offers the entitlement you want to change.
4
On the Driver Overview page, click the
Advanced
tab, then click
Entitlements
.
5
Click the entitlement name to edit the entitlement in the XML viewer.
6
Select the check box for
Enable XML editing
.
7
In the XML, find the definition of the entitlement you want to change.
Here’s an example of the line you should look for:
<entitlement conflict-resolution="union" description="Grants membership to
GroupWise Distribution lists" display-name="GroupWise Distribution Lists"
name="gwDistLists">
8
Change the
conflict-resolution
value. The two possible values are the following:
conflict-resolution="union"
conflict-resolution="priority"
For information about these values, see
“Conflict Resolution between Entitlement Policies” on
page 31
.
9
Click
OK
to save the changes.
10
Click the
Overview
tab to access the driver icon.
