deleteResource listResources Managing Application Policies with OPSS Scripts

Managing the Policy Store 9-27 The meaning of the arguments is as follows: ■ appStripe specifies the application stripe from where to list entitlements. ■ resourceTypeName specifies the name of the type of the resources to list. Optional. ■ resourceName specifies the name of resource to match. Optional. Examples of Use The following invocation lists all the entitlements in the stripe myApplication: listEntitlements -appStripe myApplication The following invocation lists all the entitlements in the stripe myApplication that contain a resource type myResType and a resource whose name match the resource name myResName: listEntitlements -appStripe myApplication -resourceTypeName myResType -resourceName myResName

9.3.25 grantEntitlement

The script grantEntitlement creates a new entitlement with a specified principal in a specified application stripe. Script Mode Syntax grantEntitlement -appStripe appStripeName -principalClass principalClass -principalName principalName -permSetName entName Interactive Mode Syntax grantEntitlementappStripe=appStripeName, principalClass=principalClass, principalName=principalName ,-permSetName=entName The meaning of the arguments is as follows: ■ appStripe specifies the application stripe where the entitlement is created. ■ principalClass specifies the class associated with the principal. ■ principalName specifies the name of the principal to which the entitlement is granted. ■ permSetName specifies the name of the entitlement created. Example of Use The following invocation creates the entitlement myEntitlement in the stripe myApplication: grantEntitlement -appStripe myApplication -principalClass oracle.security.jps.service.policystore.ApplicationRole -principalName myPrincipalName -permSetName myEntitlement 9-28 Oracle Fusion Middleware Application Security Guide

9.3.26 revokeEntitlement

The script revokeEntitlement deletes an entitlement and revokes the entitlement from the principal in a specified application stripe. Script Mode Syntax revokeEntitlement -appStripe appStripeName -principalClass principalClass -principalName principalName -permSetName entName Interactive Mode Syntax revokeEntitlementappStripe=appStripeName, principalClass=principalClass, principalName=principalName ,-permSetName=entName The meaning of the arguments is as follows: ■ appStripe specifies the application stripe where the entitlement is deleted. ■ principalClass specifies the class associated with the principal. ■ principalName specifies the name of the principal to which the entitlement is revoked. ■ permSetName specifies the name of the entitlement deleted. Example of Use The following invocation deletes the entitlement myEntitlement in the stripe myApplication: revokeEntitlement -appStripe myApplication -principalClass oracle.security.jps.service.policystore.ApplicationRole -principalName myPrincipalName -permSetName myEntitlement

9.3.27 listEntitlement

The script listEntitlement lists an entitlement in a specified application stripe. If a principal name and a class are specified, it lists the entitlements that match the specified principal; otherwise, it lists all the entitlements. Script Mode Syntax listEntitlement -appStripe appStripeName [-principalName principalName -principalClass principalClass] Interactive Mode Syntax listEntitlementappStripe=appStripeName [, principalName=principalName, principalClass=principalClass] The meaning of the arguments is as follows: ■ appStripe specifies the application stripe where the entitlement is located. ■ principalName specifies the name of the principal to match. Optional. ■ principalClass specifies the class of the principal to match. Optional.