Click Save. Managing Resources By Using the Design Console

Developing Resource Objects 11-53

11.9.3.1 Creating a Rule

To create a rule: ANDOR These options specify the operation for the rule. To stipulate that a rule is successful only when all the outer rule elements and nested rules are true, select AND. To indicate that a rule is successful if any of its outer rule elements or nested rules are TRUE, select OR. Important : These options do not reflect the operations for rule elements that are contained within nested rules. In Figure 11–33 , the AND operation applies to the User Login == XELSYSADM rule element and the Rule to Prevent Solaris Access nested rule. However, this operation has no effect on the Object Name = Solaris rule element within the Rule to Prevent Solaris Access rule. Type The rules classification status. A rule can belong to one of four types: ■ General : Enables Oracle Identity Manager to add a user to a role automatically and determines the password policy that is assigned to a resource object. ■ Process Determination : Determines the provisioning processes for a resource object. ■ Task Assignment : Determines which user or role is assigned to a process task. ■ Prepopulate : Determines which prepopulate adapter is used for a form field. Sub-Type A rule of type Process Determination, Task Assignment, or Prepopulate can be categorized into one of four subtypes: ■ Organization Provisioning : Classifies the rule as a provisioning rule. Determines the organization for which a process is provisioned, a task is assigned, or the prepopulate adapter is applied. ■ User Provisioning : Classifies the rule as a provisioning rule. Determines the user for which a process is provisioned, a task is assigned, or a prepopulate adapter is applied. For Task Assignment or Prepopulate rule types, the approval and standard approval items are not displayed in the Sub-Type box. The Sub-Type box is grayed out for the General rule type. Object The resource object to which this rule is assigned. All Objects If selected, the rule can be assigned to all resource objects. Process The process to which this rule is assigned. All Processes If selected, the rule can be assigned to all processes. Description Explanatory information about the rule. Note: In the following procedure, note that the options do not apply to rule elements within nested rules. For example, in Figure 11–33 the AND operation applies to the User Login==XELSYSADM rule element and the Rule to Prevent Solaris Access nested rule. But this operation has no effect on the Object Name = Solaris rule element in the Rule to Prevent Solaris Access rule. Table 11–9 Cont. Fields of the Rule Designer Form Field Name Description