Click Save. Click Add.

11-52 Oracle Fusion Middleware Developers Guide for Oracle Identity Manager Figure 11–33 Rule Designer Form There are four types of rules: General : Enables Oracle Identity Manager to add a user to a role automatically and to determine the password policy that is assigned to a resource object. Process Determination : Determines the provisioning processes for a for a resource object. Task Assignment : Specifies the user or role that is assigned to a process task. Prepopulate : Determines which prepopulate adapter is executed for a form field. A rule contains the following items: A rule element : Consists of an attribute, an operator, and a value. In Figure 11–33 , the attribute is User Login, the operator is ==, and the value is XELSYSADM. A nested rule : If one rule must be placed inside another rule for logic purposes, the internal rule is known as a nested rule. In Figure 11–33 , a Rule to Prevent Solaris Access is nested in a Rule for Solaris. An operation : When a rule contains multiple rule elements or nested rules, an operation shows the relationship among the components. In Figure 11–33 , if the AND operation is selected, the User Login==XELSYSADM rule element and the Rule to Prevent Solaris Access nested rule must both be true for the rule to be successful. Table 11–9 describes the fields of the Rule Designer form. Table 11–9 Fields of the Rule Designer Form Field Name Description Name The rules name. Developing Resource Objects 11-53

11.9.3.1 Creating a Rule

To create a rule: ANDOR These options specify the operation for the rule. To stipulate that a rule is successful only when all the outer rule elements and nested rules are true, select AND. To indicate that a rule is successful if any of its outer rule elements or nested rules are TRUE, select OR. Important : These options do not reflect the operations for rule elements that are contained within nested rules. In Figure 11–33 , the AND operation applies to the User Login == XELSYSADM rule element and the Rule to Prevent Solaris Access nested rule. However, this operation has no effect on the Object Name = Solaris rule element within the Rule to Prevent Solaris Access rule. Type The rules classification status. A rule can belong to one of four types: ■ General : Enables Oracle Identity Manager to add a user to a role automatically and determines the password policy that is assigned to a resource object. ■ Process Determination : Determines the provisioning processes for a resource object. ■ Task Assignment : Determines which user or role is assigned to a process task. ■ Prepopulate : Determines which prepopulate adapter is used for a form field. Sub-Type A rule of type Process Determination, Task Assignment, or Prepopulate can be categorized into one of four subtypes: ■ Organization Provisioning : Classifies the rule as a provisioning rule. Determines the organization for which a process is provisioned, a task is assigned, or the prepopulate adapter is applied. ■ User Provisioning : Classifies the rule as a provisioning rule. Determines the user for which a process is provisioned, a task is assigned, or a prepopulate adapter is applied. For Task Assignment or Prepopulate rule types, the approval and standard approval items are not displayed in the Sub-Type box. The Sub-Type box is grayed out for the General rule type. Object The resource object to which this rule is assigned. All Objects If selected, the rule can be assigned to all resource objects. Process The process to which this rule is assigned. All Processes If selected, the rule can be assigned to all processes. Description Explanatory information about the rule. Note: In the following procedure, note that the options do not apply to rule elements within nested rules. For example, in Figure 11–33 the AND operation applies to the User Login==XELSYSADM rule element and the Rule to Prevent Solaris Access nested rule. But this operation has no effect on the Object Name = Solaris rule element in the Rule to Prevent Solaris Access rule. Table 11–9 Cont. Fields of the Rule Designer Form Field Name Description