Skip to main content

CompositeRoleRule

A composite role rule assigns a composite role to users who match given criteria.

Examples

The following example declares a new rule to give the composite role "HR_Accounting" to all the "FCT0008" users.


<CompositeRoleRule Role="HR_Accounting" D1="FCT0008" Policy="Default" /> <CompositeRoleRule Role="HR_Accounting" D1="FCT0008" Type="Suggested" Policy="Default" />

Properties

PropertyDetails
D0 optionalType Int64 Description Value to match for the dimension D0 (up to D127) to trigger the rule. For example, considering that D0 corresponds to users' countries, then set D0 to France to assign the composite role to users whose country is France.
IsDenied default value: falseType Boolean Description true to forbid the assignment instead of applying it.
L0 default value: falseType Boolean Description true to activate inheritance for D0 (up to 127).
ParentRole optionalType Int64 Description Identifier of a composite role that users must have to trigger the rule.
Policy requiredType Int64 Description Identifier of the policy that the rule is part of.
Role requiredType Int64 Description Identifier of the composite role to be assigned.
Type default value: 0Type RuleType Description Type of the rule. 0 - Required: the role is automatically assigned to users matching the criteria. 1 - RequestedAutomatically: the role is listed in the permission basket of new workers, these assignments can still be modified. For existing workers, the rule's type is Suggested. 2 - Suggested: the role is listed among suggested permissions in the permission basket of users matching the criteria during an entitlement request, suggested assignments must be selected manually to be requested.