Skip to main content

SingleRoleRule

A single role rule assigns a single role to users who match given criteria.

Examples

The following example declares a new rule to give the single role to all the "FCT0000" users.


<SingleRoleRule Role="DL-INTERNET-ALL" D1="FCT0000" Policy="Default" /> <SingleRoleRule Role="DL-INTERNET-ALL" D1="FCT0000" Type="Suggested" Policy="Default" />

Properties

PropertyDetails
CompositeRole optionalType Int64 Description Identifier of a composite role that users must have to trigger the rule.
D0 optionalType Int64 Description Value to match for the dimension D0 (up to D127) to trigger the rule. For example, considering that D0 corresponds to users' countries, then set D0 to France to assign the single role to users whose country is France.
IsDenied default value: falseType Boolean Description true to forbid the assignment instead of applying it.
L0 default value: falseType Boolean Description true to activate inheritance for D0 (up to 127).
Policy requiredType Int64 Description Identifier of the policy that the rule is part of.
Role requiredType Int64 Description Identifier of the single role to be assigned.
Type default value: 0Type RuleType Description Type of the rule. 0 - Required: the role is automatically assigned to users matching the criteria. 1 - RequestedAutomatically: the role is listed in the permission basket of new workers, these assignments can still be modified. For existing workers, the rule's type is Suggested. 2 - Suggested: the role is listed among suggested permissions in the permission basket of users matching the criteria during an entitlement request, suggested assignments must be selected manually to be requested.