Scaffoldings

Identity Manager provides a list of scaffoldings to act as configuration shortcuts: a scaffolding is an XML element that will generate a complex XML fragment.

Available scaffoldings are described below.

To understand scaffoldings' generated configuration, Identity Manager's executable Usercube-Export-Configuration can be launched with the --export-scaffolding option to export into XML files the configuration items generated by scaffoldings.

Remember that these exported files are meant for viewing and understanding purposes, not for using their content in your own configuration.

References

• Access Control Rules

• Access Reviews

• Access Review Administration Access Control Rules

  Generates the permissions to administrate campaign creation.

• Connectors

• Connector Resource Type Access Control

  Gives the rights to create and update resource types, generate provisioning orders and fulfill from the connector screen.

• Settings Access Control Rules

  Generates the permissions to configure the Workforce Core Solution module and connector settings.

• Jobs

• GetJobLogAdministrationAccessControlRules

  Generates the permissions to read task and job instances logs in UI for a given profile.

• JobAdministrationAccessControlRules

  Scaffolding to access the job administration page.

• JobTaskAdministrationAccessControlRules

  Generates all permissions for JobStep entity.

• PendingAssignedResourceTypesAccessControlRules

  Generates the access control rules which give to a profile the permissions to call the API Pending AssignedResourceTypes.

• ProvisioningAccessControlRules

  Generates the execution rights for Provisioning and Fulfillment tasks for a given profile.

• ResourceChangesViewAccessControlRules

  Generates the access control rules which gives to a profile the permissions to call the API ResourceChange, ResourceFileChange and ResourceLinkChange.

• ResourceTypeMappingControlRules

  Generate rights to launch agent fulfillment.

• RunJobAdministrationAccessControlRules

  Generates the permissions to launch jobs from UI for a given profile.

• RunJobNotificationAccessControlRules

  Generates access control to send notification when job finish with an error state.

• RunJobRepairAdministrationAccessControlRules

  Generates the permissions to launch from UI jobs that are in state blocked after a Provisioning or a synchronization for a given profile.

• RunJobRepairNotificationAccessControlRules

  Generates access control to send notification when a relaunch job finish with an error state.

• SynchronizationAccessControlRules

  Generates rights to launch synchronization task.

• TaskAdministrationAccessControlRules

  Generates all rights to have the access to job administration page.

• TaskInstanceAdministrationAccessControlRules

  Generates access control to update the task instances.

• WorkflowFulfillmentControlRules

  Generates the execution rights to launch Fulfillment workflow for a given profile.

• Monitoring

• MonitoringAdministrationAccessControlRules

  Generates the access control rule which gives to a profile the permission to query the monitoring screen.

• Profiles

• Assign Profile Access Control Rules

  Gives to a given profile the rights to create, update, delete and query any assigned profile.

• OpenId Client Administration Access Control Rules

• Profile Administration Access Control Rules

  Gives to a given profile the rights to create, update and delete profiles.

• Queries

• Manage Setting Access Control Rule

  Generates the access control rule which gives to a profile the permission to query, create, update and delete settings from the UM_Settings table.

• Report Access Control Rules

  Generates the permissions to access the report view.

• Target Resource Report Access Control Rules

  Generates the permissions to apply a report for a profile on a given entity.

• Universe Access Control Rules

  Generates an access control rule which gives a profile the permission to access the query page and run queries.

• Resources

• Create Resource Incremental Access Control Rules

  Generates the access control rule which gives to a profile the permission to query the resources modified incrementally.

• Resource Api Administration

  Generates the permissions to create/update/delete/query resources from a given entity type, for a given profile.

• Resource Picker Control Rules

  Creates the reading right of the resource picker.

• View Access Control Rules

  Generates the permissions to view an entity type's resources.

• View History Resource Template

  Generates an access control rule giving to the specified profile the permission to browse the resources history of the specified entity type.

• Role Models

• Basket Rules Control Rules

  Generates the permissions to execute the different requests to display the information in the rights basket.

• Bulk Perform Manual Provisioning Access Control Rules

  Generates the permissions to perform bulk validations on the **Perform Manual Provisioning** page.

• Bulk Resource Reconciliation Access Control Rules

  Generates the permissions to perform bulk validations on the **Resource Reconciliation** page.

• Bulk Review Provisioning Access Control Rules

  Generates the permissions to perform bulk validations on the **Provisioning Review** page (only for errored orders).

• Bulk Role Reconciliation Access Control Rules

  Generates the permissions to perform bulk validations on the **Role Reconciliation** page.

• Governance Roles Access Control Rules

  Generates the permissions to access the governance review pages for a given entity type and profile.

• Perform Manual Provisioning Access Control Rules

  Generates the permissions to access the manual provisioning pages for a given entity type and profile.

• Reconciliate Resources Access Control Rules

  Generates the permissions to access the resource reconciliation pages for a given entity type and profile.

• Reconciliate Roles Access Control Rules

  Generates the permissions to access the role reconciliation pages for a given entity type and profile.

• Redundant Assignment Access Control Rule

  Generates the permissions to access the **Redundant Assignment** page, to analyze and remove redundant assignments.

• Review Provisioning Access Control Rules

  Generates the permissions to access the provisioning review pages for a given entity type and profile.

• Review Roles Access Control Rules

  Generates the permissions to access the role review pages for a given entity type and profile.

• Risks Administration Access Control Rules

• Role Administration Access Control Rules

  Generates the permissions to access the configuration pages and create, update, delete the elements of the role model.

• Role Naming Access Control Rules

  Generates the permissions to configure and launch the automatic creation of roles and rules based on naming conventions.

• Simulations

• Policy Simulation Control Rules

• Role And Simulation Control Rules

• User Interfaces

• Manage Accounts

• Search Bar Page Access Control

  Gives access rights to the different navigation elements of the SearchBars of the pages of the role model.

• Workflows

• Create Update Delete Access Control Rules

  Generates execution rights for the create, update, delete workflows.

• Update Resources Access Control Rules

• Workflow Access Control Rules

  Generates the permissions to access the task page and visualize the workflows to be executed for a given entity type and profile.

• Workflow Configuration Control Rules

• Workflow Overview Control Rules

  Generates the permissions to access the workflow supervision page.

• Entity Types

• Entity Types

• Connector Mappings

  Generates the mapping of an entity in a given connector.

• Entity Type Display Name

  Computes a default value for resources' internal display names.

• Entity Type Display Table

  Creates a display table for the given entity.

• Entity Type Display Table Adaptable

  Creates an adaptable display table for a given entity type.

• Entity Type Display Target Resource Table

  Creates a display table for the given entity.

• Entity Type Menu Item

  Creates a menu item for the entity type, and for its connector if the entity type has an entity type mapping.

• Entity Type Search Bar

  Creates the search bar for the entity without criteria.

• Target Resource Report Menus

  Creates the Item menu for the entity's report so that it is displayed in the report view.

• Workflows

• Create Update Delete Workflows

  Creates updates and deletes menus for an entity.

• Update Resources Menus

• Update Resources Workflows

• Workflow Actors Notification

• Workflow Entity Type

  Creates an entity that will be the source of all workflows that manipulate the given entity.

• Workflow Entity Type Display Entity Type

• Workflow Entity Type Display Table

  Creates the display table of the workflow entity of the starting entity.

• Workflow Entity Type Search Bar

  Creates the search bar of the workflow entity of the starting entity.

• Workflow Performer Notification

• Jobs

• Clean Database Job

  Creates the job to clean old tasks and jobs instances with state InProgress.

• Create Access Certification Job

  Creates the AccessCertification Job.

• Create Agent Synchro Complete

  Creates for the given agent the synchronization job of all connectors present in the agent in Complete mode.

• Create Agent Synchro Incremental

  Creates for the given agent the synchronization job of all connectors present in the agent in incremental mode.

• Create Connectors Jobs

  Creates all jobs by connector to launched task in the connector page.

• Create Connector Synchro Complete

  Creates for the given connector the synchronization in complete mode.

• Create Connector Synchro Incremental

  Creates for the given connector the synchronization job in incremental mode.

• Create Initialization Job

  Creates the Initialization Job for the given agent.

• Optimizations

• Optimize Display Table

  Optimizes all elements found in the given displayTable.

• Queries

• Target Resource Report

  Creates a ReportQuery with default Query taking all the properties of the entity.

• Universe Data Model

  Creates, within a universe, entity instances and association instances based on a predefined template.

• Templates

• Connectors Access Control Rules

  Gives the permissions to manage the connector pages.

• Create Administrator Profile

  Creates the profile administrator and all default access control rules.

• Create Update Delete Template

  Creates the three types of workflow for the given entity as well as the execution rights for the given profile.

• Entity Report Default

  Creates all configuration items to add a ReportQuery for an EntityType and profile.

• Job Execution Access Control Rules

  Assigns a set of rights to a given profile to execute any job, and view all job instances, task instances and logs.

• Job View Access Control Rules

  Scaffolding to generate a set of rights to view all JobInstances, TaskInstances and logs.

• Simulation Access Control Rules

  Generates the permissions to configure and launch simulations.

• Update Resources Template

• View Source Resource Template

  Creates the display table, fills in the internal display name of the entity, and gives the rights to see the permissions and sources of the entity for a given profile.

• View Target Resource Template

  Creates the entity view (designElement = resourceTable), the report and the rights for a given profile.

• View Template

  Creates the view for the given entity as well as the rights for the given profile.

• View Template Adaptable

  Implements a default display name for the resources of a given entity type, displays the resources in an adaptable table, and give the permissions to view the resources.

• Workforce

• Bootstrap Module

  Generates the default settings required to start using Identity Manager and the Workforce Core Solution module.

• Workforce Module

  Generates the workforce repository based on the data filled in the Workforce Core Solution module.