Add Role - Novell POLICY IN DESIGNER 3.5 - 09-18-2009 Manual

Add Role

Initiates a request to the Roles Based Provisioning Module (RBPM) to assign the specified role (in
the Role DN field) to the specified user (in the Authorized User DN field). This field is only
available if the Identity Manager server version is set to 3.6 or later.
Fields
Role DN
Specify the name of the role to assign, in LDAP format. Supports variable expansion. For more
information, see
User Application URL
Specify the URL of the User Application server hosting the Roles Based Provisioning module.
Supports variable expansion. For more information, see
page 35.
Authorized User DN
Specify the name of the user authorized to request the role assignment, in LDAP format.
Supports variable expansion. For more information, see
page 35.
Password
Specify the authorized user password. You can enter a clear text password (not recommended)
or use the Argument Builder to specify a Named Password.
Object
Select the target object type. This object can be the current object, or can be specified by a DN
or an association.
Strings
(Optional) Specify additional argument strings for the Role assignment request. You can enter
the strings manually, or select the Edit the Strings icon
and specify the strings. For more information about the Named String Builder, see
"Named String Builder," on page
The Add Role action supports the following string arguments:
String Name
description
effective-time
expiration-time
240 Policies in Designer 3.5
Section 3.6, "Variable Selector," on page
58.
Description
A description of the reason for the request used for auditing and (if
necessary) approval purposes.
Default: Request generated by policy.
The time (in CTIME format) the role assignment should become effective.
Default: now
The time (in CTIME format) the role assignment automatically expires.
Default: never
35.
Section 3.6, "Variable Selector," on
Section 3.6, "Variable Selector," on
to open the Named String Builder
Section 4.9,