Remove Role - Novell POLICY IN DESIGNER 3.5 - 09-18-2009 Manual

Remove Role

Initiates a request to the Roles Based Provisioning Module (RBPM) to revoke the specified role (in
the Role DN field) from the specified user (in the Authorized User DN field). This field is only
available if the Identity Manager server version is set to 3.6 or later.
Fields
Role DN
Specify the name of the role to revoke, in LDAP format. Supports variable expansion. For
more information, see
User Application URL
Specify the URL of the User Application server hosting the Roles Based Provisioning module.
Supports variable expansion. For more information, see
page 35.
Authorized User DN
Specify the name of the user authorized to request the role assignment, in LDAP format.
Supports variable expansion. For more information, see
page 35.
Password
Specify the authorized user password. You can enter a clear text password (not recommended)
or use the Argument Builder to specify a Named Password.
Object
Select the target object type. This object can be the current object, or can be specified by a DN
or an association.
DN or Association
Select the DN or association as the target object.
Strings
(Optional) Specify additional argument strings for the Role assignment request. You can enter
the strings manually, or select the Edit the Strings icon
and specify the strings. For more information about the Named String Builder, see
"Named String Builder," on page
The Remove Role action supports the following string arguments:
String Name
description
effective-time
274 Policies in Designer 3.5
Section 3.6, "Variable Selector," on page
58.
Description
A description of the reason for the request used for auditing and (if
necessary) approval purposes.
Default: Request generated by policy.
The time (in CTIME format) the role assignment should become effective.
Default: now
35.
Section 3.6, "Variable Selector," on
Section 3.6, "Variable Selector," on
to open the Named String Builder
Section 4.9,