After user information is retrieved from the directory server, it is matched against a configured set of criteria and the user is then assigned to a specific role.
Pre-defined roles contain details of attributes with corresponding values to be used as match-criteria and the policies that need to be applied for that role. The administrator will be provided with a set of CLI commands to map association between role, match-criteria, and policies.
Employee/User ID
Title
Department
Company
City
State
Country
Email ID
Using CLI, various roles can be created with corresponding match criteria specified in attributes and values.
When a policy is added to a role, the newly added policy will be applied to both existing users mapped to that role as well as new users who get mapped to this role in the future.
Beginning in release 15.2, a child role can inherit the match criteria of the parent role. The match criteria now does not need to be duplicated in all levels of the hierarchy.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB