The <actions> that are performed when <conditions> of the enclosing <rule> are met. All individual <actions> are represented by an element of the form <do-*>.
Most actions take arguments that further describe the action to be taken. Arguments that take a fixed string that never changes at runtime are represented by attributes on the action element. Arguments that can be re-evaluated at runtime are represented by child elements of the form <arg-*>. The content of most of these arguments consists of a set of tokens represented by elements of the form <token-*> (exceptions are noted on the documentation for the individual arguments). The individual tokens are expanded at runtime based on the rule evaluation context and the results of the expansion and are concatenated together to form the actual argument.
See <policy>.
Element |
Description |
---|---|
Associates the current object. |
|
Adds a value to an attribute in the destination data store. |
|
Adds an object in the destination data store. |
|
Adds a value to an attribute in the source data store. |
|
Adds an object in the source data store. |
|
Appends a custom XML element to existing elements. |
|
Appends custom XML text to existing elements. |
|
Stops processing the current operation with this policy. |
|
Clears all values of an attribute in the destination data store. |
|
Clears an operation property. |
|
Clears all values of an attribute in the source data store. |
|
Clears a credential in an SSO credential store. |
|
Applies all operations on an attribute in the current operation to a different attribute. |
|
Clones and appends a set of nodes to existing elements. |
|
Deletes an object in the destination data store. |
|
Deletes an object in the source data store. |
|
Automatically associates the current object. |
|
Repeats actions for each node in a node set. |
|
Generates a user-defined event. |
|
Conditionally perform actions. |
|
Implements an entitlement. |
|
Moves an object in the destination data store. |
|
Moves an object in the source data store. |
|
Changes the format of all values of a particular attribute in the current operation. |
|
Disassociates an application object. |
|
Removes a value from an attribute in the destination data store. |
|
Removes a value from an attribute in the source data store. |
|
Renames an object in the destination data store. |
|
Changes an attribute name for all operations on that attribute in the current operation. |
|
Renames an object in the source data store. |
|
Generates an e-mail notification. |
|
Generates an e-mail notification using SMTP configuration and e-mail template objects. |
|
Sets the default value for an attribute created in the destination data store |
|
Sets the value of an attribute in the destination data store. |
|
Sets the password for the current object in the destination data store. |
|
Sets the value of a local variable. |
|
Sets that association value for the current operation. |
|
Sets the object class name for the current operation. |
|
Sets the destination DN for the current operation. |
|
Sets an operation property. |
|
Sets the source DN for the current operation. |
|
Sets the template DN for the current add operation. |
|
Sets the value of an attribute in the source data store. |
|
Sets the password for the current object in the source data store. |
|
Sets a credential in an SSO credential store. |
|
Sets a passphrase in an SSO credential store. |
|
Sets custom XML attributes on existing elements. |
|
Starts a workflow. |
|
Reports status. |
|
Strips an attribute from the current operation. |
|
Strips arbitrary data from the current operation |
|
Sends a trace message. |
|
Vetoes the current operation. |
|
Vetoes the current operation if a particular attribute is not available in the operation. |
|
Repeat actions while a condition is true. |
None
( do-add-association | do-add-dest-attr-value | do-add-dest-object | do-add-src-attr-value | do-add-src-object | do-append-xml-element | do-append-xml-text | do-break | do-clear-dest-attr-value | do-clear-op-property | do-clear-src-attr-value | do-clear-sso-credential | do-clone-op-attr | do-clone-xpath | do-delete-dest-object | do-delete-src-object | do-find-matching-object | do-for-each | do-generate-event | do-if | do-implement-entitlement | do-move-dest-object | do-move-src-object | do-reformat-op-attr | do-remove-association | do-remove-dest-attr-value | do-remove-src-attr-value | do-rename-dest-object | do-rename-op-attr | do-rename-src-object | do-send-email | do-send-email-from-template | do-set-default-attr-value | do-set-dest-attr-value | do-set-dest-password | do-set-local-variable | do-set-op-association | do-set-op-class-name | do-set-op-dest-dn | do-set-op-property | do-set-op-src-dn | do-set-op-template-dn | do-set-src-attr-value | do-set-src-password | do-set-sso-credential | do-set-sso-passphrase | do-set-xml-attr | do-start-workflow | do-status | do-strip-op-attr | do-strip-xpath | do-trace-message | do-veto | do-veto-if-op-attr-not-available | do-while ) *
Element |
Description |
---|---|
Rule within a policy. |