# 8. Policy Builder: What's New

(Home) Previous Next

## 1. Ability to Specify Old Password

You can now specify the old password in the <do-set-src-password> and <do-set-dest-password> actions. This is an optional arg-string that allows you to build up the old password using Argument Builder just like you do with the new password.

## 2. Default Value for the <token-map> Token

The <token-map> token now has support for a default value. If the value built from the tokens enclosed by <token-map> isn't found in the source column, the default value is used when it is processed.

## 3. Added Offset to the <token-convert-time> Token

The <token-convert-time> token now has support for an offset value. This optional value can be either negative or positive, and will add the specified number to the time built up from the enclosed tokens. The offset can be specified in seconds, minutes, hours, days, weeks, months, or years. The default is days.

## 4. Tooltips Added to Time Format Fields

The <token-convert-time> and <token-time> tokens now have tooltips that give examples of the different fomats that you can choose from.

## 5. Tokens From E-mail Template Now Included In String Builder

The <do-send-email-from-template> action now includes the tokens from the e-mail template in the string builder. If you choose an e-mail template in the Specify template DN entry before going in to the Specify strings: string builder, the name combo box in the Named String Builder page is populated with the tokens from the e-mail template that you specified.

## 6. Token Generate Password Doesn't Require DN

The <token-generate-password> token no longer requires that you specify a password policy DN. If policy-dn is not specified, the effective password policy of the current object in eDirectory is used. If the current object does not yet exist in eDirectory (e.g., the target of an add operation on the Publisher channel), the effective password policy of the target container is used.

## 7. Variable Browser for Variable Expansion

All places that allow variable expansion now have a button that launches a variable browser. This browser has two tabs that display the LCV's and GCV's. When you chose a variable, dollar signs ($'s) are added to the beginning and end of the variable and it is appended to the current field.

## 8. Do-Add-Role

There is a new action added for Identity Manager 3.6 that is called <do-add-role>. This action initiates a request to the Roles-Based Provisioning Module (RBPM) in order to assign the specified role (in the Role DN field) to the specified user (in the Authorized User DN field).

## 9. Do-Remove-Role

There is also a new action added for Identity Manager 3.6 that is called <do-remove-role>. This action initiates a request to the Roles-Based Provisioning Module (RBPM) in order to revoke the specified role (in the Role DN field) from the specified user (in the Authorized User DN field).

(Home) Previous Next