Policy Builder Tasks

This section contains instructions on performing common tasks in Policy Builder:


Opening Policy Builder

  1. In iManager, expand the DirXML® Management Role, then click Overview.

  2. Specify a driver set.

  3. Click the driver for which you want to manage policies. The DirXML Driver Overview opens:


    DirXML Driver Overview

  4. Policies are managed from the DirXML Driver Overview.


Creating a Policy

  1. Open the DirXML Driver Overview for the driver you want to manage.

  2. Click the icon representing the policy you want to define.

    Undefined policy icon represents an undefined policy.

    Defined policy icon represents a defined policy.

  3. Click Insert.

  4. Enter a name for the new policy, then select Policy Builder.

  5. The policy is displayed. To define one or more rules for this policy, click Append New Rule, then follow the instructions in Defining Individual Rules within a Policy.


Defining Individual Rules within a Policy

Rules are defined in the Rule Builder window of Policy Builder:


Rule Builder window of Policy Builder.

The Rule Builder interface enables you to quickly create and modify rules using intelligent drop-down menus.

In Rule Builder, you define a set of conditions that must be met before a defined action occurs.

For example, if you needed to create a rule that disallowed any new objects from being added to your environment, you might define this rule similar to the following: When an add operation occurs, veto the operation.

To implement this logic in Rule Builder, you could select the following condition:


Move user condition in the Rule Builder interface.

And the following action:


Veto action in the Rule Builder interface.

See Conditions and Actions or a detailed reference on the conditions and actions available in the Rule Builder.


Tips

To create more complex conditions, you can join conditions and groups of conditions together with and/or statements. You can modify the way these are joined by selecting the condition structure:


Condition Structure radio buttons

Click the Object selector icon icon to see a list of values for a field. In the example above, this icon opens a list of valid class names.

Click the Launch argument builder icon icon to use the Argument Builder interface to construct an argument.

Click the disable policy icon icon to disable a policy, rule, condition, or action. Click the enable policy icon icon to re-enable it.

Click the comment icon icon to add a comment to a policy or rule. Comments are stored directly on the policy or rule, and can be as long as necessary.

Use the Cut/Copy/Paste icons, cut/copy/paste icons, to use the Policy Builder clipboard. The Paste icon is disabled if the current content on the clipboard is invalid at that location.

Use the add, remove, and place if condtions icons icons to add, remove, and position conditions.

Use the add condtion group button button add condition groups.

Use the add, remove, and place if condtion groups icons icons to remove, and position condition groups.


Defining Individual Arguments within a Rule

Argument Builder provides a dynamic, graphical interface which enables you to construct complex argument expressions for use within Rule Builder:


Default Argument Builder interface.

To define an expression, select one or more nouns (values, objects, variables, etc.), and combine them with verbs (substring, escape, upper and lower case) to construct arguments.

Multiple nouns, verbs, and expressions are combined to construct complex arguments.

For example, if you would like the argument set to an attribute value, you simply select the attribute noun, and enter or select the attribute name:


Editor displaying ds.novell as a text argument.

If you only want a portion of this attribute, you can combine the attribute noun with the substring verb:


Expression displaying a substring of length 1 on the given name attribute, combined with the surname attribute.

See Nouns and Verbs for a detailed reference on the nouns and verbs available in the Argument Builder.


Tips

To create more complex conditions, you can join conditions or groups of conditions together with and/or statements.

Use the Object selector icon icons to move and delete nouns and verbs.

Click the Object selector icon icon to see a list of values for a field.

After you add a noun or verb, you can provide values in the editor then immediately add another noun or verb. You do not need to refresh the Expression pane to apply your changes, they appear when the next operation is performed.

Although you define most arguments using this standard interface, there are a few other custom Argument Builder windows used to provide information in certain circumstances. Several of these windows launch the default Argument Builder to provide values.

The following sections contain an explanation of these additional Argument Builder interfaces and the conditions and actions which use them:


Matching Attribute Builder

The Matching Attribute Builder is used to construct conditions to satisfy a Find Matching Object action.


Match Attributes Builder


Argument Actions Builder

The Argument Actions Builder is used to construct a list of actions to take in actions such as For Each.


Argument Actions Builder


Named String Builder

The Named String Builder is used to create name/value pairs for use in Actions such as Generate Event and Send Email.


Named String Builder


Argument Value List Builder

The Argument Value List Builder is used to create arguments for actions such as Set Default Attribute Value. In this example, a string argument with the value unknown has been created to set the default location.


Argument Value List Builder


Modifying a Policy

  1. Open the DirXML Driver Overview for the driver you want to manage.

  2. Click the icon representing the policy you want to modify.

  3. Select the policy you want to modify, then click Edit.


Deleting a Policy

  1. Open the DirXML Driver Overview for the driver you want to manage.

  2. Click the icon representing the policy you want to delete.

  3. Select the policy you want to delete, then click Remove.


Importing a Policy from an XML File

  1. Open the DirXML Driver Overview for the driver you want to manage.

  2. Click the icon representing the policy you want to delete.

  3. Edit an existing policy, or create a new policy.

  4. Click the Insert button, and select Import an XML file containing DirXML Script.

  5. Browse to the policy file to import, then click OK.


Exporting a Policy to an XML File

  1. Open the DirXML Driver Overview for the driver you want to manage.

  2. Click the icon representing the policy you want to delete.

  3. Edit an existing policy, or create a new policy.

  4. Click the Save As button, then select a location to save the DirXML Script XML file.


Creating a Policy Reference

A policy reference enables you to create a single policy, and reference it in multiple locations. If you have a policy that is used by more than one driver or policy, creating a reference simplifies management of this policy.

  1. Open the DirXML Driver Overview for the driver you want to manage.

  2. Click the icon representing the policy you want to delete.

  3. Edit an existing policy, or create a new policy.

  4. Click the insert button, and select Append a reference to a policy containing DirXML Script.

  5. Browse to the policy object to reference, then click OK.