If Entitlement

Performs a test on entitlements of the current object, in either the current operation or the Identity Vault. The test performed depends on the specified operator.

Fields

Name

Specify the name of the entitlement to test for the selected condition.

Operator

Select the condition test type.

Operator

Returns True when...

Available

The named entitlement is available in either the current operation or the Identity Vault.

Not available

Available would return False.

Equal

There is a value available for the specified attribute in the destination data store that equals the specified value when compared using the specified comparison mode.

Not Equal

Equal would return False.

Greater Than

The named entitlement is available and granted in either the current operation or the Identity Vault and has a value that is greater than the content of the condition when compared using the specified comparison mode.

Not Greater Than

Greater Than or Equal would return False.

Less Than

The named entitlement is available and granted in either the current operation or the Identity Vault and has a value that is less than the content of the condition when compared using the specified comparison mode.

Not Less Than

Less Than or Equal would return False.

Changing

The current operation contains a change (modify attribute or add attribute) of the named entitlement.

Not Changing

Changing would return False.

Changing From

The current operation contains a change that removes a value (remove value) of the named entitlement, which has a value that equals the specified value, when compared using the specified comparison mode.

Not Changing From

Changing From would return False.

Changing To

The current operation contains a change that adds a value (add value or add attribute) to the named entitlement. It has a value that equals the specified value, when compared using the specified comparison mode.

Not Changing To

Changing To would return False.

Value

Contains the value defined for the selected operator. The value is used by the condition. Each value supports variable expansion. For more information, see Variable Expansion. The operators that contain the value field are:

  • Equal

  • Not Equal

  • Changing To

  • Changing From

  • Not Changing To

  • Not Changing From

  • Greater Than

  • Not Greater Than

  • Less Than

  • Not Less Than

Comparison Mode

Some condition tests have a mode parameter that indicates how the comparison is done.

Mode

Description

Case Sensitive

Character-by-character case sensitive comparison.

Case Insensitive

Character-by-character case insensitive comparison.

Regular Expression

The regular expression matches the entire string. It defaults to case insensitive, but can be changed by an escape in the expression.

See Sun’s Web site.

The pattern options CASE_INSENSITIVE, DOTALL, and UNICODE_CASE are used but can be reversed using the appropriate embedded escapes.

Source DN

Compares using semantics appropriate to the DN format for the source data store.

Destination DN

Compares using semantics appropriate to the DN format for the destination data store.

Numeric

Compares numerically.

Binary

Compares the binary information.

The operators that contain the comparison mode parameter are:

  • Equal

  • Not Equal

  • Changing To

  • Changing From

  • Not Changing To

  • Not Changing From

  • Greater Than

  • Not Greater Than

  • Less Than

  • Not Less Than

Example

Entitlement