Novell Doc: Identity Manager 3.5.1 DTD Reference

Remarks

Most actions take arguments that further describe the action to be taken. Arguments that take a fixed string that never changes at runtime are represented by attributes on the action element. Arguments that can be re-evaluated at runtime are represented by child elements of the form <arg-*>. The content of most of these arguments consists of a set of tokens represented by elements of the form <token-*> (exceptions are noted on the documentation for the individual arguments). The individual tokens are expanded at runtime based on the rule evaluation context and the results of the expansion and are concatenated together to form the actual argument.

Example

See <policy>.

Allowed Content

Element	Description
do-add-association	Associates the current object.
do-add-dest-attr-value	Adds a value to an attribute in the destination data store.
do-add-dest-object	Adds an object in the destination data store.
do-add-src-attr-value	Adds a value to an attribute in the source data store.
do-add-src-object	Adds an object in the source data store.
do-append-xml-element	Appends a custom XML element to existing elements.
do-append-xml-text	Appends custom XML text to existing elements.
do-break	Stops processing the current operation with this policy.
do-clear-dest-attr-value	Clears all values of an attribute in the destination data store.
do-clear-op-property	Clears an operation property.
do-clear-src-attr-value	Clears all values of an attribute in the source data store.
do-clear-sso-credential	Clears a credential in an SSO credential store.
do-clone-op-attr	Applies all operations on an attribute in the current operation to a different attribute.
do-clone-xpath	Clones and appends a set of nodes to existing elements.
do-delete-dest-object	Deletes an object in the destination data store.
do-delete-src-object	Deletes an object in the source data store.
do-find-matching-object	Automatically associates the current object.
do-for-each	Repeats actions for each node in a node set.
do-generate-event	Generates a user-defined event.
do-if	Conditionally perform actions.
do-implement-entitlement	Implements an entitlement.
do-move-dest-object	Moves an object in the destination data store.
do-move-src-object	Moves an object in the source data store.
do-reformat-op-attr	Changes the format of all values of a particular attribute in the current operation.
do-remove-association	Disassociates an application object.
do-remove-dest-attr-value	Removes a value from an attribute in the destination data store.
do-remove-src-attr-value	Removes a value from an attribute in the source data store.
do-rename-dest-object	Renames an object in the destination data store.
do-rename-op-attr	Changes an attribute name for all operations on that attribute in the current operation.
do-rename-src-object	Renames an object in the source data store.
do-send-email	Generates an e-mail notification.
do-send-email-from-template	Generates an e-mail notification using SMTP configuration and e-mail template objects.
do-set-default-attr-value	Sets the default value for an attribute created in the destination data store
do-set-dest-attr-value	Sets the value of an attribute in the destination data store.
do-set-dest-password	Sets the password for the current object in the destination data store.
do-set-local-variable	Sets the value of a local variable.
do-set-op-association	Sets that association value for the current operation.
do-set-op-class-name	Sets the object class name for the current operation.
do-set-op-dest-dn	Sets the destination DN for the current operation.
do-set-op-property	Sets an operation property.
do-set-op-src-dn	Sets the source DN for the current operation.
do-set-op-template-dn	Sets the template DN for the current add operation.
do-set-src-attr-value	Sets the value of an attribute in the source data store.
do-set-src-password	Sets the password for the current object in the source data store.
do-set-sso-credential	Sets a credential in an SSO credential store.
do-set-sso-passphrase	Sets a passphrase in an SSO credential store.
do-set-xml-attr	Sets custom XML attributes on existing elements.
do-start-workflow	Starts a workflow.
do-status	Reports status.
do-strip-op-attr	Strips an attribute from the current operation.
do-strip-xpath	Strips arbitrary data from the current operation
do-trace-message	Sends a trace message.
do-veto	Vetoes the current operation.
do-veto-if-op-attr-not-available	Vetoes the current operation if a particular attribute is not available in the operation.
do-while	Repeat actions while a condition is true.

Attributes

None

Content Rule

Parent Elements

Element	Description
rule	Rule within a policy.