12. Role-Based Entitlements: What's New
(Home) Previous
Entitlement Policies
Role-Based Entitlement Policies let you grant entitlements on connected systems to a group of Novell eDirectory users.
Through Entitlement policies, you can streamline management of business policies and reduce the need to configure
your Identity Manager drivers.
An Entitlement policy is an eDirectory dynamic group object with additional
features added to let you grant entitlements on connected systems. When you create an Entitlement policy,
you define the membership for the policy and the entitlements that should be granted to the members of the Entitlement policy.
The list of Entitlement policies indicates priority.
The Entitlements Service driver implements entitlements through the use of entitlement policies.
The Role-based entitlement editor in Designer allows to create entitlement policies and associate the entitlements and the members for each policy.
The Role-based entitlement policies can be created by Right click on DriverSet in the outline view > New > Role-based Entitlement Policies
The Role-based entitlement policies editor has the following pages :
General:
Describes the entitlement policy.
Entitlements:
The list of entitlements associated with the policy. Users assigned to the policy
receive all of the entitlements associated with the policy. If the user is removed from the policy,
he or she loses all entitlements associated with the policy.
Membership:
The list of users assigned to the policy. A user can be dynamically assigned to
the policy when he or she meets the criteria for the policy, or the user can be statically
(manually) assigned to the policy.
Static membership lets you include users who don't meet the dynamic membership criteria or
exclude users who meet the criteria but should not be members of the policy.
Dynamic membership lets you define which users should be members of the entitlement policy
by specifying criteria and specifying where in the tree to search for users that meet the criteria.
