Define Static Values or JavaScript/Regular Expression - Access Control
Use this page to create or modify the parameters for account attributes. Some values are dynamic and vary, depending on the attribute that we choose. The following fields are common for all attributes.
- Parameter type
- To specify policy parameters, select a parameter type and then
complete the fields that the parameter type requires.
- Constant value
- Specifies a IBM Security Identity Manager constant related to the entitlement.
- JavaScript
- Specifies a JavaScript expression that defines the entitlement attributes.
- Regular Expression
- Specifies information about the attributes for a specific service type, which vary for each service. An attribute that we do not specify has a null value.
- Null
- Specifies a null parameter.
- Enforcement type
- Specify how the policy enforces the account attribute value during provisioning.
- Default
- Specifies the default value for the account attribute. Attributes with multiple values have multiple default values.
- Mandatory
- Specifies a required value for the account attribute. Attributes with multiple values have multiple default values.
- Allowed
- Specifies one or more values that are permitted for the account attribute. This field applies only to attributes with multiple values.
- Excluded
- Specifies one or more values that are not permitted for the account attribute, unless the value has been granted by another entitlement. This field applies only to attributes with multiple values.
Parent topic: Administration console
