Management of account defaults on a service type
We can define default values for account attributes either on a service or on a service type.
Enters of account defaults
- Service type account defaults
- When account defaults are defined at the service- type level, they apply to all services of that type. However, a service type default can be overridden by defining an account default at the service level We can define global account default values in one place, a service type. We do not need to define the same account default values for a service in multiple places. This single definition reduces the amount of customization and the chance of omissions or errors.
- Service account defaults
- These defaults are initially inherited from the service type account defaults, but they become local to the service as soon as it is being changed. They become local account defaults and can be changed or removed. Changes (including removals) do not affect the service type account defaults.
Options for defining default values for account attributes
- Basic
- Allows you to hard code default values. We can also build a rule to extract information from an attribute on any IBM Security Identity Manager person class object. We can use it to set the value for an account attribute.
- Advanced
- Allows you to code JavaScript to retrieve LDAP data from IBM Security Identity Manager objects and set the value for an account attribute. As a starting point, you can create a basic account default and then use the advanced option to edit the generated JavaScript.
- Add account defaults to a service type
- Change account defaults for a service type
- Remove account defaults from a service type
Parent topic: Service type management