Join directives examples
This topic provides examples that show how to use provisioning policy join directives.. The following example examines conflict resolution with policy priority, which is a default join directive for single-valued attributes. The erMaxStorage attribute on a Windows server is used to give a user limited storage space on the server.
- Policy 1
- Membership
- Managers
- Priority
- 1
- erMaxStorage
- 1000 (MB), enforcement: mandatory
- Policy 2
- Membership
- Employees
- Priority
- 2
- erMaxStorage
- 200 (MB), enforcement: mandatory
When a person belongs to both the Managers and Employees roles, the priority is used to resolve the conflict between the two erMaxStorage parameter values. A person who belongs to both groups would receive the erMaxStorage value 1000 (MB). This next example examines conflict resolution with precedence sequence, which is a non-default join directive for a single-valued attribute.
- Policy 1
- Membership
- Managers
- Priority
- 2
- eraddialincallback
- 4, enforcement: mandatory
- Policy 2
- Membership
- Employees
- Priority
- 1
- eraddialincallback
- 2, enforcement: mandatory
- custom join directive on eraddialincallback attribute
- Precedence sequence (most important first)
- 4 User callback
- 2 Fixed callback
- 1 No callback
A person might belong to both the Managers and Employees roles. The precedence sequence is used to resolve the conflict between two parameter values, even though the priority on policy for Employees is higher. This person would get the eraddialincallback value 4 (user callback).
Parent topic: Policy join directives configuration