Manage obligations

Obligations are used for authoring policies. We can view, add, modify, and delete obligations.

The obligation name must begin with an alphabetic character. Do not use control characters, leading and trailing blanks, and the following special characters ~ ! @ # $ % ^ & * ( )  + | ` = \ ; :  " ' < > ? , [  ] { } / anywhere in the name.

Steps

  1. Log in to the local management interface.

  2. Click AAC.

  3. Under Policy, click Obligations.

  4. Click Obligations.

  5. Perform any of the following actions:

      Add an obligation

      1. Determine Whether to use an imported obligation extension or not.

        • To use an imported obligation extension, click Add and select its associated obligation type.

        • If we do not want to use an imported obligation extension, click Add and select Enforcement Point.

      2. Complete the fields in the General tab.

      3. Click the Properties tab.

        1. Select a property to configure.

        2. Click Modify.

        3. Enter the value for that property.

        4. Click OK.

      4. Click Save.

      Modify a custom obligation

      • We cannot modify the identifier for obligations that are in use by a policy.

      • We cannot change the extension used in the custom obligation. Only extension properties can be changed.

      1. Select the obligation to modify.

      2. Click Modify.

      3. To add a parameter, click Add, specify the settings. Click OK.

      4. To delete a parameter, highlight it, and click Delete.

      5. Modify the obligation properties.

        1. Select a property to configure.

        2. Click Modify.

        3. Enter the value for that property.

        4. Click OK.

        We must enter the value for all required properties.

      6. Click Save.

      Delete a custom obligation
      We cannot delete predefined obligations or obligations that are in use by a policy.

      1. Select an obligation from the list. To select multiple obligations, press and hold the Ctrl key and select several obligations

      2. Click Delete. A message prompts us to confirm the deletion.

      3. Click Delete.

  6. When we add, modify or delete an obligation, a message indicates there are changes to deploy. If we are finished with the changes, deploy them.

    For information, see Deploying pending changes.


What to do next

We can use any obligation in the policy. See Access control policies for instructions on how to specify an obligation for use in the policy.

Parent topic: Obligations

Related reference