dynamic-adi-entitlement-services

This stanza entry specifies the dynamic access decision information (ADI) retrieval entitlement service.

dynamic-adi-entitlement-services = entitlement_service

Dynamic access decision information (ADI) retrieval entitlement service.

Options

entitlement_service

A string value for the container names of the required ADI. A list of configured authorization API entitlements service identifiers (IDs) is queried by the authorization rules engine when missing ADI is detected during an authorization rule evaluation.

When ADI is found to be missing during a rule evaluation, each service in this list is queried in the order defined in this entry. These stanza entries must refer to existing entitlements services.

The service ID (for example, bank_A_ADI) is loaded by using service entries in the entitlement service configuration [aznapi-entitlement-services] stanza or in an initialization attribute.

See dynamic-adi-entitlement-services and the Authorization C API Developer Reference for more information about rules processing and this service.

Usage

Optional

Default value

There is no default value.

Example

[aznapi-entitlement-services]
dynamic-adi-entitlement-services = bank_A_ADI
dynamic-adi-entitlement-services = bank_B_ADI

Parent topic: [aznapi-configuration] stanza