Attribute level reconciliation
The Attribute level reconciliation concept allows you to configure RoPE to compare the actual state attribute values of accounts and resource assignments with the desired state attribute values.
The Attribute level reconciliation concept allows you to configure RoPE to compare the actual state attribute values of accounts and resource assignments with the desired state attribute values.
A calculated account resource assignment (CARA) and calculated permission resource assignment (CPRA) can have attribute values.
Attribute values which cannot be mapped directly from a Resource or an Identity can be mapped using the AttributeValueResolver RoPE extension. For more details on this extension, see the Attribute value resolver section in Standard extensions.
The resource-driven attributes concept allows for mapping and assigning attribute values to a CRA by retrieving the values from the resource of another CRA for the same identity.