ICalculatedRoleAssignment Properties |
The ICalculatedRoleAssignment type exposes the following members.
Properties| Name | Description | |
|---|---|---|
 | Assignment |
Migrating to RoPE calculated assignments - to be continued
For now we add CalculatedAssignment as an attribute
|
| AssignTime |
Tells when the role was assigned for the first time.
If the identity "looses" the role at some point in time and it is later assigned again then AssignTime is reset.
This does, however, NOT happen if the validity period, attributes or other info changes on the assignment.
|
| Attributes |
Contains the attributes and their values for the role assignment.
|
| CalculationId |
States the Id of the Identity calculation.
|
| Disabled |
An assignment is disabled if one or more of the following was true at the time of the calculation:
|
| Identity |
States the Identity which the role assignment is for.
|
| IdentityId |
States the Id of the Identity which the role assignment is for.
|
| IsAssignedDirectly |
Does the assignment contain a "direct reason" - normally meaning that it is assigned cause of a self-service access request.
|
| Role |
States the Role which is assigned.
|
| RoleId |
States the Id of the Role which is assigned.
|
| RoleIdent |
States the RoleID for the assigned role.
|
| RootAssignments |
If the role is assigned because it is a child role of one or more other (assigned) roles then these "root" roles are stated here.
Is only available during role engine processing - otherwise it is null.
|
| System |
States the System which the Role belongs to.
Can be null as not all roles belong to a system.
|
| SystemId |
States the Id of the System which the Role belongs to.
Can be 0 as not all roles belong to a system.
|
| ValidFrom |
The date which the assignment is valid from.
|
| ValidTo |
The date which the assignment is valid to.
|
| Violation |
Indicates whether the assignment is in violation with a constraint.
Whether this is so or not is determined by the role engine extension.
Role assignments which are in violation with a constraint are not delivered to the ILM sync engine.
|
| ViolationAccepted |
Indicates whether the violation (if any) has been accepted.
ViolationAccepted is true if all constraint violations for the assignment has status "Accepted".
|
| ViolationDescription |
If the assignment is in violation with a constraint ViolationDescription can hold a description of it.
ViolationDescription be null.
|
See Also