Scaffoldings

Identity Manager provides a list of scaffoldings to act as configuration shortcuts: a scaffolding is an XML element that will generate a complex XML fragment.

Available scaffoldings are described below.

To understand scaffoldings' generated configuration, Identity Manager's executable Usercube-Export-Configuration can be launched with the --export-scaffolding option to export into XML files the configuration items generated by scaffoldings.

Remember that these exported files are meant for viewing and understanding purposes, not for using their content in your own configuration.

References

• Access Control Rules

• Access Reviews

• Access Review Administration Access Control Rules

Generates the permissions to administrate campaign creation.

• Connectors

• Connector Resource Type Access Control

Gives the rights to create and update resource types, generate provisioning orders and fulfill from the connector screen.

• Settings Access Control Rules

Generates the permissions to configure the Workforce Core Solution module and connector settings.

• Jobs

• Get Job Log Administration Access Control Rules

Generates the permissions to read task and job instances logs in UI for a given profile.

• Job Administration Access Control Rules

Scaffolding to access the job administration page.

• Job Task Administration Access Control Rules

Generates all permissions for JobStep entity.

• Pending Assigned Resource Types Access Control Rules

Generates the access control rules which give to a profile the permissions to call the API Pending AssignedResourceTypes.

• Provisioning Access Control Rules

Generates the execution rights for Provisioning and Fulfillment tasks for a given profile.

• Resource Changes View Access Control Rules

Generates the access control rules which gives to a profile the permissions to call the API ResourceChange, ResourceFileChange and ResourceLinkChange.

• Resource Type Mapping Control Rules

Generate rights to launch agent fulfillment.

• Run Job Administration Access Control Rules

Generates the permissions to launch jobs from UI for a given profile.

• Run Job Notification Access Control Rules

Generates access control to send notification when job finish with an error state.

• Run Job Repair Administration Access Control Rules

Generates the permissions to launch from UI jobs that are in state blocked after a Provisioning or a synchronization for a given profile.

• Run Job Repair Notification Access Control Rules

Generates access control to send notification when a relaunch job finish with an error state.

• Synchronization Access Control Rules

Generates rights to launch synchronization task.

• Task Administration Access Control Rules

Generates all rights to have the access to job administration page.

• Task Instance Administration Access Control Rules

Generates access control to update the task instances.

• Workflow Fulfillment Control Rules

Generates the execution rights to launch Fulfillment workflow for a given profile.

• Monitoring

• Monitoring Administration Access Control Rules

Generates the access control rule which gives to a profile the permission to query the monitoring screen.

• Profiles

• Assign Profile Access Control Rules

Gives to a given profile the rights to create, update, delete and query any assigned profile.

• Open Id Client Administration Access Control Rules

• Profile Administration Access Control Rules

Gives to a given profile the rights to create, update and delete profiles.

• Queries

• Manage Setting Access Control Rule

Generates the access control rule which gives to a profile the permission to query, create, update and delete settings from the UM_Settings table.

• Report Access Control Rules

Generates the permissions to access the report view.

• Target Resource Report Access Control Rules

Generates the permissions to apply a report for a profile on a given entity.

• Universe Access Control Rules

Generates an access control rule which gives a profile the permission to access the query page and run queries.

• Resources

• Create Resource Incremental Access Control Rules

Generates the access control rule which gives to a profile the permission to query the resources modified incrementally

• Resource Api Administration

Generates the permissions to create/update/delete/query resources from a given entity type, for a given profile.

• Resource Picker Control Rules

Creates the reading right of the resource picker.

• View Access Control Rules

Generates the permissions to view an entity type's resources.

• View History Resource Template

Generates an access control rule giving to the specified profile the permission to browse the resources history of the specified entity type.

• Role Models

• Assigned Roles Access Control Rules

Generates the permissions to access the assigned roles page for a given entity type and profile.

• Basket Rules Control Rules

Generates the permissions to execute the different requests to display the information in the rights basket.

• Bulk Perform Manual Provisioning Access Control Rules

Generates the permissions to perform bulk validations on the Perform Manual Provisioning page.

• Bulk Resource Reconciliation Access Control Rules

Generates the permissions to perform bulk validations on the Resource Reconciliation page.

• Bulk Review Provisioning Access Control Rules

Generates the permissions to perform bulk validations on the Provisioning Review page (only for errored orders).

• Bulk Role Reconciliation Access Control Rules

Generates the permissions to perform bulk validations on the Role Reconciliation page.

• Governance Roles Access Control Rules

Generates the permissions to access the governance review pages for a given entity type and profile.

• Perform Manual Provisioning Access Control Rules

Generates the permissions to access the manual provisioning pages for a given entity type and profile.

• Reconciliate Resources Access Control Rules

Generates the permissions to access the resource reconciliation pages for a given entity type and profile.

• Reconciliate Roles Access Control Rules

Generates the permissions to access the role reconciliation pages for a given entity type and profile.

• Redundant Assignment Access Control Rule

Generates the permissions to access the Redundant Assignment page, to analyze and remove redundant assignments.

• Review Provisioning Access Control Rules

Generates the permissions to access the provisioning review pages for a given entity type and profile.

• Review Roles Access Control Rules

Generates the permissions to access the role review pages for a given entity type and profile.

• Risks Administration Access Control Rules

• Role Administration Access Control Rules

Generates the permissions to access the configuration pages and create, update, delete the elements of the role model.

• Role Naming Access Control Rules

Generates the permissions to configure and launch the automatic creation of roles and rules based on naming conventions.

• Simulations

• Policy Simulation Control Rules

• Role And Simulation Control Rules

• User Interfaces

• Manage Accounts

• Search Bar Page Access Control

Gives access rights to the different navigation elements of the SearchBars of the pages of the role model.

• Workflows

• Create Update Delete Access Control Rules

Generates execution rights for the create, update, delete workflows.

• Update Resources Access Control Rules

• Workflow Access Control Rules

Generates the permissions to access the task page and visualize the workflows to be executed for a given entity type and profile.

• Workflow Aspect

• Workflow Configuration Control Rules

• Workflow Overview Control Rules

Generates the permissions to access the workflow supervision page.

• Entity Types

• Entity Types

• Connector Mappings

Generates the mapping of an entity in a given connector.

• Entity Type Display Name

Computes a default value for resources' internal display names.

• Entity Type Display Table

Creates a display table for the given entity.

• Entity Type Display Table Adaptable

Creates an adaptable display table for a given entity type.

• Entity Type Display Target Resource Table

Creates a displaytable for the given entity.

• Entity Type Menu Item

Creates a menu item for the entity type, and for its connector if the entity type has an entity type mapping.

• Entity Type Search Bar

Creates the search bar for the entity without criteria.

• Target Resource Report Menus

Creates the Item menu for the entity's report so that it is displayed in the report view.

• Workflows

• Create Update Delete Menus

Creates creation, update and delete menus for an entity.

• Create Update Delete Workflows

• Update Resources Menus

• Update Resources Workflows

• Workflow Actors Notification

• Workflow Entity Type

Creates an entity that will be the source of all workflows that manipulate the given entity.

• Workflow Entity Type Display Entity Type

• Workflow Entity Type Display Table

Creates the display table of the workflow entity of the starting entity.

• Workflow Entity Type Search Bar

Creates the search bar of the workflow entity of the starting entity.

• Workflow Performer Notification

• Jobs

• Clean Database Job

Creates the job to clean old tasks and jobs instances with state InProgress

• Create Access Certification Job

Creates the AccessCertification Job.

• Create Agent Synchro Complete

Creates for the given agent the synchronization job of all connectors present in the agent in Complete mode.

• Create Agent Synchro Incremental

Creates for the given agent the synchronization job of all connectors present in the agent in incremental mode.

• Create Connectors Jobs

Creates all jobs by connector to launched task in the connector page.

• Create Connector Synchro Complete

Creates for the given connector the synchronization in complete mode.

• Create Connector Synchro Incremental

Creates for the given connector the synchronization job in incremental mode.

• Create Initialization Job

Creates the Initialization Job for the given agent.

• Optimizations

• Optimize Display Table

Optimizes all elements found in the given displayTable.

• Queries

• Target Resource Report

Creates a ReportQuery with default Query taking all the properties of the entity.

• Universe Data Model

Creates, within a universe, entity instances and association instances based on a predefined template.

• Templates

• Connectors Access Control Rules

Gives the permissions to manage the connector pages.

• Create Administrator Profile

Creates the profile administrator and all default access control rules.

• Create Update Delete Template

Creates the three types of workflow for the given entity as well as the execution rights for the given profile.

• Entity Report Default

Creates all configuration items to add a ReportQuery for an EntityType and profile.

• Job Execution Access Control Rules

Assigns a set of rights to a given profile to execute any job, and view all job instances, task instances and logs.

• Job View Access Control Rules

Scaffolding to generate a set of rights to view all JobInstances, TaskInstances and logs.

• Simulation Access Control Rules

Generates the permissions to configure and launch simulations.

• Update Resources Template

• View Source Resource Template

Creates the display table, fills in the internal display name of the entity, and gives the rights to see the permissions and sources of the entity for a given profile.

• View Target Resource Template

Creates the entity view (designElement = resourceTable), the report and the rights for a given profile.

• View Template

Creates the view for the given entity as well as the rights for the given profile.

• View Template Adaptable

Implements a default display name for the resources of a given entity type, displays the resources in an adaptable table, and give the permissions to view the resources.

• Workforce

• Bootstrap Module

Generates the default settings required to start using Usercube and the Workforce Core Solution module.

• Profile Module

Generates access control rules by aggregating composite profiles.

• Workforce Module

Generates the workforce repository based on the data filled in the Workforce Core Solution module.