Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
languagexml
titleSystem Configuration
<systemConfiguration>
    ...
    <defaultObjectPolicyConfiguration>
        <type>RoleType</type>
        <applicablePolicies>
            <policyGroupRef oid="b1cb876e-23a2-11e8-bf14-ff36603a9ae0"/>
            <policyGroupRef oid="b7e2f6f0-23a2-11e8-983a-b315ed2c30b3"/>
        </applicablePolicies>
    </defaultObjectPolicyConfiguration>
</systemConfiguration>

...

Code Block

 

languagexml
titlePolicy group for approval
<org oid="b1cb876e-23a2-11e8-bf14-ff36603a9ae0">
    <name>policy-role-approval</name>
    <subtype>policy</subtype>
    <displayName>Approval policies</displayName>
</org>
Code Block
languagexml
titlePolicy group for security
<org oid="b7e2f6f0-23a2-11e8-983a-b315ed2c30b3">
    <name>policy-role-security</name>
    <subtype>policy</subtype>
    <displayName>Security policies</displayName>
</org>
Code Block
languagexml
titleMeta role for manager approval
<role oid="4798bd8e-23a3-11e8-a502-e32261e4ecff">
    <name>meta-role-policy-approval-manager</name>
    <subtype>policy</subtype>
    <displayName>Approval by manager</displayName>
    <assignment>
        <!-- Assignment so this meta-role is part of the policy group -->
        <targetRef oid="b1cb876e-23a2-11e8-bf14-ff36603a9ae0" type="OrgType">
    </assignment> 
    <!-- inducements with policy rules for actual approval policy will be here -->
 </role>
Code Block
languagexml
titleMeta role for manager approval
<role oid="a38b7eec-23a3-11e8-9f81-f7fb91a9d52a">
    <name>meta-role-policy-approval-role-owner</name>
    <subtype>policy</subtype>
    <displayName>Approval by role owner</displayName>
    <assignment>
        <!-- Assignment so this meta-role is part of the policy group -->
        <targetRef oid="b1cb876e-23a2-11e8-bf14-ff36603a9ae0" type="OrgType">
    </assignment> 
    <!-- inducements with policy rules for actual approval policy will be here -->
 </role>
Code Block
languagexml
titleMeta role for manager approval
<role oid="d5d76b9a-23a3-11e8-be88-bb290240045b">
    <name>meta-role-policy-sod</name>
    <subtype>policy</subtype>
    <displayName>Segregation of Duties Policy</displayName>
    <assignment>
        <!-- Assignment so this meta-role is part of the policy group -->
        <targetRef oid="b7e2f6f0-23a2-11e8-983a-b315ed2c30b3" type="OrgType">
    </assignment> 
    <!-- inducements with policy rules for actual SoD policy will be here -->
 </role>

 TODO