Symantec IGA

Hi,

We need to implement policy who involves two attributes, so we need to compare the "is changed" values of those attributes in entry rule using OR operator. How can we implement this?

Ex. isChangedJob, isChangedWorkCenter --> Entry Rule: (isChangedJob = true OR isChangedWorkCenter = true)

Thank you!

Hi.

On which event will you be firing this policy?

I asked 'cause I was wondering if the same can be done by identity policy or not....

Hi,

We configure this policy with 'after modify user event'. The action configured in this policy, evaluates this conditions to apply a role or not.

Best regards

Hi,

I was wondering if you have tried using an identity policy as after the modify user event , the user synchronization will happen (presuming you have enabled the sync on this event). so the identity policy will fire where you can specify your OR condition and in action you can make the user member of the role or remove from the role.

Hi did u solve this issue?

Hi, no we didn't. The problem is that policy only admit AND operators...

Thank you

You can use OR conditions in the "entry rules" tab.

Enter your conditional logic here

Then in the Action rules tab, no need for conditional logic

Hi Pearse,

Can you attach an example? What is the syntax to add OR operator and where to include it (in value textbox?) ?

Thanks!!

See below screenshot

As long as one of the two conditions above is met, the policy will fire.

Note that within an entry rule, the conditions are evaluated with an AND. However across all entry rules, the conditions are evaluated with an OR.

If they are the only conditions, then you do not need to put conditions in the action rules section. Just add a rule that does what you need

Ohhh , I'm sorry,  I was wrong, I had understood that all the entry rules will be evaluated using AND operator.

Thank you very much for the clarification!!!