Return
-
Title
When configuring a "Target Object Property" evaluation of an Access Rule, it is not possible to select Active Roles Virtual Attributes -
Description
When configuring a "Target Object Property" evaluation of an Access Rule, it is not possible to select Active Roles Virtual Attributes. Only native Active Directory attributes are present. -
Cause
This is expected product functionality. -
Resolution
WORKAROUND
It is possible to create an Access Rule which is shaped by Virtual Attribute values by first creating a Dynamic Group based on those Virtual Attribute values and then using the User claim | Group (member of groups) evaluation of an Access Rule to specify that Dynamic Group.