You can apply the Policy Object by using the Enforce Policy page in the New Provisioning Policy Object wizard, or you can complete the wizard and then use the Enforce Policy command on the domain, OU, or Managed Unit where you want to apply the policy.
For more information on how to apply a Policy Object, see Applying Policy Objects and Managing policy scope earlier in this chapter.
Policies of this category are intended to run supplementary scripts upon requests to perform administrative operations.
Policies that are based on running custom scripts can regulate data format and requirements, automate administrative tasks, and trigger additional actions to automate account provisioning. You can associate a custom script with an administrative operation and have Active Roles execute the script when the operation is requested, or after the operation is completed.
For example, consider a user who leaves Seattle for Atlanta. You may write a script that moves the user from the Seattle OU to the Atlanta OU when the City attribute is updated in the user account.
Active Roles executes the script module specified in the policy when the operation is requested or after the operation is completed. The script module is stored in the Active Roles configuration database.
When configuring a Script Execution policy, you can prepare a script module beforehand. Alternatively you can create an empty script module when configuring a policy, and later you can edit the module and add a script to be used by the policy.
You can import a script from a file or write a new script using the Active Roles console. The console displays script modules in the Script Modules container under Configuration.
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy