Note: this component stores cluster-wide configuration data and is mirrored across all servers in the topology within the the same cluster.
Note: changes to cluster-wide configuration objects are immediately and automatically mirrored across all servers within the same cluster, so offline changes are not supported.
A Data Governance Broker policy or policy set defined in a XACML document.
↓Relations to This Component
↓Properties
↓dsconfig Usage
The properties supported by this managed object are as follows:
| Basic Properties: | Advanced Properties: |
|---|---|
| ↓ description | None |
| ↓ enabled | |
| ↓ xml |
| Description | A description for this XACML Policy. Unless explicitly set, this property takes its value from the description, if any, in the XACML policy definition. |
| Default Value | None |
| Allowed Values | A string |
| Multi-Valued | No |
| Required | No |
| Admin Action Required | None. Modification requires no further action |
| Description | Indicates whether the XACML Policy is enabled. Polices that are intended to only be referenced from policy sets can be disabled to prevent the same policy from being evaluated multiple times. |
| Default Value | None |
| Allowed Values | true false |
| Multi-Valued | No |
| Required | Yes |
| Admin Action Required | None. Modification requires no further action |
| Description | The XACML representation of the policy or policy set. |
| Default Value | None |
| Allowed Values | application/xml |
| Multi-Valued | No |
| Required | Yes |
| Admin Action Required | None. Modification requires no further action |
To list the configured XACML Policies:
dsconfig list-xacml-policies
[--property {propertyName}] ...
To view the configuration for an existing XACML Policy:
dsconfig get-xacml-policy-prop
--policy-name {name}
[--tab-delimited]
[--script-friendly]
[--property {propertyName}] ...
To update the configuration for an existing XACML Policy:
dsconfig set-xacml-policy-prop
--policy-name {name}
(--set|--add|--remove) {propertyName}:{propertyValue}
[(--set|--add|--remove) {propertyName}:{propertyValue}] ...
To create a new XACML Policy:
dsconfig create-xacml-policy
--policy-name {name}
--set enabled:{propertyValue}
--set xml:{propertyValue}
[--set {propertyName}:{propertyValue}] ...
To delete an existing XACML Policy:
dsconfig delete-xacml-policy
--policy-name {name}