Data Governance Server Documentation Index
Configuration Reference Home

Policy Information Provider

Note: this component is designated "advanced", which means that objects of this type are not expected to be created or altered in most environments. If you believe that such a change is necessary, you may want to contact UnboundID support in order to understand the potential impact of that change.

Note: this is an abstract component that cannot be instantiated.

Note: this component stores cluster-wide configuration data and is mirrored across all servers in the topology within the the same cluster.

Note: changes to cluster-wide configuration objects are immediately and automatically mirrored across all servers within the same cluster, so offline changes are not supported.

Policy Information Providers are used to retrieve XACML attribute(s) from the Policy Information Point (PIP) during policy evaluation. A single Policy Information Provider may be used to resolve one or more attribute specifications.

Direct Subcomponents
Properties
dsconfig Usage

Direct Subcomponents

The following Policy Information Providers are available in the server :

These Policy Information Providers inherit from the properties described below.

Properties

The properties supported by this managed object are as follows:


Basic Properties: Advanced Properties:
↓ description  None
↓ enabled
↓ evaluation-order-index

Basic Properties

description

Description
A description for this Policy Information Provider
Default Value
None
Allowed Values
A string
Multi-Valued
No
Required
No
Admin Action Required
None. Modification requires no further action

enabled

Description
Indicates whether this Policy Information Provider is enabled for use in Data Governance Server.
Default Value
None
Allowed Values
true
false
Multi-Valued
No
Required
Yes
Admin Action Required
None. Modification requires no further action

evaluation-order-index

Description
When multiple Policy Information Providers are defined for a single Data Governance Server, this property determines the evaluation order for determining the correct provider class for a specified XACML attribute. Values of this property must be unique among all Policy Information Providers defined within Data Governance Server but not necessarily contiguous. Policy Information Providers with a smaller value will be evaluated first to determine if they match a XACML attribute Id. If the inclusion criteria of the Policy Information Providers are non-overlapping, i.e. no entry will match more than one Policy Information Provider, then the values for this property are unimportant.
Default Value
None
Allowed Values
An integer value. Lower limit is 0.
Multi-Valued
No
Required
Yes
Admin Action Required
None. Modification requires no further action


dsconfig Usage

To list the configured Policy Information Providers:

dsconfig list-policy-information-providers
     [--property {propertyName}] ...

To view the configuration for an existing Policy Information Provider:

dsconfig get-policy-information-provider-prop
     --provider-name {name}
     [--tab-delimited]
     [--script-friendly]
     [--property {propertyName}] ...

To update the configuration for an existing Policy Information Provider:

dsconfig set-policy-information-provider-prop
     --provider-name {name}
     (--set|--add|--remove) {propertyName}:{propertyValue}
     [(--set|--add|--remove) {propertyName}:{propertyValue}] ...

To delete an existing Policy Information Provider:

dsconfig delete-policy-information-provider
     --provider-name {name}