-
Notifications
You must be signed in to change notification settings - Fork 4
Value comparison rule
The value comparison rule compares the value of an attribute with the value specified in the rule. The types of comparisons available depend on the type of the attribute being evaluated. The rule can also evaluate an object that is referenced by the object under evaluation.
Specifies that the value comparison is performed on the current object, or an attribute referenced by the current object.
The attribute to evaluate.
When the target is a multivalued attribute, the group operator is used to determine how to evaluate the rule. The group operator can specify that any, all, none, or one of the attribute values must match the value provided in the rule.
| Operator | Description |
|---|---|
| Any | True if any attribute value matches |
| All | True if all attribute values match |
| None | True if no attribute values match |
| One | True if exactly one value matches |
The value to use in the comparison. This can be any valid ACMA declarative language expression. The value declaration provided will first be expanded, and then transformed, before being compared to the value on the object.
The transform chain is applied to the expanded value before comparison and can be used for data normalization, formatting, or case conversion.
| Operator | Description | Case Sensitivity |
|---|---|---|
| Equals | Exact text match | Yes |
| Does not equal | Text does not match | Yes |
| Contains | Substring present | Yes |
| Does not contain | Substring absent | Yes |
| Starts with | Text begins with prefix | Yes |
| Ends with | Text ends with suffix | Yes |
| Operator | Description |
|---|---|
| Equals / Does not equal | Exact numeric match |
| Is greater than | Value exceeds threshold |
| Is greater than or equal to | Value meets minimum |
| Is less than | Value below threshold |
| Is less than or equal to | Value within maximum |
| Operator | Description |
|---|---|
| Equals | Boolean state match |
| Does not equal | Boolean state opposite |
| Operator | Description |
|---|---|
| Equals | Object reference match |
| Does not equal | Object reference different |
| Operator | Description |
|---|---|
| Equals / Does not equal | Exact date/time match |
| Is greater than | Date/time after threshold |
| Is greater than or equal to | Date/time from threshold |
| Is less than | Date/time before threshold |
| Is less than or equal to | Date/time up to threshold |
| Operator | Description |
|---|---|
| Equals / Does not equal | Binary data comparison |
Purpose: Ensure user is in Sales department
Attribute: orgUnitDisplayName
Operator: Equals
Value: "Sales"
Purpose: Check if user is in any admin groups
Attribute: memberOf
Group Operator: Any
Operator: Contains
Value: "Admin"
Purpose: Ensure manager is in Management department
Value Source: Referenced Object (manager)
Attribute: orgUnitDisplayName
Operator: Equals
Value: "Management"