Add Users to Administrative Roles with Expressions

Using expressions, administrators can define conditions based on attributes in user’s profile and date/time to evaluate a Delegated Administration role. This feature is extremely powerful as it provides the Dynamic Role Association to take place based on the contextual information.

When you select a condition in the Editor pane, a small editor appears in which you can select and modify the conditions. Expressions may be set up in a union or intersection relationship with user or group predicates.

To add users to a role with expressions:

1. In the Delegated Administration Resource tree, select the role to which you want to add users.
2. Select the Edit Role Expressions Tab (if not already selected).
3. Use the pulldown menu to designate whether All of the conditions or Any of the conditions should be met, and click Save Changes.
4. You can modify the following conditions in the Expressions editor:
   • The date is:
   • It is after a given date:
   • It is after a given date and time:
   • It is between two times:
   • It is between two dates:
   • It is between two date/times:
   • The visitor has specific characteristics:
     • Property Set
     • Property
     • Value Phrase
5. To modify a date or time condition, click the box next to the condition, then use the calendar tool to set the specific condition.
6. To modify the visitor characteristics, use the pull-down menus next to each condition. You can also click the Add New Value Phrase or Add Descriptor buttons to further modify the visitor characteristics.
7. Click Save Changes at the top of the Editor pane to apply your edits.

Related Topics:

• Add a User to a Delegated Administration Role
• Add a Group to a Delegated Administration Role
• Create a New User
• Overview of Delegated Administration