89 lines
1.9 KiB
JSON
89 lines
1.9 KiB
JSON
|
{
|
||
|
|
"configVersion": "1.0.0",
|
||
|
|
"engine": {
|
||
|
|
"maxConditionDepth": 5,
|
||
|
|
"defaultMembershipMode": "direct",
|
||
|
|
"targetAttribute": "extension_<EXTENSION-APP-ID>_<PERSONA>",
|
||
|
|
"summaryInterval": 25,
|
||
|
|
"approvedWritableAttributes": [
|
||
|
|
"extension_<EXTENSION-APP-ID>_<PERSONA>"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"personas": [
|
||
|
|
"Employee",
|
||
|
|
"Guest",
|
||
|
|
"Tier0-Admin"
|
||
|
|
],
|
||
|
|
"dataSources": {
|
||
|
|
"groups": {
|
||
|
|
"enabled": false
|
||
|
|
},
|
||
|
|
"roles": {
|
||
|
|
"enabled": true
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"logging": {
|
||
|
|
"destination": "stream",
|
||
|
|
"traceConditionValues": false
|
||
|
|
},
|
||
|
|
"rules": [
|
||
|
|
{
|
||
|
|
"id": "RULE-0010-GUEST",
|
||
|
|
"persona": "Guest",
|
||
|
|
"description": "Accounts whose user type is Guest.",
|
||
|
|
"match": {
|
||
|
|
"operator": "all",
|
||
|
|
"conditions": [
|
||
|
|
{
|
||
|
|
"operator": "equals",
|
||
|
|
"type": "property",
|
||
|
|
"property": "UserType",
|
||
|
|
"value": "Guest"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"priority": 10,
|
||
|
|
"enabled": true,
|
||
|
|
"name": "Guest accounts"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "RULE-0900-EMPLOYEE",
|
||
|
|
"persona": "Employee",
|
||
|
|
"description": "Default classification for member accounts.",
|
||
|
|
"match": {
|
||
|
|
"operator": "all",
|
||
|
|
"conditions": [
|
||
|
|
{
|
||
|
|
"operator": "isNotNull",
|
||
|
|
"type": "property",
|
||
|
|
"property": "Department"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"priority": 900,
|
||
|
|
"enabled": true,
|
||
|
|
"name": "Employees"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "RULE-0030-TIER0",
|
||
|
|
"persona": "Tier0-Admin",
|
||
|
|
"description": "Members of the Tier 0 group.",
|
||
|
|
"match": {
|
||
|
|
"operator": "all",
|
||
|
|
"conditions": [
|
||
|
|
{
|
||
|
|
"operator": "memberOf",
|
||
|
|
"type": "membership",
|
||
|
|
"groupObjectIds": [
|
||
|
|
"00000000-0000-0000-0000-0000000000a0"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"priority": 30,
|
||
|
|
"enabled": true,
|
||
|
|
"name": "Tier 0 administrators"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|