Obligations are used for authoring policies. You can view,
add, modify, and delete obligations.
About this task
The obligation name must begin with an alphabetic character.
Do not use control characters, leading and trailing blanks, and the
following special characters ~ ! @ # $ % ^ & * ( ) + | ` = \
; : " ' < > ? , [ ] { } / anywhere in the name.
Procedure
- Log in to the local management interface.
- Click .
- Under Policy, click Obligations.
- Click Obligations.
- Perform any of the following actions:
- Add an obligation
-
- Determine whether you want to use an imported obligation extension
or not.
- If you want to use an imported obligation extension, click and select its associated obligation type.
- If you do not want to use an imported obligation extension, click and select Enforcement Point.
- Complete the fields in the General tab.
- Click the Properties tab.
- Select a property that you want to configure.
- Click .
- Enter the value for that property.
- Click OK.
- Click Save.
- Modify a custom obligation
-
Note: - You cannot modify the identifier for obligations that are in use
by a policy.
- You cannot change the extension that is used in the custom obligation.
Only extension properties can be changed.
- Select the obligation that you want to modify.
- Click .
- To add a parameter, click , specify the
settings. Click OK.
- To delete a parameter, highlight it, and click .
- Modify the obligation properties.
- Select a property that you want to configure.
- Click .
- Enter the value for that property.
- Click OK.
Note: You must enter the value for all required properties.
- Click Save.
- Delete a custom obligation
-
Note: You cannot delete predefined obligations or obligations
that are in use by a policy.
- Select an obligation from the list. To select multiple obligations,
press and hold the Ctrl key and select several obligations
- Click . A message prompts you to confirm the deletion.
- Click Delete.
- When you add, modify or delete an obligation, a message
indicates that there are changes to deploy. If you are finished with
the changes, deploy them.
For more information, see Deploying pending changes.
What to do next
You can use any obligation in your policy. See
Access control policies for instructions on how to specify an obligation
for use in your policy.