Enterprise Administration Guide › Managing Policies Centrally › How Policy Deviation Calculations Work › Policy Deviation Data File › Deviations Showing Missing Elements

Deviations Showing Missing Elements

The deviation calculator differentiates between missing elements and additions of new elements. Missing elements refer to CA ControlMinder elements that are explicitly defined in a specified policy, but do not exist on the local host. These missing elements can be: classes, objects, properties, and values.

Any combination of missing elements defines a hierarchal requirement. For example, if Policy1 has the following rule:

eu mytestuser2 operator

The deviation calculator asserts that the following implicit requirements are met:

• Class USER must exist

  The rule defines a user, which belongs to the USER class.

• USER object mytestuser2 must exist

  The mytestuser2 object of the USER class is explicitly referred to by the rule.

• Property OBJ_TYPE must exist

  The rule uses the operator parameter to set the OBJ_TYPE parameter of the USER object.

• The value Operator is assigned to the OBJ_TYPE property

  The rule explicitly sets this value.