Managed Objects › Managed Object Interfaces

Managed Object Interfaces

The following interfaces for CA Identity Manager managed objects are accessible through CA Identity Manager APIs:

• AccessRole

  Represents a CA Identity Manager access role. An access role lets role members perform specified tasks in applications other than Identity Manager. Access roles are available for SiteMinder Role-Based Access Control (RBAC) policies.

• AccessTask

  Represents an access task. An access task is a business function performed in an application other than CA Identity Manager. Access tasks are included in access roles.

  Note: CA Identity Manager provides administrative control of access tasks, but it does not execute these tasks.

• AdminRole

  Represents an admin role. An admin role allows role members to perform specified administrative tasks in CA Identity Manager, for example, management of users, groups, organizations, roles, and tasks.

• AdminTask

  Represents an admin task. An admin task is a CA Identity Manager administrative task such as creating a user or a group. Admin tasks are included in admin roles.

• Group

  Represents a logical association of users in a user directory. Group members can be from multiple organizations.

• Organization

  Represents a container object in a user directory. It can contain other managed objects, including other organizations. Organizations typically correspond to the business units in an enterprise.

• PasswordPolicy

  Represents a set of restrictions and controls around passwords.

• ProvisioningRole

  Represents the definition of a provisioning role to CA Identity Manager.

  This object requires an instance of a provisioning directory.

• Role

  Represents a logical grouping of administrative or business tasks. The managed object interfaces AdminRole, AccessRole, and ProvisioningRole implement the Role interface.

  This interface includes the method modifyObject(Task[]). This method lets you commit changes to a managed object's attributes, similar to the method modifyObject(). In addition, modifyObject(Task[]) lets you specify the complete set of tasks to associate with the role. You can specify the role's task set whether there are any attribute changes to commit.

• Task

  Represents an administrative or business function. The managed object interfaces AdminTask and AccessTask implement the Task interface.

• User

  Represents an individual within an organization in a user directory.

All interfaces are in this package:

com.netegrity.llsdk6.imsapi.managedobject