Filter rules
You can apply filter rules can be applied to all network resources, a specific target system, or a specific resource. Bravura Identity passes the applicable rules to the network resource plugin, which is responsible for implementing them. In the case of nrcifs
, these rules are used to preemptively filter the list of groups it returns from the target system.
At least one network resource must exist before network resource filters can be configured.
To add a group filter rule:
Click Manage the system > Resources > Network resources then select the Filters sub-menu item
Type a regular expression Pattern that represents the groups that you want to filter.
See Regular Expressions for help.
For
nrcifs
, filters are based on the distinguished names (dn) of the groups.Select the appropriate value from the Include/Exclude drop-down list:
Exclude
– if you select this value, none of the groups matching Pattern will be displayed in Bravura Identity .Include
– if you select this value, only the groups that match Pattern , or that are included by another rule, will be displayed in Bravura Identity .
For
nrcifs
, include rules have precedence over exclude rules.Select the appropriate Filter on radio button to determine whether the rule should apply to:
(All)
The rule applies to all network resources
Target system
Select the specific target system to which you want the rule to apply from the drop-down list.
Resource
Select the specific resource to which you want the rule to apply from the drop-down list.
Filter rules at different levels are not cumulative. Only the lowest-level rules are sent to the network resource plugin. For example, if you set up rule 1 to filter on all target systems and rule 2 to filter on a specific resource, rule 2 is sent to the plugin whenever a user views the privileges for that resource.
Click Update.