Management of account defaults on a service type
You can define default values for account attributes either on a service or on a service type.
Types of account defaults
- Service type account defaults
- When account
defaults are defined at the service- type level,
they apply to all services of that type. However, a service type default
can be overridden by defining an account default at the service
level.
You can define global account default values in one place, a service type. You do not need to define the same account default values for a service in multiple places. This single definition reduces the amount of customization and the chance of omissions or errors.
- Service account defaults
- These defaults are initially inherited from the service type account defaults, but they become local to the service as soon as it is being changed. They become local account defaults and can be changed or removed. Changes (including removals) do not affect the service type account defaults.
Options for defining default values for account attributes
- Basic
- Allows you to hard code default values. You can also build a rule to extract information from an attribute on any IBM Verify Identity Governance person class object. You can use it to set the value for an account attribute.
- Advanced
- Allows you to code JavaScript to retrieve LDAP data from IBM Verify Identity Governance objects and set the value for an account attribute. As a starting point, you can create a basic account default and then use the advanced option to edit the generated JavaScript.