Name keyword

One syntax variation for relationship expressions is the inclusion of the special name keyword that appears after the dot (.) operator.

Use of the name keyword after the dot (.) operator refers to the name attribute in a profile. This syntax is a general way to point to an object by name rather than through an explicit attribute name. This generality has the limitation, however, of being useful only in contexts where a profile is known at evaluation time.

For example, assume that you have an ACI for a Lotus Notes account. This ACI grants the ability to modify accounts and uses the following filter:
(${service.name}=SuSE Server)

The name keyword refers to the Lotus Notes service profile name attribute. It is valid to use name in this context. At authorization time (evaluation time), the Lotus Notes service profile is always known, and its name attribute can be resolved. The name keyword is not valid in lifecycle rules because the reference to the name attribute in a specific profile is ambiguous when the lifecycle rule is run. Therefore, the name attribute cannot be resolved.