IBM Security Privileged Identity Manager, Version 2.0

Shared access classes

Shared Access Management has several types of object classes, such as credential component, credential, credential pool, credential lease, and shared access policy. The credential and credential pool are considered as credential component and both inherit the same shared attributes of the erCredentialComponent class.

erCredential
The erCredential³ class stores credential-specific attributes. The parent class is erCredentialComponent.
erCredentialComponent
The erCredentialComponent class stores credential component-specific attributes. Attributes are shared by both erCredential and erCredentialPool classes. The parent class is top.
erCredentialLease
The attributes of the erCredentialLease class are for access control item (ACI) permission. The credential lease information is stored in the erCredentialLease database table. The parent class is top. See the database erCredentialLease table for the detailed description of each attribute.
erCredentialPool
The erCredentialPool class stores credential pool-specific attributes. The parent class is erCredentialComponent.
erCVService
The erCVService class defines the attributes of a credential service. The attributes of the erCVService⁴ class are for access control item (ACI) permission. The credential service information is stored in the SA_VAULT_SERVICE database table. The parent class is top.
erSharedAccessPolicy
The erSharedAccessPolicy class stores shared access policy-specific attributes. It does not store the membership and entitlement information. The membership and entitlement are stored in SA_POLICY_MEMBERSHIP and SA_POLICY_ENTITLEMENT database tables. The parent class is top.

Parent topic: Database and Directory Server Schema Reference

Feedback