| name | data type | type | namespace | min/max occurs | description |
|---|---|---|---|---|---|
| additionalResources | list of (custom) | element | 0/unbounded | ||
| allowExceptions | list of rangerPolicyItem | element | 0/unbounded | ||
| conditions | list of rangerPolicyItemCondition | element | 0/unbounded | ||
| dataMaskPolicyItems | list of rangerDataMaskPolicyItem | element | 0/unbounded | ||
| denyExceptions | list of rangerPolicyItem | element | 0/unbounded | ||
| denyPolicyItems | list of rangerPolicyItem | element | 0/unbounded | ||
| description | string | element | 0/1 | ||
| isAuditEnabled | boolean | element | 0/1 | ||
| isDenyAllElse | boolean | element | 0/1 | ||
| name | string | element | 0/1 | ||
| options | (custom) | element | 0/1 | ||
| policyItems | list of rangerPolicyItem | element | 0/unbounded | ||
| policyLabels | list of string | element | 0/unbounded | ||
| policyPriority | int | element | 0/1 | ||
| policyType | int | element | 0/1 | ||
| resourceSignature | string | element | 0/1 | ||
| resources | (custom) | element | 0/1 | ||
| rowFilterPolicyItems | list of rangerRowFilterPolicyItem | element | 0/unbounded | ||
| service | string | element | 0/1 | ||
| serviceType | string | element | 0/1 | ||
| validitySchedules | list of rangerValiditySchedule | element | 0/unbounded | ||
| zoneName | string | element | 0/1 | ||
Properties inherited from rangerBaseModelObject |
|||||
| createTime | dateTime | element | 0/1 | ||
| createdBy | string | element | 0/1 | ||
| guid | string | element | 0/1 | ||
| id | long | element | 0/1 | ||
| isEnabled | boolean | element | 0/1 | ||
| updateTime | dateTime | element | 0/1 | ||
| updatedBy | string | element | 0/1 | ||
| version | long | element | 0/1 | ||
Example
<r----->
<additionalResources>...</additionalResources>
<description>...</description>
<validitySchedules>
<endTime>...</endTime>
<timeZone>...</timeZone>
<startTime>...</startTime>
<recurrences>
<schedule/>
<interval/>
</recurrences>
</validitySchedules>
<allowExceptions>
<accesses>
<isAllowed>...</isAllowed>
<type>...</type>
</accesses>
<roles>...</roles>
<groups>...</groups>
<delegateAdmin>...</delegateAdmin>
<conditions>
<values>...</values>
<type>...</type>
</conditions>
<users>...</users>
</allowExceptions>
<service>...</service>
<zoneName>...</zoneName>
<options>...</options>
<policyItems>
<accesses>
<isAllowed>...</isAllowed>
<type>...</type>
</accesses>
<roles>...</roles>
<groups>...</groups>
<delegateAdmin>...</delegateAdmin>
<conditions>
<values>...</values>
<type>...</type>
</conditions>
<users>...</users>
</policyItems>
<isAuditEnabled>...</isAuditEnabled>
<serviceType>...</serviceType>
<resourceSignature>...</resourceSignature>
<rowFilterPolicyItems>
<rowFilterInfo>
<filterExpr>...</filterExpr>
</rowFilterInfo>
<accesses/>
<roles>...</roles>
<groups>...</groups>
<delegateAdmin>...</delegateAdmin>
<conditions/>
<users>...</users>
</rowFilterPolicyItems>
<policyLabels>...</policyLabels>
<denyExceptions>
<accesses>
<isAllowed>...</isAllowed>
<type>...</type>
</accesses>
<roles>...</roles>
<groups>...</groups>
<delegateAdmin>...</delegateAdmin>
<conditions>
<values>...</values>
<type>...</type>
</conditions>
<users>...</users>
</denyExceptions>
<name>...</name>
<policyPriority>...</policyPriority>
<denyPolicyItems>
<accesses>
<isAllowed>...</isAllowed>
<type>...</type>
</accesses>
<roles>...</roles>
<groups>...</groups>
<delegateAdmin>...</delegateAdmin>
<conditions>
<values>...</values>
<type>...</type>
</conditions>
<users>...</users>
</denyPolicyItems>
<dataMaskPolicyItems>
<dataMaskInfo>
<conditionExpr>...</conditionExpr>
<valueExpr>...</valueExpr>
<dataMaskType>...</dataMaskType>
</dataMaskInfo>
<accesses/>
<roles>...</roles>
<groups>...</groups>
<delegateAdmin>...</delegateAdmin>
<conditions/>
<users>...</users>
</dataMaskPolicyItems>
<resources>...</resources>
<isDenyAllElse>...</isDenyAllElse>
<conditions>
<values>...</values>
<type>...</type>
</conditions>
<policyType>...</policyType>
<updateTime>...</updateTime>
<createdBy>...</createdBy>
<updatedBy>...</updatedBy>
<version>...</version>
<id>...</id>
<createTime>...</createTime>
<isEnabled>...</isEnabled>
<guid>...</guid>
</r----->