Containment
Containment refers to the allowed combination of objects and program reference type, and not to X.500 containment.
cim1265
Containment
refers to the allowed combination of objects and program reference type, and not to X.500 containment.Contents
Common Configuration Object
The Common Configuration Object is used to assign program exits for the global user, global user group, or provisioning role object classes. For example, if certain program exits should be called when global users are processed, the common configuration object should reference those exits. In addition, the common configuration object is needed to provide a way to call exits during the add operation.
- PRE_ADD_GLOBAL_USER
- POST_ADD_GLOBAL_USER
- PRE_MODIFY_GLOBAL_USER
- POST_MODIFY_GLOBAL_USER
- PRE_CHANGE_GLOBAL_USER_PWD
- POST_CHANGE_GLOBAL_USER_PWD
- PRE_ENABLE_GLOBAL_USER
- POST_ENABLE_GLOBAL_USER
- PRE_DISABLE_GLOBAL_USER
- POST_DISABLE_GLOBAL_USER
- PRE_DELETE_GLOBAL_USER
- POST_DELETE_GLOBAL_USER
- PRE_ADD_GLOBAL_GROUP
- POST_ADD_GLOBAL_GROUP
- PRE_MODIFY_GLOBAL_GROUP
- POST_MODIFY_GLOBAL_GROUP
- PRE_DELETE_GLOBAL_GROUP
- POST_DELETE_GLOBAL_GROUP
- PRE_ADD_ROLE
- POST_ADD_ROLE
- PRE_MODIFY_ROLE
- POST_MODIFY_ROLE
- PRE_DELETE_ROLE
- POST_DELETE_ROLE
Provisioning Roles
A role object can reference the program exits to assign the exits that are invoked for various operations on global users associated with that provisioning role. If a provisioning role references a program exit, those exits are called in addition to the exits referenced by the Common Configuration Object. The exits defined on the common configuration object are invoked before exits defined on the provisioning role (hierarchy order).
When adding a global user (PRE_ADD_GLOBAL_USER and POST_ADD_GLOBAL_USER exit types), program exits are invoked based on the initial set of provisioning roles being assigned to the user.
When associating or disassociating a provisioning role with a global user (PRE_ASSOCIATE_ROLE, POST_ASSOCIATE_ROLE, PRE_DISASSOCIATE_ROLE and POST_DISASSOCIATE_ROLE exit types), the program exits referenced by the provisioning roles being associated or disassociated are invoked.
When modifying an existing global user in other ways (using the exit types listed below), all provisioning roles to which the global user belongs are consulted to identify the program exits to invoke.
Other Exit Types
The common configuration object handles add exits for a global user.
- PRE_ADD_GLOBAL_USER
- POST_ADD_GLOBAL_USER
- PRE_ASSOCIATE_ROLE
- POST_ASSOCIATE_ROLE
- PRE_DISASSOCIATE_ROLE
- POST_DISASSOCIATE_ROLE
- PRE_MODIFY_GLOBAL_USER
- POST_MODIFY_GLOBAL_USER
- PRE_CHANGE_GLOBAL_USER_PWD
- POST_CHANGE_GLOBAL_USER_PWD
- PRE_ENABLE_GLOBAL_USER
- POST_ENABLE_GLOBAL_USER
- PRE_DISABLE_GLOBAL_USER
- POST_DISABLE_GLOBAL_USER
- PRE_DELETE_GLOBAL_USER
- POST_DELETE_GLOBAL_USER
Account Templates
An account template object can reference program exits to affect the accounts associated with that template.
If an account template references program exits, these exits are called in addition to the exits that are referenced by the endpoint to which the account belongs. The exits defined on the account template are invoked before the exits on the endpoint (hierarchy order).
If an account is being created from one or more account templates (PRE_ADD_ACCOUNT and POST_ADD_ACCOUNT exit types), those template exits are called.
When working with an existing account, whether the current set of assigned account templates is being adjusted or not, it is the initial set of assigned templates whose program exits are invoked.
- PRE_ADD_ACCOUNT
- POST_ADD_ACCOUNT
- PRE_MODIFY_ACCOUNT
- POST_MODIFY_ACCOUNT
- PRE_CHANGE_ACCOUNT_PASSWORD
- POST_CHANGE_ACCOUNT_PASSWORD
- PRE_ENABLE_ACCOUNT
- POST_ENABLE_ACCOUNT
- PRE_DISABLE_ACCOUNT
- POST_DISABLE_ACCOUNT
- PRE_DELETE_ACCOUNT
- POST_DELETE_ACCOUNT
Endpoints
Endpoint objects are used to assign program exits to accounts. For example, if certain program exits should be called when accounts are processed, the endpoint objects should reference those exits.
In addition, endpoint objects are needed to provide a way to call exits during an add operation.
- PRE_ADD_ACCOUNT
- POST_ADD_ACCOUNT
- PRE_MODIFY_ACCOUNT
- POST_MODIFY_ACCOUNT
- PRE_CHANGE_ACCOUNT_PASSWORD
- POST_CHANGE_ACCOUNT_PASSWORD
- PRE_ENABLE_ACCOUNT
- POST_ENABLE_ACCOUNT
- PRE_DISABLE_ACCOUNT
- POST_DISABLE_ACCOUNT
- PRE_DELETE_ACCOUNT
- POST_DELETE_ACCOUNT