Supertype: AbstractPolicyConstraintType

Container that defines exclusion of entities (e.g. roles). It is a part of Segregation of Duties (SoD) mechanism.

Item Summary
Name	Type	Multiplicity	Description
name	property string	[0,1]	Identifier of the constraint.
description	property string	[0,1]
enforcement	property PolicyConstraintEnforcementType	[0,1]
targetRef	reference ObjectReferenceType	[1,1]
policy	property ExclusionPolicyType	[0,1]

Items
- name
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  Identifier of the constraint. It is used when midPoint needs to refer to a specific constraint, e.g. in order to record exception. This element is formally specified as optional, mostly due to the compatibility reasons. But it has to be provided in order for some functionality to work correctlry.
- description
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
- enforcement
  
  Flags: RAM,runtime,AVals:3
  
  Multiplicity: [0,1]
- targetRef
  
  Flags: RAM
  
  Multiplicity: [1,1]
- policy
  
  Flags: RAM,runtime,AVals:3
  
  Multiplicity: [0,1]