Set of governance, risk management, compliance (GRC) and similar policy constraints that influence the identity model. These constraints act as triggers for the rules.

Item Summary
Name	Type	Multiplicity	Description
exclusion	container ExclusionPolicyConstraintType	[0,-1]	Container that defines exclusion of entities (e.
minAssignees	container MultiplicityPolicyConstraintType	[0,-1]	Lowest number of objects that have this role assigned.
maxAssignees	container MultiplicityPolicyConstraintType	[0,-1]	Highest number of objects that have this role assigned.
modification	container ModificationPolicyConstraintType	[0,-1]	Modification of the object (add, modify, delete).
assignment	container AssignmentPolicyConstraintType	[0,-1]	Assignment of this object, i.

Items
- exclusion
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Container that defines exclusion of entities (e.g. roles). It is a part of Segregation of Duties (SoD) mechanism.
- minAssignees
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Lowest number of objects that have this role assigned.
- maxAssignees
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Highest number of objects that have this role assigned.
- modification
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Modification of the object (add, modify, delete).
- assignment
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Assignment of this object, i.e. where this object is a target of assignment or inducement that is being modified.