Set of governance, risk management, compliance (GRC) and similar policy constraints that influence the identity model. These constraints act as triggers for the rules.

Item Summary
Name	Type	Multiplicity	Description
exclusion	container ExclusionPolicyConstraintType	[0,-1]	Container that defines exclusion of entities (e.
minAssignees	container MultiplicityPolicyConstraintType	[0,-1]	Lowest number of objects that have this role assigned.
maxAssignees	container MultiplicityPolicyConstraintType	[0,-1]	Highest number of objects that have this role assigned.
modification	container ModificationPolicyConstraintType	[0,-1]	Modification of the object (add, modify, delete).
assignment	container AssignmentPolicyConstraintType	[0,-1]	Assignment of this object, i.
timeValidity	container TimeValidityPolicyConstraintType	[0,-1]	A constraint that triggers when validity of an object, assignment, or basically any time-sensitive item (e.
situation	container PolicySituationPolicyConstraintType	[0,-1]	Occurrence of the policy situation within an object.

Items
- exclusion
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Container that defines exclusion of entities (e.g. roles). It is a part of Segregation of Duties (SoD) mechanism.
- minAssignees
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Lowest number of objects that have this role assigned.
- maxAssignees
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Highest number of objects that have this role assigned.
- modification
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Modification of the object (add, modify, delete).
- assignment
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Assignment of this object, i.e. where this object is a target of assignment or inducement that is being modified.
- timeValidity
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  A constraint that triggers when validity of an object, assignment, or basically any time-sensitive item (e.g. password) is about to end. Note: in 3.6, this constraint is _not_ evaluated during projector run. It is meant to be evaluated by a special task. In the future we plan to bring evaluation of this constraint into standard projector/clockwork processing.
- situation
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Occurrence of the policy situation within an object.