User Attributes

User attributes allow you to add additional authorization control to your operations. User attributes are defined in CloudControl and are based on Directory Service attributes or attributes in an X.509 certificate.

  • Attribute Name—The attribute name from the Directory Service or X.509 certificate. The name and location depends upon your provider type. For example, for Active Directory, the attribute name is found on the Attribute Editor tab in the Properties dialog box.
  • Attribute Provider—The provider where the attribute name is found. This is either Directory Service or X.509 certificate.
  • User Attribute Type—Whether the attribute value is a string or Boolean.

After you create the user attribute, you can add it as a constraint, and then add that constraint to a Rule.