...
Assignment rules can be used to automatically assign roles and resources to Core Identities based on a given set of conditions that need to be fulfilled. The assignment rule always consists of an Core Identity Type, a set of conditions and the actual assignments. The Core Identity Type defines which attributes are available in the conditions. An assignment rule therefore can only be applied for a specific Core Identity Type and can not be shared accross multiple typesacross multiple types.
Assignment rules can further be activated and deactivated. Once you deactivate it, all assignments that were created because of this rule, will be removed by the system. So act with caution here.
Conditions
In the condition designer you have outer elements and inner elements that you can add to the condition. The outer elements can be used to wrap the whole existing condition with either an and or an or condition. Once inside such an element, you can add as many inner elements as you like.
...