Introduction

An attribute set is basically an Attributes that consists of various other attributes defined by its attribute set type. A good example for an attribute set type could be an office location. Your company might have more than an location and those locations, might consists of multiple buildings, those buildings have floors and on each floor there are rooms. You might not track that detailed information in the HR system and you therefore need another way of tracking it. So you could create an attribute set type for that use case and create an attribute set for each of your location. Those attribute sets can then be assigned to your employees by placing them in roles for example.

So let’s assume we have a employee who works in the Operation Centre. So we create an attribute set called Operation Centre where we add all the various attributes that contain the location, the building number, the floor and the room number. In any provisioning configuration we now can access that data even though we simply assigned the Operation Centre attribute set to the Core Identity.

Open

Attribute Set Type Properties

Whenever you are creating of updating an attribute set type, you have to specify the following properties:

Attribute Set Properties

Whenever you are creating of updating an attribute set type, you have to specify the following properties:

Attribute Set Assignments

An attribute set can be assigned to a Core Identity. This is done by placing the attribute set into a role and then assign that role to the Core Identity. This also means, a Core Identity can receive multiple attribute sets of the same attribute set type but only one attribute set of the same type can be actively assigned to the Core Identity at each given time. So even though you can assign multiple attribute sets, only one will be active.

Let’s make an example: You could assign the Operation Centre attribute set to all employees with the Functions DevOps Engineer and also assign the Welcome Desk attribute set to all employees with the cost centre of 1030. If we were to have an employee who matches both rules, he works as a DevOps Engineer and has the cost centre 1030, the attribute set with the highest order will be assigned to him.

Role Assignments

You can assign an attribute set to a role. By assigning it to a role, each member of the role will receive an appropriate attribute set assignment with the configured weight. If there are more than one attribute sets of the same attribute set type, the one with the highest weight will be assigned to the user.