Inheriting Rule Permissions

You can assign permissions to each element of a rule name. Rules have compound distinguished names consisting of elements separated by periods “.”. The minimal rule name consists of a package name and the common name of the rule. For example:

MyPackage.MyRule1

Rule names may have multiple elements according to the needs of the application. For example:

RedCell.Config.Discovery.CreateDiscoveredEntitiesRule

Each element to its right within the compound name inherits permissions assigned to a name element.

Element

Role

Action

RedCell

Administrators

Read

RedCell.Config.Discovery

Administrators

Write

When the application checks permissions of RedCell.Config.Discovery.CreateDiscoveredEntitiesRule, permissions assigned to each element accumulate. The accumulated permission would be:

Element

Role

Action

RedCell.Config.Discovery.CreateDiscoveredEntitiesRule

Administrators

Read, Write