Latest update: 7.0.4
- Overview
- Managed Objects
- Relationships Between Objects
- Define a Relationship Type
- Create a Relationship Between Two Objects
- Configure Relationship Change Notification
- Validate Relationships Between Objects
- Create Bidirectional Relationships
- Grant Relationships Conditionally
- View Relationships Over REST
- View Relationships in Graph Form
- Manage Relationships Through the Admin UI
- Roles
- Use Policies to Validate Data
- Store Managed Objects in the Repository
- Access Data Objects
- Import Bulk Data
- Data Models and Objects Reference
- Managed Objects
- Configuration Objects
- When To Use Custom Configuration Objects
- Custom Configuration Object Naming Conventions
- Mapping Configuration Objects To Configuration Files
- Configuration Objects File and REST Payload Formats
- Accessing Configuration Objects Through the REST API
- Accessing Configuration Objects Programmatically
- Creating Objects
- Updating Objects
- Deleting Objects
- Reading Objects
- System Objects
- Audit Objects
- Links
- IDM Glossary
Managed Role Script Hooks
Like any other managed object, you can use script hooks to configure role behavior. The default role definition in conf/managed.json
includes an onDelete
hook that calls a script to prevent the role from being deleted if it is currently assigned to users:
{ "name" : "role", "onDelete" : { "type" : "text/javascript", "file" : "roles/onDelete-roles.js" }, ...