...
- A COU may not be deleted if it has any members (ie: People with a Person Role with the specified COU).
- A COU may not be deleted if it has any children.
- Two COUs within the same CO cannot share the same name.
- When a COU is created, the special groups associated with the COU will also be created.
- If a COU is renamed, the special groups associated with the COU will also be renamed.
- If a COU is deleted, the special groups associated with the COU will also be deleted.
Group
- Two Groups within the same CO cannot share the same name.
- A Group cannot be set to Suspended if it is nested into a Target Group or is a Target Group for a nesting.
- A Group cannot be deleted if it is nested into a Target Group or is a Target Group for a nesting.
...
- After a new Provisioning Target is added, the associated Plugin cannot be changed.
Additional rules around Provisionable Objects and Eligibility are declared here.
Type
- When a new CO is created, the default Types will be instantiated into the CO. Afterwards, available Types are only updated by administrator action.
- A Type cannot be deleted once it has been used by at least one Registry object, even if that object is subsequently deleted.
- A Suspended Type can not be assigned to new Registry objects, but existing objects already referencing it will not be changed.