Note, we don't have the built in actions to make this happen, so this is an EL (expression language) rule
Allow GrouperSystem to run trusted ELs for rules
Otherwise you get object is null error. Note, you only need to do this once ever, so if you have a group configured (for some other rule) just use that or skip this step
- Create group: etc:rulesAccessToApiInEl
Add config entry to grouper.properties (e.g. in UI)
rules.accessToApiInEl.group = etc:rulesAccessToApiInEl
Configure rule
| Attribute | Attribute metadata | Value |
|---|---|---|
| rule | ||
| ruleActAsSubjectId | GrouperSystem | |
| ruleActAsSubjectSourceId | g:isa | |
| ruleCheckStemScope | SUB | |
| ruleCheckType | groupCreate | |
| ruleThenEl | ${ruleUtils.group(null, 'destination:groupOfGroups', null, true, true).addMember(ruleUtils.group(null, groupName, null, true, true).toSubject(), false)}
| |
| ruleValid | T |