apm policy agent resource-assign
apm policy agent resource-assiBIG-IP TMSH Mapmapolicy agent resource-assign(1)
NAME
resource-assign - Manages a Resource Assign agent.
MODULE
apm policy agent
SYNTAX
Configure the resource-assign component within the policy agent module
using the syntax shown in the following sections.
CREATE/MODIFY
create resource-assign [name]
modify resource-assign [name]
options:
app-service [[string] | none]
rules ( | none)
type [acls | general | resources | webtop-and-webtop-links]
edit resource-assign [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
DISPLAY
list resource-assign
list resource-assign [ [ [name] | [glob] | [regex] ] ... ]
show running-config resource-assign
show running-config resource-assign [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
partition
show resource-assign
show resource-assign [name]
DELETE
delete resource-assign [name]
DESCRIPTION
You can use the resource-assign component to create and manage an agent
that assigns an ACL, a resource group, or both to an access policy. A
resource group is a collection of resources, access control lists, and
protection criteria, which includes your company intranet servers,
applications, and network shares. An ACL is a set of restrictions
associated with a resource or favorite that defines access for users
and groups.
EXAMPLES
create resource-assign MyAssignResourceAgent my rules { { expression
"expr { [mcget {session.ad.last.authresult}] == 1 }" webtop-links add {
google } } }
Creates the Resource Assign agent named MyAssignResourceAgent and
assigns webtop-link google when authentication is passed.
list resource-assign all
Displays a list of Resource Assign agents.
delete resource-assign MyAssignResourceAgent
Deletes the Resource Assign agent named MyAssignResourceAgent.
OPTIONS
[name]
Specifies the name of the Resource Assign agent. This option is
required.
partition
Displays the partition within which the component resides.
app-service
Specifies the name of the application service to which the object
belongs. The default value is none. Note: If the strict-updates
option is enabled on the application service that owns the object,
you cannot modify or delete the object. Only the application
service can modify or delete the object.
rules
Adds a rule to or deletes a rule from the Resource Assign agent.
You can use the following attributes to define a rule:
acl Specifies an access control list that this rule assigns to
users.
connectivity-resource-group
Specifies the name of the connectivity resource group to
which this rule applies.
expression
Specifies the expression that indicates which resource groups
this rule assigns to users.
type Specifies the type of Resource Assign agent. The default is
general.
SEE ALSO
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or
by any means, electronic or mechanical, including photocopying,
recording, or information storage and retrieval systems, for any
purpose other than the purchaser's personal use, without the express
written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2011-2012. All rights reserved.
BIG-IP 2012-10-1apm policy agent resource-assign(1)