Policies on Demand
If you create a policy for the OnTrigger event, you can use the Run button on the details page to run the policy on demand.
Many of the built-in actions in CentraSite support the OnTrigger event. For example, you can run the WS-I actions on demand. You can also use the OnTrigger event to execute policies that set permissions on certain types of objects or change the state of an object.
You can run a policy on demand if you have view permission on the policy.
Objects to Which the Policy is Applied
When you run a policy on demand, CentraSite queries the objects in the organization to which the policy applies and selects objects that satisfy the following conditions:
The object is one that is within the policy's object scope.
The object is one on which you have View permission.
The object's name, description, and classification properties satisfy the object-selection criteria on the policy's
Scope tab (if any).
Note: | If the policy's Organization property is set to All (meaning that it is a system-wide policy), then CentraSite queries all organizations for objects that satisfy the conditions listed above. |
CentraSite executes the policy's actions on each object in the result set produced by this query (henceforth, referred to as the target set).
If an action in the policy performs an update or delete operation on the objects in the target set, be aware that these operations executes successfully if you have the appropriate Modify or Full permission on the target object. If you do not have the required permissions, the action that performs the edit or delete operation fails and the failure is reported in the policy log.
As with other policies, a policy that you execute on demand might trigger other policies. This occurs anytime an action in the policy performs an operation that is within the scope of another policy.
When you run a policy on demand, CentraSite executes the policy against each object in the target set. Results are written to the policy log and are also displayed in the results window in the user interface.
For example, if you have a policy that contains actions 1, 2, and 3 and the target set contains objects A, B, and C, the policy iterates over the objects in the target set as follows:
Iteration 1: Execute actions 1, 2, and 3 on object A
Iteration 2: Execute actions 1, 2, and 3 on object B
Iteration 3: Execute actions 1, 2, and 3 on object C
If an action returns a failure code during an iteration of the policy, CentraSite writes the failure message to the policy log and immediately exits that iteration of the policy. If the target set contains additional objects, CentraSite applies the policy to the next object in the target set.
There is one exception, namely if the Send Email Notification action returns a failure code; in this case, CentraSite writes the failure message to the policy log and performs the next action in the policy (if one exists).
