How to create the roles and rule

Question

i buddies,
here i have small requirement, but i am confusing to do that as i am new to OIM. my requirement is
1) i have to create 2 roles named a and b.
2)then i have to create one rule which states that these two roles can'be the same in that organization.
3)after that i have to create one user and i have to assign the first role i.e a.
4)if i assign the second role ie b to the same user , it should not allow me.
to accomplish this task what is the work flow i have to create ? please tell me the steps...
Thanks
Balu

Answer 1

First create 2 user groups called Group A and Group B.
Create the group membership rules for A and B which will instruct oim to evaluate group membership rules when a user is created in OIM.
for example: If user's cost center (on the user form) is "AAA" then he should be assigned to Group A. this will be your group membership rule for group A
Then for constrcuting the group membership rule for Group B you can say,
if user's cost center !="AAA". This will ensure that any single user in the system will not be a part of both groups at any given time, depending upon this attribute called cost center.
you can then define access poclicies on the groups/roles which is used to auto-provision resources for any member of that role/group.