Self Service Capability- OIM PS3

This is a New feature in OIM PS3 which lets you control the user self service capability based on the user attribute,role, Organization.
You can restrict a user’s self-service capabilities in Oracle Identity Manager by defining policies and rules, based on user attributes. You can also set user attributes as denied attributes to the user who satisfies the rule. For this practice, if the user is a Contractor, the Telephone Number and Email fields are denied attributes for this user. As a result, the user cannot modify the values in these fields.

Below are all the capabilities which can be provided/denied to the user:

To create these rules login to Admin console and click on Self Service Capabilities. Here if we want to give all the capabilities then create a if condition which is always true (like 1==1) and add all the capabilities. But if we want to give capabilities on condition then add this condition in If and add capabilities in Else section.

User attributes can also be denied based on this condition. One example could be that if user.Role=contractor then don't show the SSN attribute.