ODSEE ACI Syntax for target (Doc ID 2277895.1)

Last updated on MARCH 04, 2024

Applies to:

Goal

Trying to write ACI to give access to few OU's only to specific users.

aci: (targetattr = "*") (target = "ldap:///ou=INST_1,o=SUFFIX_DN" or target = "ldap:///ou=INST_2,o=SUFFIX_DN") (version 3.0;acl "QA ";allow (all)(userdn = "ldap:///uid=USER1=example.com" or userdn = "ldap:///uid=USER2,o=SUFFIX_DN");)

This is failing as in the documentation don't see any specific target related regular expressions.
aci: (targetattr = "*") (target = "ldap:///ou=INST_1,o=SUFFIX_DN") (version 3.0;acl "QA ";allow (all)(userdn = "ldap:///uid=USER1=example.com" or userdn = "ldap:///uid=USER2,o=SUFFIX_DN");) - THIS WORKS because there is no multiple targets

Looking for workable target syntax.
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.