28.4. Modifying a delegation rule using IdM CLI

Prerequisites

• You are logged in as a member of the admins group.

Procedure

• Enter the ipa delegation-mod command with the desired changes. For example, to add the displayname attribute to the basic manager attributes example rule:

  $ ipa delegation-mod "basic manager attributes" --attrs=businesscategory --attrs=departmentnumber --attrs=employeetype --attrs=employeenumber --attrs=displayname
  ----------------------------------------------
  Modified delegation "basic manager attributes"
  ----------------------------------------------
    Delegation name: basic manager attributes
    Permissions: read, write
    Attributes: businesscategory, departmentnumber, employeetype, employeenumber, displayname
    Member user group: employees
    User group: managers