Principal Reference

A complex data type that represents a principal. A principal can be either a user or group. Principal Reference values are used to configure Create policy from template operation (deprecated) operations that the Rights Management service provides.

For information about data that can be accessed using Xpath Expressions, see Data items.

Data items

The data items that PrincipalReference variables contain.

canonicalname

A string value that represents the canonical name for the principal.

commonName

A string value that represents common name for the principal.

domainCommonName

A string value that represents the display name of the domain.

domainName

A string value that represents the canonical name of the domain.

email

A string value that represents the primary email identifier associated with the principal.

oid

A string value that represents the object identifier of the principal.

org

A string value that represents the organization that the principal belongs to.

principalType

A string value that represents the principal type. These values are valid:

PRINCIPALTYPE_GROUP:
A group.

PRINCIPALTYPE_USER:
A user.

PRINCIPALTYPE_SYSTEM:
A system principal that is used for hidden accounts and do not run as services.

PRINICIPALTYPE_SERVICE:
A system principal that is used to run services continually.

status

A string value that represents the status of a principal. These values are valid:

STATUS_CURRENT:
The principal is current and active.

STATUS_OBSOLETE:
The principal is obsolete and deleted.

system

A boolean value that indicates whether the user or group is a system principal. A value of True specifies that the principle is a system principle. A value of False specifies that the principal is not a system principal.

visibility

An int value that represents the visibility level of the principal. These values are valid:

0:
The principal is invisible.

1:
The principal can be found with searches.

2:
The principal can appear in the user interface.