Configuration Manager Conditional Actions

Applies To: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2

Configuration Manager 2007 actions can be displayed according to specified conditions. The conditions are defined by the following:

• Regular expressions

• Method calls

• Security permissions

Regular Expressions

Regular expressions allow you to apply string-based search patterns. The following elements specify a regular expression for an action:

The following action displays a dialog box whenever the specified pattern matches:

<ActionDescription ActionVerb="Properties" Class="ShowDialog">
    <MatchPattern>MS_ASYNC_RAS</MatchPattern>    <MatchValueToTest>##SUB:AddressType##</MatchValueToTest>
    <DialogId>AsyncRasSenderAddress</DialogId>
</ActionDescription>

Method Calls

An action can be shown depending on the result of a method call. The ActionDescription child element ActionStateAssembly defines the assembly, type, and method to be called. If the method returns true, the action is shown; if the method returns false, the action is hidden.

The following XML calls a method named EnableDecrementPriorityMenu in the assembly AdminUI.Addresses.dll:

<ActionDescription>
    <ActionStateAssembly>
        <Assembly>AdminUI.Addresses.dll</Assembly>
        <Type>Microsoft.ConfigurationManagement.AdminConsole.Addresses.AddressUtilityClass</Type>
        <Method>EnableDecrementPriorityMenu</Method>
    </ActionStateAssembly>
</ActionDescription>

The method is implemented in a .NET Framework assembly with the following signature:

public static bool EnableDecrementPriority(object sender, ScopeNode scopeNode, ActionDescription action, ResultObjectBase resultObject)

For more information about calling methods in a .NET Framework assembly, see Configuration Manager AssemblyType Action.

Security Permissions

You can restrict the availability of an action by applying security restrictions to the selected object or object class.

Object Instance Permissions

You can restrict the availability of an action by applying required permissions to the selected object. In the following XML example, the following elements specify the instance permissions for the selected object:

In the following XML example, the Delete action for a selected object is available only if the user has modify permissions:

<ActionDescription ActionVerb="Delete" Class="Default" SelectionMode="Both" InstanceDependsOn="SMS_Site">
    <InstancePermissions>       <SecurityFlagsDetailDescription BitName="Modify" BitValue="2" DependsOn="1" />    </InstancePermissions>
</ActionDescription>

Object Class Permissions

You can use the ClassPermissions element to set the object class permissions required for an action. ActionSecurityDescription describes the object class and the required permissions for that object class. The following XML example describes the permissions required for SMS collections:

<ClassPermissions>
    <ActionSecurityDescription ClassObject="SMS_Collection" RequiredPermissions="1280" />
</ClassPermissions>

Permission Values

The permission values for the ActionSecurityDescription RequiredPermissions attribute are the same as for the SecurityFlagsDetailDescription class and are as follows:

See Also

Concepts

Configuration Manager Actions
Configuration Manager Action XML
Configuration Manager AssemblyType Action
Configuration Manager Executable Action
Configuration Manager Group Action
Configuration Manager Report Action
Configuration Manager ShowDialog Action
How to Create a Configuration Manager Action
How to Find a Configuration Manager Console Node GUID