Definition Type: ComplexType
Name: AccesstokenBehaviors
Namespace: http://oval.mitre.org/XMLSchema/oval-definitions-5#windows
Containing Schema: windows-definitions-schema.xsd
Abstract
Documentation:
These behaviors allow a more detailed definition of the accesstoken_object being specified.
Collapse XSD Schema Diagram:
Drilldown into resolve_group in schema windows-definitions-schema_xsd Drilldown into include_group in schema windows-definitions-schema_xsdXSD Diagram of AccesstokenBehaviors in schema windows-definitions-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code:
<xsd:complexType name="AccesstokenBehaviors">
    <xsd:annotation>
        <xsd:documentation>These behaviors allow a more detailed definition of the accesstoken_object being specified.</xsd:documentation>
    </xsd:annotation>
    <xsd:attribute name="include_group" type="xsd:boolean" use="optional" default="true">
        <xsd:annotation>
            <xsd:documentation>If a group security principle is specified, this behavior specifies whether to include the group or not. For example, maybe you want to check the access tokens associated with every user within a group, but not the group itself. In this case, you would set the include_group behavior to 'false'. If the security_principle is not a group, then this behavior should be ignored.</xsd:documentation>
        </xsd:annotation>
    </xsd:attribute>
    <xsd:attribute name="resolve_group" type="xsd:boolean" use="optional" default="false">
        <xsd:annotation>
            <xsd:documentation>If a group security principle is specified, this behavior specifies whether to resolve the group into its list of users. For example, to check the access tokens of every user in a group, you could specify the group security_principle and then set the resolve_group behavior to 'true'. If the security_principle is not a group, then this behavior should be ignored.</xsd:documentation>
        </xsd:annotation>
    </xsd:attribute>
</xsd:complexType>
Collapse Child Attributes:
Name Type Default Value Use
include_group win-def:include_group true Optional
resolve_group win-def:resolve_group false Optional
Collapse Derivation Tree:
Collapse References:
win-def:behaviors