Out-of-the-box, all agreements are of the Agreement type (wt.access.agreement.AuthorizationAgreement), which is a standard agreement. The Agreement object type is a descendant of WTObject. Some policies set for WTObject are inherited by the Agreement type. For example, out-of-the-box, context managers have the Full Control (All) permission for WTObject. Since the Agreement type is a descendant of WTObject, context managers also have the Full Control (All) permission for objects of the Agreement type. Although context managers have the Full Control (All) permission, they cannot modify agreements unless they are also a member of the agreement managers group. Only agreement managers with the appropriate permissions can create, modify, or delete agreements. For more information, see Out-Of-The-Box Access Control Rules for the Agreement Managers Group.

If your site wants multiple types of agreements to associate with security label values, you can create subtypes of the Agreement type. You are not required to have an agreement subtype for every custom security label or standard security label value, though each custom security label or standard security label value could have a different agreement subtype. Like other subtypes, any subtypes created from the Agreement type inherit from its ancestor type. If you create a subtype from the Agreement type, you can see the subtype when you create an agreement because it is a descendant of the Agreement type. However, if you want only a particular subtype to be associated with a custom security label or standard security label value, then you must update the security labels configuration file to reference the internal name of the appropriate type or subtype. To use context-based agreements, you need to create a subtype of the Agreement type and specify the type in the security labels configuration file as the context-based agreement type. For more information, see the Edit the Security Labels Configuration File step in the Configuring Security Labels section.

In the example configuration detailed in the Configuring Security Labels section, two direct subtypes of the Agreement type were created: Context Based Agreement and Standard Agreement. Under the Context Based Agreement subtype, the Non-Disclosure Agreement subtype was also created. Under the Standard Agreement subtype, the State Export Agreement and Commercial Export Agreement subtypes were created. The State Export Agreement, Commercial Export Agreement, and Non-Disclosure Agreement subtypes were associated with a particular label value. For more information about the subtypes used in the sample configuration, see Security Labels Example Configuration .

If you delete a subtype, the security labels configuration file must be updated to remove all references to the deleted subtype from the AgreementType element and the ContextBasedAgreementType element. Deleting a subtype causes agreements of that subtype to be associated with the parent type of the deleted subtype. For more information about the security labels configuration file, see the Edit the Security Labels Configuration File step in the Configuring Security Labels section.

In the example configuration, the subtypes are used to indicate different kinds of agreements. The State Export Agreement and the Commercial Export Agreement are standard agreements that apply to the Export Control security label and are used in situations dealing with foreign partners. The Non-Disclosure Agreement is internal and deals with company hierarchy. The Non-Disclosure Agreement is a context-based agreement. By having these three types of agreements, it is clear that there are three situations in which an agreement can be used.