attribute change rul in identoty audit

[jason2329]

I have a customer that has novell audit and moving to identity audit. They have rules for changes in there atributes how do I create the same rule in identity audit here is one of there rules
if sub target matches accesstofile