...
When creating a Web application, you can associate the defined XACML policies with the HTTP verb verbs of the URL patterns Pattern of it in the Web Application Resource section. In the Access Policy section of a Web URL pattern, select the policy, and then select Permit or Deny as shown below. If you select Permit, the user will be permitted to access, and if you select Deny, the Web app resource access will be denied.
...