Page Comparison

Follow the instructions below to create an XACML policy.1.

1. Sign in. Enter your user name and password to log on to the Management Console.

...

1. Click the "Main" button to access the "Entitlement" menu.
   Image Modified

...

1. From the "Main" menu, select "Administration" under "Entitlement."

...

1. Click on the "Add New Entitlement Policy" link to access the "Create Entitlement Policy" page.
   

Image Removed

1. Image Added
2. The Add New Policy page appears. Select the policy creation method you wish to use.
   Image Added
3. On the "Create

...

1. XACML Policy" page, specify the required settings:
   

   • Simple Policy Editor
     Image Added

     Panel
     title Content to be filled
     Entitlement Policy Name - Specify the name of the policy. This field is mandatory. Entitlement Policy Description - Enter a description of the policy. This policy is based on - Select one of Resource, Subject, Environment and Action from the dropdown. Resource which is equals to - Enter a value here. Add Child Resource-  Fill out the name of the child resource. Select either the age email, role or UserName from the dropdown. Enter the value for the field chosen above. Select either Time, Domain, DateTime or Date from the drop down. Enter the value for the field chosen above. Click the add button.

   • Basic Policy Editor
     Image Added

     Panel
     Entitlement Policy Name - Specify the name of the policy. This field is mandatory. Rule Combining Algorithm - Select a rule-combining algorithm from the drop-down menu. The following algorithms are available:

...

1. • Deny Overrides Permit

...

Image Removed

...

1. • Overrides First Applicable Deny Unless Permit Permit Unless Deny Specify the elements that the policy applies to: Resource Names - Specify the name of a resource. User

...

1. • Attribute - Specify a user

...

1. • attribute. Action Name - Specify an action name. Environment Name - Specify the environment name. Define Entitlement Rules: Rule Name - Specify the role name. This field is mandatory. Rule Effect - Select the rule effect: permit or deny. Resource Names - Specify the resource name. User Attribute - Specify a user attribute. Action Name - Specify

...

1. • the action name. Environment Name - Specify the environment name.

   • Standard Policy Editor
     Image Added
   • Policy Set Editor
     Image Added

   • Import Existing Policy
     Image Added

     Panel
     Click Choose File and browse to the location of the policy in your local machine.

   • Write Policy in XML
     Image Added

     Panel
     Create your own policy in XML.

2. Click Finish/Upload depending on the option you chose to create your policy.

Use the drop-down menu to select the level of matching with the specifications in the text field:

• equals to
• at-least-one-matching-member-of
• at-least-one-matching-reg-ex-member-of
• matching reg-ex to
• a matching set of
• a matching reg-ex set of

Image Removed

...

• Rule Name - Specify the role name. This field is mandatory.
• Rule Effect - Select the rule effect: permit or deny.
• Resource Names - Specify the resource name.
• User/Role Name(s) - Specify a user or a role name.
• User Attribute - Specify a user attribute.
• Action Name - Specify the action name.
• Environment Name - Specify the environment name.

Use the drop-down menu to select the level of matching with the specifications in the text field:

• equals to
• in
• at-least-one-member-of
• a sub set of
• matching reg-ex to
• a matching set of

Image Removed

8. Click on the "Add" button.

Image Removed

9. A new role is displayed in the pane below.

Image Removed

From here, you can edit and delete the role.

10. Once all settings are specified, click on the "Finish" button.

Image Removed