Policy Managers Guide

Introduction

Document Scope and Audience

Guide to this Document

Related Documentation

Security Policies Overview

What is a Security Policy?

Closed-World Security Environment

Policy Components

Resources

Actions and Action Groups

Identities

Identity Attributes

Groups

Users

Policies

Roles and Role Mapping Policies

Authorization Policies

Delegation

Summary of Policy Differences

Extensions

Constants

Dynamic Attributes

Evaluation Functions

Writing Policies

Policy Implementation: Main Steps

Access Decision Process

Authentication Service

Role Mapping Service

Authorization Service

Credential Mapping Service

Authorization and Role Mapping Engine

Using the Entitlements Administrative Application

Overview

Organizations

Identity Directories

Groups

Users

Identity Attributes

Administrator Roles

Applications

Application Roles

Resources

Actions and Action Groups

Role Policies

Authorization Policies

Policy Reports

Policy Simulation

Extensions

Application Administrators

Deployment

Distributing SSM Configurations

Distributing Policies

Advanced Topics

Policy Constraints

Syntax

Comparison Operators

Regular Expressions

String Comparisons

Boolean Operations

Constraint Sets

Policy Extensions

Constants

Attributes

Evaluation Functions

Authorization Caching Expiration Functions

Response Attributes

queryResources and grantedResources

Policy Inheritance

Group Inheritance

Direct and Indirect Group Membership

Restricting Policy Inheritance

Resource Attribute Inheritance

Policy Simulation

Overview

Scope, Limitations, and Requirements

Creating and Running a Simulator

Policy Simulation Steps

Policy Simulation Log Files

Sample Policy Simulation

Importing and Exporting Policy Data

PolicyIX

Policyloader

Policyexporter

Authorization Caching

Authorization Cache Operation

Configuring Authorization Caching

Authorization Caching Expiration Functions