Overview of Access Model and Control Elements

Access models and controls may use elements that are configured separately from the models and controls themselves. These include entitlements, global conditions, and user-defined access points.

An entitlement is a set of related access points. A global condition defines exemptions from access analysis that apply to all models and controls. User-defined access points trace specific paths to access grants.

In addition, you must establish global user IDs before you can create or run access models or controls. (See Global Users.)