Administration Guide › Custom Roles and Policies › Maintaining User Accounts and Access Policies › Example: Limit Access to Work Days

Example: Limit Access to Work Days

You can restrict the time of day or days of the week a given user group can access CA Enterprise Log Manager by creating a calendar for the times to grant access, creating a custom role, creating a new policy based on the policy providing CA Enterprise Log Manager access, and assigning the calendar and custom role to this policy.

Example--Limit External Auditors' Access to CA Enterprise Log Manager to Weekdays

To limit certain group's access to CA Enterprise Log Manager to business days, create a calendar for weekdays and add it to the policies that grant auditors specific access.

For example, if you wanted to limit External Auditor's access to CA Enterprise Log Manager to business hours, create a calendar that specifies weekdays, Monday through Friday, 9 a.m. to 5 p.m., for all months of the year.

Create a role for external auditors.

Open the CALM Application Access scoping policy and save it as ExternalAuditors-CALM Application Access, select the Weekdays 9-5 calendar and select the user group External Auditors as the identity.

Important! Use the Calendar feature only with policies that grant access. Do not use it with policies that deny access.

More information:

Create a Calendar

Create an Application User Group (Role)

Create a Policy Based on an Existing Policy

Add a Calendar to a Policy