You can create a member rule for a policy set, so that the policy set applies only to certain users. The rule is evaluated before evaluating identity policies in the set, which can save significant time. For example, if the member rule limits the identity policy evaluation to 10 percent of users, that rule would save 90 percent of the evaluation time.
Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |