Configuration Guide › CA SiteMinder Integration › SiteMinder Operations › How to Configure Access Roles › How to Create an Access Role › Define Member Policies for an Access Role

Define Member Policies for an Access Role

A member policy defines a member rule and scope rules for a role. You can define several member policies for one role. For each policy, users who meet the condition in the member rule has the scope for using the role that is defined in the policy.

Follow these steps:

1. Select the Members tab.
2. Select Add to define the member policies.
3. (Optional) On the Member Policy page, optionally define a member rule for who must be able to use this role.

   Defining a member rule automatically assigns the role to users who match the criteria in the member policy.

   Note: Define member policies that use only directory attributes, for example: title=Manager. If you define member policies referencing to those objects not stored in the user directory such as admin roles, SiteMinder cannot be able to resolve the reference.

4. Verify that the Member Policy appears on the Members tab.

   To edit a policy, click the arrow symbol on the left. To remove it, click the minus sign icon.

5. On the Members tab, enable the Administrators can add and remove members of this role check box.

   Once you enable this feature, you define the Add Action and Remove Action. These actions define what happens when a user is added or removed as a member of the role.