Policy Server Guides › Policy Server Configuration Guide › Enterprise Policy Management › EPM Use Cases for Protecting Applications › Application Security Policies Based on Roles › Create Employee and Manager Roles

Create Employee and Manager Roles

After defining the specific components of an application that require protection, you can specify the roles that users may be assigned. Roles are the set of users who have access to a particular resource. These sets of users are defined by an expression.

Note: The following procedure assumes you are creating a new object. You can also copy the properties of an existing object to create an object. More information exists in Duplicate Policy Server Objects.

To create a role

1. Click the Roles tab.
2. Click Create.

   The Create Role pane appears.

3. Verify that the Create radio button is selected, and click OK.
4. Enter values for the fields in the General group box. For this use case, enter the following:
   • Name

     Employees

   • Description

     All employees of Acme Financial Services

5. Enter an expression in the Membership group box. For this use case, enter the following:
   • Expression

     TRUE

   To form an expression, you can use the Expression Editor. To access the editor, click Edit.

6. Click Submit.
7. Repeat steps 2–4 to create a second role called Managers, as follows:
   • Name

     Managers

   • Description

     Managers of Acme Financial Services

   • Expression

     BOOLEAN(IsManager)

     IsManager is the attribute mapping that was defined for the LDAP user directory.

Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.