Policy Server Guides › Policy Server Configuration Guide › Enterprise Policy Management › EPM Use Cases for Protecting Applications › Application Security Policies Based on Roles › Establish a Policy Based on Roles

Establish a Policy Based on Roles

After you have defined the resources and roles, you can group these objects into application security policies.

To create the application security policies

1. Click the Policies tab.

   The Policies pane opens and displays a table listing the configured resources and roles. This table lets you quickly see which roles can be granted access to which resources.

2. Do the following:
   1. Check the Employees role in the Benefits Management row to create a policy that allows all employees to manage their benefits.
   2. Check the Managers role in the Performance Appraisals row to create a policy that allows only managers to access the performance appraisals.
3. Click Submit.

You have created two security policies for the human resources application based on roles.

Note: If you need to edit resources or roles, you must make the changes on the respective tabs and not on the Policies pane.