Policy Server Guides › Policy Server Configuration Guide › Enterprise Policy Management › EPM Use Cases for Protecting Applications › Application Security Policies with User Mapping and Named Expressions › Configure the Customer Role

Configure the Customer Role

After establishing a resource, you create an application role that lets customers make Web-based purchases as long as they have not exceeded their credit limit.

Note: The following procedure assumes you are creating a new object. You can also copy the properties of an existing object to create an object. More information exists in Duplicate Policy Server Objects.

To create this credit-based role

1. Click the Roles tab.
2. Click Create.

   The Create Role dialog appears.

3. Verify that the Create radio button is selected, and click OK.

   The Create Role dialog opens.

4. Enter values for the fields in the General group box. For this use case, enter the following:
   • Name

     PurchasewithCredit

   • Description

     Indicates that the customer will use credit to pay for their purchases.

5. Enter an expression in the Membership Expression group box. For this use case, enter the following:
   • Expression

     @IsUnderCreditLimit

   The role expression is the product of the two virtual user attribute expressions #Balance and #CreditLimit, which calculate whether or not the user has exceeded his credit limit.

6. Click OK.

You have created a role called PurchasewithCredit, whose value is the combination of two named expressions.