Policy Server Guides › Policy Server Configuration Guide › Enterprise Policy Management › EPM Use Cases for Protecting Applications › Application Security Policies Based on Roles › Create an Attribute Mapping for Group Membership

Create an Attribute Mapping for Group Membership

To indicate that a subset of the employees at Acme-Financial are Managers, create an attribute mapping that maps to the Managers group membership.

Note: The name of the LDAP user directory for this use case AcmeLDAP.

To create an attribute mapping for group membership:

1. Click Infrastructure, Directory, User Directory, Modify Directory.
2. Select the directory you want to modify.

   The Modify AcmeLDAP dialog opens.

3. Click Create in the Attribute Mapping List.

   The Create Attribute Mapping dialog opens.

4. Complete the fields in the General group box as follows:
   • Name

     IsManager

   • Description

     Defines the Managers group.

5. Select the Group radio button in the Properties group box, the enter the following:
   • Definition

     cn=managers,ou=Groups,o=acme-financial.com

   The value in the Definition field reflects how the group is defined in the user directory, as indicated in the use case introduction.

6. Click OK.

   You return to the user directory dialog.

7. Click Submit to submit the changes.

You have now defined an attribute called IsManagers for the group cn=managers,ou=Groups,o=acme-financial.com.