Policy Server Guides › Policy Design Guide › Implementing Policy-based Security › Strategies for Managing Security and Users › How the End-user Experience Is Managed › How Privileges Are Established

How Privileges Are Established

In a policy, the privilege to access a resource is established by adding a rule to a policy. Rules identify specific resources and either allow or deny the user access to the resources. A single policy can establish privileges for many users: policies can be associated with an individual user, a user group, or the members of an entire user directory.

For example, in the following graphic:

• Group 1 has been assigned Rule A and can access resources 1 & 2,
• Group 2 has been assigned Rule B and can access resources 3 & 4, and
• Group 3 has been assigned both rules and can access all resources.