Previous Topic: Configure a Policy

Next Topic: Add Rules to a Policy

Add Users to a Policy

The next step in creating a policy is to add users or groups of users to the policy. When you add a user or group to the policy, you create a policy binding between the selected users and the policy. When a user tries to access a protected resource, the policy verifies that the user is part of its policy binding, and then fires the rules included in the policy to see if the user is allowed to access the resource.

To add users to a policy

  1. In the Policy Dialog, click on the Users tab.

    If the current policy domain contains more than one user directory, the directories appear as tabs contained in the User tab.

  2. Click the Add/Remove button.

    The Policy Users/Groups Dialog opens.

  3. To add users to the policy, select an entry from the Available Members list and click on the Left Arrow button, which points to the Current Members list.

    The opposite procedure removes users from the Current Members list.

    You can select multiple entries by holding the CTRL or SHIFT key and clicking on entries in one of the Members lists. When you select multiple entries and click one of the Arrow buttons, the Policy Server User Interface moves all of the selected entries.

    Individual users are not displayed automatically. However, you can use the Search utility to find a specific user within one of the listed groups. Different types of user directories must be searched differently.

  4. Click OK to save your changes and return to the Policy Dialog.

More information:

Policy Dialog

Users/Groups Dialog

View User Directory Contents

Policy Binding Establishment