The next step in creating a policy is to add users or groups of users to the policy. When you add a user or group to the policy, you create a policy binding between the selected users and the policy. When a user tries to access a protected resource, the policy verifies that the user is part of its policy binding, and then fires the rules included in the policy to see if the user is allowed to access the resource.
To add users to a policy
If the current policy domain contains more than one user directory, the directories appear as tabs contained in the User tab.
The Policy Users/Groups Dialog opens.
The opposite procedure removes users from the Current Members list.
You can select multiple entries by holding the CTRL or SHIFT key and clicking on entries in one of the Members lists. When you select multiple entries and click one of the Arrow buttons, the Policy Server User Interface moves all of the selected entries.
Individual users are not displayed automatically. However, you can use the Search utility to find a specific user within one of the listed groups. Different types of user directories must be searched differently.
| Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |