28 lines
926 B
Text
28 lines
926 B
Text
|
[[_policy_client]]
|
||
|
|
=== Client-Based Policy
|
||
|
|
|
||
|
|
You can use this type of policy to define conditions for your permissions where a set of one or more clients is permitted to access an object.
|
||
|
|
|
||
|
|
To create a new client-based policy, select *Client* in the dropdown list in the upper right corner of the policy listing.
|
||
|
|
|
||
|
|
.Add a Client-Based Policy
|
||
|
|
image:../../{{book.images}}/policy/create-client.png[alt="Add Client-Based Policy"]
|
||
|
|
|
||
|
|
==== Configuration
|
||
|
|
|
||
|
|
* *Name*
|
||
|
|
+
|
||
|
|
A human-readable and unique string identifying the policy. A best practice is to use names that are closely related to your business and security requirements, so you
|
||
|
|
can identify them more easily.
|
||
|
|
+
|
||
|
|
* *Description*
|
||
|
|
+
|
||
|
|
A string containing details about this policy.
|
||
|
|
+
|
||
|
|
* *Clients*
|
||
|
|
+
|
||
|
|
Specifies which clients are given access by this policy.
|
||
|
|
+
|
||
|
|
* *Logic*
|
||
|
|
+
|
||
|
|
The <<fake/../logic.adoc#_policy_logic, Logic>> of this policy to apply after the other conditions have been evaluated.
|