keycloak-scim/authorization_services/topics/policy/logic.adoc

[[_policy_logic]]
=== Positive and Negative Logic

Policies can be configured with positive or negative logic. Briefly, you can use this option to define whether the policy result should be kept as it is or be negated.

For example, suppose you want to create a policy where only users *not* granted with a specific role should be given access. In this case,
you can create a role-based policy using that role and set its *Logic* field to *Negative*. If you keep *Positive*, which
is the default behavior, the policy result will be kept as it is.
[RHSSO-599] - Replacing link with fake 2016-11-29 15:30:53 +00:00			`[[_policy_logic]]`
RHSSO-599, 598: fix headers and remaining links issues 2016-12-01 14:32:11 +00:00			`=== Positive and Negative Logic`
First bucket of documentation from docbook. 2016-05-31 20:36:14 +00:00
General cleanup and edits of the documentation 2016-11-15 21:34:20 +00:00			`Policies can be configured with positive or negative logic. Briefly, you can use this option to define whether the policy result should be kept as it is or be negated.`
First bucket of documentation from docbook. 2016-05-31 20:36:14 +00:00
General cleanup and edits of the documentation 2016-11-15 21:34:20 +00:00			`For example, suppose you want to create a policy where only users not granted with a specific role should be given access. In this case,`
			`you can create a role-based policy using that role and set its Logic field to Negative. If you keep Positive, which`
First bucket of documentation from docbook. 2016-05-31 20:36:14 +00:00			`is the default behavior, the policy result will be kept as it is.`