keycloak-scim/authorization_services/topics/policy/user-policy.adoc
2017-02-14 10:07:54 +01:00

28 lines
No EOL
916 B
Text

[[_policy_user]]
=== User-Based Policy
You can use this type of policy to define conditions for your permissions where a set of one or more users is permitted to access an object.
To create a new user-based policy, select *User-Based* in the dropdown list in the upper right corner of the permission listing.
.Add a User-Based Policy
image:../../{{book.images}}/policy/create-user.png[alt="Add User-Based Policy"]
==== Configuration
* *Name*
+
A human-readable and unique string identifying the policy. A best practice is to use names that are closely related to your business and security requirements, so you
can identify them more easily.
+
* *Description*
+
A string containing details about this policy.
+
* *Users*
+
Specifies which users are given access by this policy.
+
* *Logic*
+
The <<fake/../logic.adoc#_policy_logic, Logic>> of this policy to apply after the other conditions have been evaluated.