Creating a new policy¶

This chapter describes the steps to create a new policy, assign subjects and define the rules which actions are allowed on the specified set of resources.

A new policy serves as a set of established guidelines that define specific rules, steps, and standards for users to follow when accessing, interacting with, and managing data and resources.

To create a policy, proceed as follows:

1. In the "Settings" application, click the "Policies" tab in the left navigation.
2. Click "Create Policy".
3. Enter the policy name and description.
4. Click "Create policy".

The new policy is created successfully.

Assigning users or user groups to the policy¶

To assign users or user groups to the created policy, proceed as follows:

1. Select the policy to which you want to assign users or user groups within the "Policies" screen.
2. Click "Add users" to add users or "Add user groups" to add user groups.
3. Select the users or user groups to be assigned to this policy from the "Edit assignment" screen and click "Next".
4. Click "Save".
5. Click to activate the policy.

The selected users or user groups are successfully added to the policy.

Adding rules to the policy¶

To add rules to the policy, proceed as follows:

1. Select the policy to which you want to add a rule within the "Policies" screen.
2. Click "Add rule".
3. In the "Resource Selection" step, select between Assets, IDL Folders or Resource groups then click "Next".
   
   
4. In the "Rule Details" step, select your preferred propagation depth and proceed "Next". You can select from the following options: "Only selected", "Direct children" and "All children".
   
5. In the "Actions" step, select the required actions to be enabled for the assigned users or user groups.
   
6. Click "Save".
   

The policy must be activated to be available for the assigned users or user groups with the configured rules. For activation steps, refer to the section Activating or deactivating a policy.

It is possible to edit or delete the policy by clicking "Edit" or "Delete" button respectively.
For more information on policies, refer to the section Resource Access Management.