Creating Additional Conditions of Access Check

On using attribute-based access control method, additional access check conditions can be set in each of policy rules.

To create additional conditions of access check, open the Create Condition dialog box:

  1. Select a rule.

  2. Click the button to the right from condition string:

After executing the operation, the Create Condition dialog box opens:

Create a condition of access control using attributes (operands), functions and operators.

To create formulas and expressions, see theCreating Formulas and Expressions article.

Available Attributes

To create a condition, the system and custom attributes that are contained in the attribute-based access control are available.

System attributes, for which a value based on information stored in the system, can be obtained, are divided into groups:

Object attributes

Subject attributes

Environment attributes

See also:

Setting Up Attribute-Based Access Control Method | Adding Access Check Rules and Policies