Creating Policies - Britive Authorization

Creating Policies

Article summary

Did you find this summary helpful?

Thank you for your feedback

Login to Britive.
Click on Admin->Role & Policy Management->Policies.
The list of policies is displayed. The following actions are available for the policies:
- Manage policy: You can Edit, Clone, Disable, or Delete a policy.
- Enable/Disable policy: You can enable or disable any policy.
- Clone policy: Make a copy of the existing policy to fine-tune as per your requirements.
- Delete policy: Delete the customized policy. You cannot delete the predefined policies.
Click on the Add Policy button to add a new policy.
In the Add Policy tab, enter the following:
- General
  - Enter the Policy Name.
  - Enter the description.
  - Select the Access Type either as Allow or Deny.
- Members:
  - Users: Add All users or add selected users for this policy by clicking on Add Users.
  - Tags: Add All tags or selected tags for this policy by clicking on Add Tags.
  - Service identities: Add All Service Identities or selected service identities for this policy by clicking Add Service Identities.
  - API tokens: Add All API Tokens or selected API tokens for this policy by clicking on Add API Tokens.
- Permissions: Add the existing permissions to this policy or create a new policy and assign it to this policy. See Creating Permissions.
- Roles: Add a role to this policy. Select from the list of predefined roles or user-created roles.
- Generic Conditions:
  - IP based: Select if you want access based on the IP addresses. Enter an IP address or a list of comma-separated IP addresses in the text box.
  - Time based: Select the Start and End Date/TimeDate-time range or Set Time Schedule for applying the policy.
- Approvals: Select whether the user needs approval to access a profile. Enter the following details if you select Approval Required as Yes:
  - Notifications: Select notification medium(s) using the Add Notification button. Before use, notification mediums can be created in the Admin->Global Settings section. For more details, see Creating and Managing Notification Mediums.
    Note:
    You can add only one Slack notification medium per policy.
  - Users: Select the users from the user list. A notification is sent to these users for approval.
  - Tags: Select the tags from the list.
  - Maximum time to Approve: Enter the time in Hours:Minutes format. The approval request expires if it is not approved in this specified time.
  - Approval Validity: Enter the number of days or hours for access validity after the request is approved.
Click Save and Enable after all the configuration is done.

Was this article helpful?

What's Next

Use cases