Create custom security policy
Custom security policies can be created if you would want to create a Security policy from the scratch by selecting the assets,user groups and the associated roles.
To create a custom security policy:
- Click from the main navigation menu.
- Navigate to the Policies tab.
- Click + Create Security Policy to open the Create Security Policy page.
- Enter the name and description of the policy.
- Click Next.
- Add conditions by selecting the appropriate assets that have to be a part of the Security Policy.
- Multiple conditions can be added and the execution can be selected based on match any or match all conditions.
- The Preview option displays details of the assets that are selected from the specified conditions.
- Click Next.
- Select the User groups and Users that have to be a part of the security policy.
- Click Next.
- The summary page displays the details of the security policy, the assets matching the specified condition, asset type and the associated user groups, users, and roles.
- Click Finish.
Conditions to select assets in security policies
The conditions in the security policy filter can be configured to include those assets that satisfy the defined conditions.
The filter is displayed in the below format in the security policy page.
<asset><operator><value>
- Asset: The asset drop down displays the properties fetched from Technical
Assets, Business Assets, Models and Policies in the Data Integrity Suite. Note: Only those assets of primitive datatypes such as text, boolean and int are fetched in the properties and available to be selected in the filter.
-
Operator: Operators are used to filter or search for values based on their pattern or position within a string. The Operators available vary depending on the asset selected in the first drop down.
-
Value: The parameter in the third field is dynamic and changes based on the values selected in the first two fields of the filter. It allows you to either select a value from the dropdown, enter an exact value, or choose between true and false, depending on the conditions configured in the filter.
Operators available in the filter
| Operator | Description |
|---|---|
| is | Selects records where a field's value is equal to a specified value. For example, Age is 30 selects records where the age is 30. |
| is not | Selects records where a field's value is not equal to a specified value. For example, city is not Chicago, displays all the values excluding Chicago. |
| in | Selects records where a field's value matches any value in a specified list. For example, City in ['New York', 'Los Angeles'] selects records with cities matching either "New York" or "Los Angeles." |
| not in | Selects records where a field's value does not contain any value in a specified list. For example, City not in ['New York', 'Los Angeles'] selects records for those cities that do not have the values as "New York" or "Los Angeles." |
| contains | Selects records that contain a literal or field value. For example, firstname contains [‘Abc’] selects all the records whose first name contains Abc. |
| does not contain | Selects records that do not contain a literal or field value. For example, firstnamedoes not contain[‘Abc’] selects all the records whose first name does not contain the literal Abc. |
| starts with | Selects records that start with a specified value. For example, first namestarts with [‘Ash’] includes only those records whose first name start with Ash. |
| ends with | Selects records that ends with a specified value. For example, first name ends with [‘def’] includes only those records whose first name ends with def. |
Add user groups and users
Add user group
- Click Add User Group.
- Select the User Groups and assign the Roles that have to be associated with the user group.
- Click Add.
Add users
To add users to the security policy:
- Click Add User.
- Select the Users and assign the Roles that have to be associated with the users.
- Click Add.
Edit security policy
To modify a security policy by changing assets, assigned users, or user groups:
- Click from the main navigation menu.
- Navigate to the Policies tab.
- Use the Search to locate the security policy or click the ellipsis next to their name and select Edit
- Once the Edit Policy dialog opens, modify the assets, users, user groups and/or roles.
- Click Assign to open the Assign User Groups and Roles dialog where you can add additional user groups and corresponding roles and click Assign.
- On the Edit Policy dialog, click Save.
Duplicate security policy
To duplicate an existing security policy:
- Click from the main navigation menu.
- Navigate to the Policies tab.
- Use the Search to locate the security policy or click the ellipsis menu next to their name and select Duplicate.
- On the Duplicate Security Policy dialog, click Duplicate.
Delete security policy
To delete a security policy:
- Click from the main navigation menu.
- Navigate to the Policies tab.
- Use the Search to locate the user group or click the ellipsis next to their name and select Delete.
- The Delete Security Policy dialog box opens with the name of the security policy you would like to delete as well as a message indicating that deleting the security policy removes all of the assets.
- Click Delete.
Enable security policy
To enable a security policy:
- Click from the main navigation menu.
- Navigate to the Policies tab.
- Use the Search to locate the security policy or click the ellipsis next to their name and select Enable.
- The Enable Security Policy dialog box opens with the name of the security policy you would like to enable as well as a message indicating that disabling this security policy causes users and user groups to perform actions on the assets.
- Click Enable.
Disable security policy
To disable a security policy:
- Click from the main navigation menu.
- Navigate to the Policies tab.
- Use the Search to locate the security policy or click the ellipsis next to their name and select Disable.
- The Disable Security Policy dialog box opens with the name of the security policy you would like to disable as well as a message indicating that disabling this security policy causes users and user groups to no longer be able to perform actions on the assets.
- Click Disable.