Quickstart: Create a policy through Policy Manager (Settings application)¶
Prerequisites¶
For creating a policy, ensure that you have tenantadmin role assigned.
Note
During the first stage of general availability, by default, Secure Data Sharing Policies are not activated in your environment. To gain access, please contact support team. Once the support team processes the activation request, it takes around 1 hour to reflect the change (i.e. Policy Editor to appear in "Settings" application).
Create a Policy and assign users¶
To create a policy, proceed with the following steps:
- In the "Settings" application, click "Policies" tab in the left navigation.
- Click "Create Policy".
- Enter the policy name and description and click "Create policy".
- Click "Save".
- To activate the policy, click "Activate".
Assign users or user groups to the policy¶
To assign users or user group to the created policy, proceed with the following steps:
- In the "Policies" screen, select the policy for which you want to assign users or user groups.
- To add users, click "Add users" and to add user groups, click "Add user groups".
- In the "Edit assignment" window, select the users/user groups to be assigned to this policy and click "Next".
- Click "Save".
- To activate the policy, click "Activate".
The selected users/ user groups are successfully added to the policy.
Add rules to the policy¶
To add rules to the policy, proceed with the following steps:
- In the "Policies" screen, select the policy for which you want to add rule.
- Click "Add rule".
- In the "Resource selection" step, select the assets and the corresponding resources and click "Next".
- In the "Rule Details" step, select the "Propagation Depth" and click "Next". The available options are: "Only selected", "Direct children" and "All children".
- In the "Actions" step, select the required actions that needs to be enabled for the assigned users/user groups.
- Click "Save".
- To activate the policy, click "Activate".
After activating the created policy, the user/users assigned to this policy will now be able to view the assigned assets in their tenant.
Note
After creating/updating an "active" policy, it takes around 5 minutes for this change to take effect for the access checks in platform services. Similarly, any changes in Usergroup operations (like move, rename, add/remove users, etc.) also takes around 5 minutes to take effect.
It is possible to edit, delete or deactivate the policy at any time.
It is possible to edit or delete the policy by clicking "Edit" and "Delete" button respectively. You can also deactivate the policy at any required time by clicking "Deactivate" button.
For more information on policy, refer Settings documentation.