In the Enter Resource Scope page, enter at least one pattern string that defines the

Creating and Managing Policy Sets 9-7 Figure 9–5 Add Policy References Page

11. Click Next to view the Policy Set Summary Page.

12. Review the policy set summary information. If you are satisfied with the policy set, click Save. Note that if the validation fails, the policy set is still saved, but in disabled mode. Figure 9–6 Policy Set Summary Page in Create Policy Set Wizard Using WLST Use the following procedure to create a policy set using WLST. 1. Connect to the running instance of WebLogic Server as described in Accessing the Web Services Custom WLST Commands on page 1-6. 2. Begin a repository session using the beginRepositorySession command. The beginRepositorySession command is used to create a session in which the repository will be modified. All creation, modification, or deletion commands 9-8 Oracle Fusion Middleware Security and Administrators Guide for Web Services must be performed in the context of a session. A session can only act on a single document. For example: wls:jrfserver_domainserverConfig beginRepositorySession Repository session begun. 3. Use the createPolicySet command to create a new, empty policy set. The name, type, and attachTo arguments are required. createPolicySetname, type, attachTo, [description=None], [enable=true] Where: ■ name represents the name of the new, empty policy set. ■ type represents the type of policy subject to which the new policy set applies. ■ attachTo represents the scope of resources to which the policy set will be attached. This argument must use a supported expression that defines a valid resource scope in a supported format. For more information, see Defining the Type and Scope of Resources on page 9-19. You do not need to enter the exact domain name for the resource scope. Wildcards are permitted, as shown in the example. For details, see Defining the Type and Scope of Resources on page 9-19. ■ description represents an optional argument that provides a description of the policy set. ■ enable specifies if the policy set is enabled or disabled. This argument is optional. For example, to create a policy set for all services in a domain using only the required arguments: wls:jrfserver_domainserverConfig createPolicySetall-domains-default-web-service-policies, ws-service, Domain Description defaulted to Global policy attachments for Web Service Endpoint resources. The policy set was created successfully in the session. Note that because no description was specified on the command line, a default description was provided. For additional details about the arguments for this command, see Web Services Custom WLST Commands in WebLogic Scripting Tool Command Reference. 4. Specify a description using the setPolicySetDescription command. setPolicySetDescriptiondescription For example, to set the description as Default policies for web services in any domain, use the following command: wls:jrfserver_domainserverConfig setPolicySetDescriptionDefault policies for web services in any domain Description updated.