Evaluating Policies Features of Access Policies

16-8 Oracle Fusion Middleware Users Guide for Oracle Identity Manager

6. Click Continue.

The Create Access Policy - Step 2: Select Resources to provision page is displayed. 7. Specify the resource to be provisioned for this access policy. Search for resources by using the filter search menu. ■ Select the name of the resource from the results table, and then click Add. ■ The names of the desired resources to provision appear in the Selected list. If you want to create an access policy that only denies resources, click Continue without selecting a resource. ■ To unassign the selected resources, highlight the resource in the Selected list and click Remove.

8. Click Continue.

If there is a form associated with this resource, the subsequent pages display the required fields. Otherwise, the Create Access Policy - Step 2: Select Resources to Revoke page is displayed. It is recommended that you do not specify policy defaults for passwords and encrypted attributes. 9. Specify whether or not access policies are to be revoked if they no longer apply. Select the check boxes for the resources you want to revoke automatically from the results table.

10. Click Continue.

The Create Access Policy - Step 3: Selected Resources to deny page is displayed. 11. Use this page to select resources to be denied by this access policy. To select resources to be denied: a. Select the resources from the results table.

b. Click Add to place the resource in the Selected list.

You must select at least one resource to deny if you have not selected any resources to be provisioned. Selecting the same resources to be denied as to be provisioned will automatically unassign them from the resources to be provisioned selection. Similarly, in Step a, assigning the same resources to be provisioned as you have already selected to be denied will automatically remove them from the resources to be denied selection. You can remove the resources that were selected to be denied. You do this by selecting those resources from the Selected list, and clicking Remove. c. Click Continue. The Create Access Policy - Step 4: Select Roles page is displayed. 12. Use the Create Access Policy - Step 4: Select Group page to associate a group with the access policy. 13. To associate a role with this access policy: ■ Select the role from the results table, and then click Add. You must select at least one role. The names of the selected roles appear in the Selected list. ■ You can delete the role name by clicking Remove. 14. Click Continue.