You can add policies to existing Policy Objects using Active Roles Console.
To add a policy to a Policy Object
-
In the Console tree, navigate to Configuration > Policies > Administration.
-
Select the folder that contains the Policy Object that you want to add policies to.
-
In the details pane, right-click the Policy Object, then click Properties.
-
To start the Add Provisioning Policy Wizard or the Add Deprovisioning Policy Wizard, select the Policies tab, then click Add.
-
-
Based on which type of policy you are configuring (provisioning or deprovisioning), choose how to proceed:
NOTE: Consider the following when adding policies to Policy Objects:
-
Active Roles processes policies in the order they are listed on the Policies tab. To change the order, select a policy and click or to move the policy up or down in the list, respectively.
-
If a Policy Object is in effect within Active Roles, any changes to the policy list are applied automatically.
You can modify policies in existing Policy Objects using Active Roles Console.
To view or modify a policy in a Policy Object
-
In the Console tree, navigate to Configuration > Policies > Administration.
-
Select the folder that contains the Policy Object that you want to view or modify.
-
In the details pane, right-click the Policy Object, then click Properties.
-
On the Policies tab, select the policy that you want to view or modify, and click View/Edit.
-
Use the tabs in the Policy Properties dialog to view or modify policy settings.
NOTE: The tabs in the Policy Properties dialog provide the same options as the wizard for configuring the policy.
-
-
Based on which type of policy you are configuring (provisioning or deprovisioning), choose how to proceed:
NOTE: Active Roles processes policies in the order they are listed on the Policies tab. To change the order, select a policy and click or to move the policy up or down in the list, respectively.
You can remove policies from existing Policy Objects using Active Roles Console.
To remove a policy from a Policy Object
-
In the Console tree, navigate to Configuration > Policies > Administration.
-
Select the folder that contains the Policy Object that you want to modify.
-
In the details pane, right-click the Policy Object, then click Properties.
-
On the Policies tab, select the policy that you want to delete, and click Remove, then click Yes.
-
To save your changes, in the Properties dialog, click Apply.
NOTE: If a Policy Object is in effect within Active Roles, any changes to the policy list are applied automatically.
For troubleshooting purposes, you can block policies that are in effect without deleting them using Active Roles Console.
To block all policies in a Policy Object
-
In the Console tree, navigate to Configuration > Policies > Administration.
-
Select the folder that contains the Policy Object that you want to modify.
-
In the details pane, right-click the Policy Object, then click Properties.
-
On the Policies tab, select Disable all policies included in this Policy Object and click Apply.