...
On the navbar, expand Identity Administration and select Groups.
Search for a group name.
Click on the group logon name hyperlink to open the group’s view-one page.
Select the Advanced tab and scroll down to select Attribute-Based Membership Policies.
Click on the + icon in the above image to create a new membership policy for this group. The below page will open. Enter the name of the policy, select a policy type. Check the IsEnable check box. Select the minute interval (say 15 min) and click on Save.
This will create the PBAC membership policy and queue it for compilation.
Add a PBAC Attribute to a PBAC Membership Policy
You can add a PBAC attribute to an existing PBAC membership policy. Click on the Name link of the PBAC Membership policy you want to add an attribute to. This will open the view-one page of this PBAC membership policy. Select the Attribute Conditions (Field Types) link.
Click on the + icon to add an attribute to this policy that you added to the person earlier. Search for the name of the PBAC membership policy and select it. Select the two values ( sales and IT) check boxes. Select the checkbox If matches all values. Click Save.
The attribute is now added to the PBAC membership policy type.
Verify the Result
After the PBAC membership policy is compiled, it will add the account to the group. This can be checked at the view-one page of the group ( for which the policy was created). Select the Attribute-Based Membership Inbox link. We can see that the account( to which the PBAC attribute was added) is now member of this group.
Insert excerpt | ||||||
---|---|---|---|---|---|---|
|
...