Combine Conditions

Before you begin

Create policies for resource instances, Create global security roles, or Create scoped security roles.

To increase the logical complexity of your policies or role definitions, you can combine conditions. For example, the policy in Figure 1 specifies 4 conditions, three of which, Access occurs between specified hours, Role: Midwest, and Role: Operator, are combined. The effect of all four policy conditions enables a user to access the resource if any of the following is true:


The time is between 8am and 5pm Central Time and the user is in the 
      MidWest role and is either in the Operator 
      or Deployer role.
      
The user is in the Admin role.


      
The policy in Figure 1 uses both simple conditions, which contain a single
      predicate, and a compound condition which contains multiple predicates. You specify 
      whether a condition is simple or complex at the time that you create the condition 
      (for example, see 
      Create policies for resource instances). 
      Use compound conditions if you want to consider the two predicates as a single unit.      
      

          

Figure 1. Combined Policy Conditions
              
              
          
      
      
      
To combine conditions in a policy or role:
    

    

      
         Create at least two policy or role
        conditions. For example, see Create policies for resource instances.

         
The order in which you create the conditions is insignificant. You can combine 
        conditions that are not adjacent.
      

      

        Select the check box next to each condition that you want to combine.
      

      

        Click the Combine button.
      

      

         (Optional) To change the order of a condition that 
        has been combined, select the check box next to the condition and use the Move Up
        or Move Down buttons.
         
You can also select a block of combined conditions and use 
        the Move Up or Move Down buttons 
       for the entire block.
      
    
  





                    }


                    }


                    (document.images){ dcs_imgarray[dcs_ptr] = new
                    Image; dcs_imgarray[dcs_ptr].src = dcs_src;

                    WT[myMeta.name.substring(3)]=myMeta.content; } if
                    DCSext[myMeta.name.substring(7)]=myMeta.content; } }
                    } }

                    for (N in DCS){P+=A( N, DCS[N]);} for (N in
                    WT){P+=A( "WT."+N, WT[N]);} for (N in DCSext){P+=A(
                    N, DCSext[N]);}

                    //}





                    aCrumb=aCookie[i].split("="); if (crumb==aCrumb[0]){
                    return aCrumb[1]; } } return null; }

                    i=0;i