Downloadable ACL for users only?

vita_user — Mon, 11 Mar 2019 04:12:03 GMT

Hello all,

in ACS 5.4 I need customized ACL for users only.

My scenario:

There is a way to use some "Downloadable ACLs" in authorization profile but I want to define specific ACLs for some exeptions. For example: User A and user B get autorization profile "X". But user B is not allowed to access on a host. This "Deny rule" I will configure with custom attributes in the internal user store.

Is that possible? How can I implement this rule?

best regards,

Stefan

Downloadable ACL for users only?

Tarik Admani — Fri, 20 Dec 2013 02:43:11 GMT

Hi,

You can do this by following these steps:

1. Set a user defined dictionary attribute under System Administration > Dictionary > Identity >Internal Users name it what you want and make sure the value is string

2. Create the DACL in Named Permission Objects under the policy elements section

3. Under the user account you will now see a filed for the dictionary name you called in step 1, make sure the filed matches the dacl you created in step 2

4. Create your authorization profile under "common tasks" Set Dynamic as the DACL drop down select Internal Users and set the value to the attribute you created in step1.

5 map the authorization policy to the access policy using the conditions that will give you these results.

6. test and you should have what you are looking for.

Thanks,

Tarik Admani
*Please rate helpful posts*

topic Downloadable ACL for users only? in Network Access Control

Downloadable ACL for users only?

Downloadable ACL for users only?