Admin
Add Role
Role Name
view:posts
edit:posts
delete:posts
view:comments
admin
viewer
John Doe
admin
viewer
Policy
Conditions
Action
Effect
Status
Engineering Full Access
department equals engineering
level greaterThan 2
full:access
allow
No Match
Contractor View Only
isContractor equals true
view:only
allow
No Match
John Doe
department:
engineering
Edit
level:
2
Edit
location:
US
Edit
isContractor:
false
Edit
Post
Document
Folder
Add Resource
Resource
Type
owner
editor
viewer
Post 1
post
Post 2
post
John Doe
viewer
of Post 1
viewer
of Post 2
Post
Document
Folder
Add Resource
Resource
Type
view
edit
delete
Post 1
post
Post 2
post
John Doe
Post 1
view
Post 2
view
close
ABAC (Attribute-Based Access Control)
You can manage the ABAC configuration by clicking the Admin button in the upper-left corner.
Source Code
close
Your attributes do not match any policy that grants access.