Difference between revisions of "Policy Field Sets and Policies"

From SmartWiki
Jump to: navigation, search
(→‎Adding Policy Field Set to Custom Fields)
 
(23 intermediate revisions by 5 users not shown)
Line 1: Line 1:
−
This gives you the ability to create data categories and assign them to custom fields across your instance.  
+
This gives you the ability to create policy field sets and assign them to custom fields across your instance.
  
−
You can create security policies and attach them to data classes in order to control the visibility of field data across the entire instance.  
+
You can then create security policies and attach them to your policy field sets in order to control the visibility of field data across the entire instance.
  
−
This makes it easy for you to apply data access policies at a global level, for example if you have data sensitivity classes that apply across entire field sets.  
+
This makes it easy for you to apply data access policies at a global level, for example if you have data sensitivity classes that apply across entire field sets.
  
−
These policies apply at the lowest level of security such that no matter where data is accessed from whether it's the object itself, a list view, or a report the visibility of data will be controlled according to each fields categorization and policy and the end user's access level.  
+
These policies apply at the lowest level of security, such that no matter where data is accessed from--whether it's the object itself, a list view, or a report--the visibility of data will be controlled according to each field's categorization and policy and the end user's access level.
  
  
−
==Configuring==
 
  
−
The process of configuring the Data Categories and Policies involves the following steps . . .  
+
==Configuration - Essentials==
−
* Creating Data Categories
+
The process of configuring the Policy Field Sets and Policies involves the following steps . . .
 +
 
 +
* Creating Policy Field Sets
 
* Creating Data Policies
 
* Creating Data Policies
−
* Linking Data Categories and Policies
+
* Linking Policy Field Sets and Policies
−
* Adding Data Category to Custom Fields  
+
* Adding Policy Field Set to Custom Fields
  
  
−
=== Creating Data Categories===  
+
===Creating Policy Field Sets===
−
 
 
 
* Go to [[Global Settings]] - Security tab.
 
* Go to [[Global Settings]] - Security tab.
−
* Click on the Data Categories link. You will be brought to the Data Category Settings page.
+
* Click on the Policy Field Sets link. You will be brought to the Policy Field Set Settings page.
−
* Click on the "New Data Category" button.  
+
* Click on the "New Policy Field Set" button.
−
* You will be brought to the New Data Category Settings page, which consists of the following settings:
+
* You will be brought to the New Policy Field Set Settings page, which consists of the following settings:
−
**ID: unique ID automatically generated on Save
+
** ID: unique ID automatically generated on Save
−
**Category Name: name used to identify the category
+
** Name: name used to identify the policy field set
−
**Description: description for the category 
+
** Description: description for the field set
−
**Category Type: select either Security or Prediction
+
** Type: select either Security or Data Retention
−
**Data Mask  
+
** Data Mask
  
−
[[Image:DataCategory1.png|1100px|border]]
+
[[Image:PolicyFieldSet001.PNG|1100px|border]]
  
−
* Populate the settings and click Save.  
+
* Populate the settings and click Save.
−
* The Data Category Settings page refreshes and exposes 2 additional tabs:
+
* The Policy Field Set Settings page refreshes and exposes 3 additional tabs:
 +
** Standard Fields
 +
** Custom Fields
 
** Linked Policies
 
** Linked Policies
−
** Custom Fields
 
  
−
[[Image:DataCategory2.png|1100px|border]]
+
[[Image:PolicyFieldSet002.PNG|1100px|border]]
  
−
NOTE: If you return to the Data Category Settings page then the category will be listed, with an Edit button to allow updates to be made.  
+
NOTE: If you return to the Policy Field Set Settings page then the field set will be listed, with an Edit button to allow updates to be made.
  
  
−
=== Creating Data Policies===
 
  
 +
===Creating Data Policies===
 
* Go to [[Global Settings]] - Security tab.
 
* Go to [[Global Settings]] - Security tab.
 
* Click on the Data Policies link. You will be brought to the Data Policy Settings page.
 
* Click on the Data Policies link. You will be brought to the Data Policy Settings page.
−
* Click on the "New Data Policy" button.  
+
* Click on the "New Data Policy" button.
 
* You will be brought to the New Data Policy Settings page, which consists of the following settings:
 
* You will be brought to the New Data Policy Settings page, which consists of the following settings:
−
**ID: unique ID automatically generated on Save
+
** ID: unique ID automatically generated on Save
−
**Name: name used to identify the policy
+
** Name: name used to identify the policy
−
**Description: description for the policy
+
** Description: description for the policy
−
**Policy Type: select either Security or Prediction
+
** Policy Type: select either Security or Data Retention
−
**Include Roles: lookup to select the roles that the policy should apply for
+
*** Additional settings will be exposed upon selecting a policy type
−
**Exclude Roles: lookup to select the roles that the policy should not apply for  
+
** Include Roles: lookup to select the roles that the policy should apply for
 +
 
 +
[[Image:DataPolicy001.PNG|1100px|border]]
 +
 
  
−
[[Image:DataPolicy1.png|1100px|border]]
 
  
 +
* Populate the settings and click Save. 
 +
* The Policy Field Set Settings page refreshes and the Linked Policy Field Sets tab is also exposed
  
−
* Populate the settings and click Save.
 
−
* The Data Policy Settings page refreshes and exposes the Action field, with the following 4 options:
 
−
**Edit
 
−
**Read
 
−
**Delete
 
−
**Forbidden   
 
  
−
[[Image:DataPolicy2.png|1100px|border]]
+
====Security Data Policies====
 +
* Selecting the security policy type exposes the Action field, with the following options:
 +
** Edit
 +
** Edit (by Owner Only)
 +
** Read
 +
** Delete
 +
** Forbidden
 +
** View Encrypted Data
 +
** Hide Data In Emulation Mode
  
−
The Linked Data Categories tab is also exposed
+
[[Image:SecurityDataPolicy001.PNG|1100px|border]]
  
 
NOTE: If you return to the Data Policy Settings page then the category will be listed, with an Edit button to allow updates to be made.
 
NOTE: If you return to the Data Policy Settings page then the category will be listed, with an Edit button to allow updates to be made.
  
  
−
===Linking Data Categories and Policies===
 
  
−
If you are editing a Data Category then you can link the current category with an existing Data Policy by going to the Linked Policies tab.
+
====Data Retention Data Policies====
 +
* Selecting the data retention policy type exposes the following options:
 +
** Action
 +
** Entity
 +
** Trigger After
 +
** Date Field to Compare
  
−
If you are editing a Data Policy then you can link the current policy with an existing Data Category by going to the Linked Data Categories tab.
+
[[Image:DataRetentionPolicy001.PNG|1100px|border]]
−
[[Image:DataLinks1.png|1100px|border]]
 
  
−
The functionality for both tabs is the same and is as follows:
+
===Linking Policy Field Sets and Policies===
 +
If you are editing a Policy Field Set then you can link the current category with an existing Data Policy by going to the Linked Policies tab.
  
−
* Start typing the name of the Data Policy or Data Category into the Ajax lookup field and selected from the returned results.
+
If you are editing a Data Policy then you can link the current policy with an existing Policy Field Set by going to the Linked Policy Field Sets tab.
−
* Click on the Add button. 
+
[[Image:LinkedPolicies001.PNG|1100px|border]]
−
* The policy/category will now be listed under the Linked tab.  
 
  
 +
The functionality for both tabs is the same and is as follows:
  
−
==Adding Data Category to Custom Fields ===
+
* Start typing the name of the Data Policy or Policy Field Set into the Ajax lookup field and selected from the returned results.
 +
* Click on the Add button.
 +
* The policy/field set will now be listed under the Linked tab.
  
−
Go to the Data Category tab, which is available against all Custom Fields settings pages, and start typing the name of the Data Category into the Ajax lookup field. Selected from the returned results.
+
===Adding Policy Field Set to Custom Fields===
 +
Go to the Policy Field Set tab, which is available against all Custom Fields settings pages (and specific Standard Fields for Users), and start typing the name of the Policy Field Set into the Ajax lookup field. Selected from the returned results.
  
−
[[Image:DataCategory3.png|1100px|border]]
+
[[Image:CustomFieldPolicy001.PNG|1100px|border]]
  
−
The policy/category will now be listed under the Linked tab.  
+
The policy/category will now be listed under the Policy Field Set tab.
  
−
 
+
The custom field will also appear under the Custom Fields tab for the associated Policy Field Set .
  
 +
<span id="bs_comment:@@@CMT0@@@" class="mceNonEditable comment" data-bs-type="comment" data-bs-id="0"> abac ABAC Abac </span>
 
[[Category:System Management]][[Category:Custom Fields]][[Category:Security]]
 
[[Category:System Management]][[Category:Custom Fields]][[Category:Security]]

Latest revision as of 09:35, 25 May 2023

This gives you the ability to create policy field sets and assign them to custom fields across your instance.

You can then create security policies and attach them to your policy field sets in order to control the visibility of field data across the entire instance.

This makes it easy for you to apply data access policies at a global level, for example if you have data sensitivity classes that apply across entire field sets.

These policies apply at the lowest level of security, such that no matter where data is accessed from--whether it's the object itself, a list view, or a report--the visibility of data will be controlled according to each field's categorization and policy and the end user's access level.


Configuration - Essentials

The process of configuring the Policy Field Sets and Policies involves the following steps . . .

  • Creating Policy Field Sets
  • Creating Data Policies
  • Linking Policy Field Sets and Policies
  • Adding Policy Field Set to Custom Fields


Creating Policy Field Sets

  • Go to Global Settings - Security tab.
  • Click on the Policy Field Sets link. You will be brought to the Policy Field Set Settings page.
  • Click on the "New Policy Field Set" button.
  • You will be brought to the New Policy Field Set Settings page, which consists of the following settings:
    • ID: unique ID automatically generated on Save
    • Name: name used to identify the policy field set
    • Description: description for the field set
    • Type: select either Security or Data Retention
    • Data Mask

PolicyFieldSet001.PNG

  • Populate the settings and click Save.
  • The Policy Field Set Settings page refreshes and exposes 3 additional tabs:
    • Standard Fields
    • Custom Fields
    • Linked Policies

PolicyFieldSet002.PNG

NOTE: If you return to the Policy Field Set Settings page then the field set will be listed, with an Edit button to allow updates to be made.


Creating Data Policies

  • Go to Global Settings - Security tab.
  • Click on the Data Policies link. You will be brought to the Data Policy Settings page.
  • Click on the "New Data Policy" button.
  • You will be brought to the New Data Policy Settings page, which consists of the following settings:
    • ID: unique ID automatically generated on Save
    • Name: name used to identify the policy
    • Description: description for the policy
    • Policy Type: select either Security or Data Retention
      • Additional settings will be exposed upon selecting a policy type
    • Include Roles: lookup to select the roles that the policy should apply for

DataPolicy001.PNG


  • Populate the settings and click Save. 
  • The Policy Field Set Settings page refreshes and the Linked Policy Field Sets tab is also exposed


Security Data Policies

  • Selecting the security policy type exposes the Action field, with the following options:
    • Edit
    • Edit (by Owner Only)
    • Read
    • Delete
    • Forbidden
    • View Encrypted Data
    • Hide Data In Emulation Mode

SecurityDataPolicy001.PNG

NOTE: If you return to the Data Policy Settings page then the category will be listed, with an Edit button to allow updates to be made.


Data Retention Data Policies

  • Selecting the data retention policy type exposes the following options:
    • Action
    • Entity
    • Trigger After
    • Date Field to Compare

DataRetentionPolicy001.PNG

Linking Policy Field Sets and Policies

If you are editing a Policy Field Set then you can link the current category with an existing Data Policy by going to the Linked Policies tab.

If you are editing a Data Policy then you can link the current policy with an existing Policy Field Set by going to the Linked Policy Field Sets tab. LinkedPolicies001.PNG

The functionality for both tabs is the same and is as follows:

  • Start typing the name of the Data Policy or Policy Field Set into the Ajax lookup field and selected from the returned results.
  • Click on the Add button.
  • The policy/field set will now be listed under the Linked tab.

Adding Policy Field Set to Custom Fields

Go to the Policy Field Set tab, which is available against all Custom Fields settings pages (and specific Standard Fields for Users), and start typing the name of the Policy Field Set into the Ajax lookup field. Selected from the returned results.

CustomFieldPolicy001.PNG

The policy/category will now be listed under the Policy Field Set tab.

The custom field will also appear under the Custom Fields tab for the associated Policy Field Set .

abac ABAC Abac

Retrieved from ‘https://wiki.smartsimple.com/index.php?title=Policy_Field_Sets_and_Policies&oldid=41218’