Export (0) Print
Expand All

Creating an Authorization Policy Store in Script

Create an authorization policy before or during the installation of an application.

When you use the Authorization Manager API to create an authorization policy, follow the instructions provided in the following topics.

Creating an Authorization Policy Store Object in Script An authorization policy store contains information about the security policy of an application or group of applications.
Creating an Application Object in Script For each application that uses an authorization policy store, you must create an IAzApplication object and save it to a policy store.
Defining Operations in Script An operation is a low-level function or method of an application.
Grouping Operations into Tasks in Script A task is a high-level action that users of an application need to complete. Tasks are made up of operations, which are low-level functions and methods of the application.
Grouping Tasks into Roles in Script A role represents a category of users and the tasks those users are authorized to perform.
Defining Groups of Users in Script An IAzApplicationGroup object represents a group of users. Roles can then be assigned to this group of users collectively. An IAzApplicationGroup object can also include other IAzApplicationGroup objects as members.
Adding Users to an Application Group in Script An application group is a group of users and user groups. An application group can contain other application groups, so groups of users can be nested. An application group is represented by an IAzApplicationGroup object.




Community Additions

© 2015 Microsoft