---
title: Applying rules to applications and resources
description: Apply rules, rule sets, and rule set groups to applications and resources in PingAccess.
component: pingaccess
version: 9.0
page_id: pingaccess:pingaccess_user_interface_reference_guide:pa_applying_rules_to_apps_and_resources
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/pingaccess_user_interface_reference_guide/pa_applying_rules_to_apps_and_resources.html
revdate: February 13, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
  choose-from: Choose from:
---

# Applying rules to applications and resources

Apply rules, rule sets, and rule set groups to applications and resources in PingAccess.

## About this task

You can apply application access control and request processing rules to applications and their resources. These instructions describe how to create, apply, organize, and remove application rules.

## Steps

1. Click **Applications**, then go to **Applications > Applications**.

2. Click to expand an application in the list.

3. Click the **Pencil** icon.

4. **Optional:** Manage the policies for a resource.

   1. Click the **Resources** tab.

   2. Click to expand the resource you want to edit.

   3. Click the **Pencil** icon.

   4. Make the desired changes to the resource.

   5. To confirm your changes, click **Save**.

5. Select the applicable tab.

   ### Choose from:

   * For Web applications, select the **Web Policy** tab.

   * For API applications, select the **API Policy** tab.

   * For Web + API applications, you can configure both **Web Policy** and **API Policy** on separate tabs, as required.

6. Using the radio selection, filter by **[Rules](pa_rule_management.html)**, **[Rule Sets](pa_rule_sets.html)**, **[Rule Set Groups](pa_rule_set_groups.html)**, or **Rule Type**.

7. To create a new rule, click **Create Rule**.

8. To apply a rule, rule set, or rule set group, drag a rule from **Available Rules** onto the policy bar.

9. Drag items to change the order in which they are evaluated at runtime.

   |   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
   | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | Rule ordering can affect PingAccess performance. If an access control rule is more likely to reject access, it should appear near the top of the list to reduce the amount of processing that occurs before that rule is applied. This can be more noticeable if, for example, access control policies are applied along with processing rules. Applying access control policies first ensures that no processing happens on responses unless the user is allowed access. |

10. To remove an item from an application or resource, click **-** next to the item you want to remove.