PingAuthorize

Use case: Preventing users from updating a policy set

About this task

The following are the general steps needed to prevent users from updating a policy set:

Steps

  1. Create a policy named Prevent users from updating a policy set in the System Policy Set of the Admin Point Governance branch.

  2. Add a rule that returns a Deny if Object.Existing.Name equals examplePolicySet.

  3. Select Components and drag the Core.PolicySet service to the Applies to section of the rule.

  4. Drag the Modify.Update action to the Applies to section of the rule.

  5. Save the policy.

  6. Commit the changes to the Admin Point Governance branch in Branch Manger > Version Control.

Result

This self-governance policy returns a Deny response when a user tries to modify a policy set with the name examplePolicySet.