Creating access policy

To create an access policy:

1. Open Application Data Protection.

2. In the left pane, click Access Policies.

3. On the Access Policies screen, click Add Access Policy. The Add Access Policy wizard is displayed. Follow the steps to complete the setup.

   a. Add General Info

   b. Configure User-Set Rules

   c. Select Default Reveal Format

   d. Confirmation

Add General Info

1. Specify a unique name for the access policy.

2. Describe the access policy.

3. Click Next to go to the User Set Rules tab.

Add User Set Rules

1. On the User Set Rules tab, click Add User Set Rule.

2. Under the Select User Set(s) section, select the user set for which you want to define the access policy.

3. From the Select Reveal Format drop-down list, select the reveal format for the user set. You can select any of these reveal formats:

   • Plaintext: Plaintext is revealed to the application users.

   • Ciphertext: Ciphertext is revealed to the application users.

   • Error Replacement Value: Error replacement value is returned to the application users. To return error replacement value, you must configure one of the following settings:

     • Select Return NULL value to specify NULL as the Error Replacement Value.

     • Select Return Custom value and specify custom value as the Error Replacement Value.

     

   • Masked Value: Masked value is returned to the application users. When selecting the Masked Value, select Masking Format. To know more about masking, refer to Managing Masking Format.

4. Click Save.

   To configure another user set rule, click Add User Set Rule and repeat steps 2 to 5 else, click Next to go to the Default Reveal Format tab.

   Select Default Reveal Format

5. On the Default Reveal Format tab, select any of the following format from the drop-down list. This selection is configured for the users who are not part of any user set rule.

   • Plaintext: Plaintext is revealed to the application users.

   • Ciphertext: Ciphertext is revealed to the application users.

   • Error Replacement Value: Error replacement value is returned to the application users. To return error replacement value, you must configure one of the following settings:

     • Select Return NULL value to specify NULL as the Error Replacement Value.

     • Select Return Custom value and specify custom value as the Error Replacement Value.

     

   • Masked Value: When selecting the Masked Value, select Masking Format. To know more about masking, refer to Managing Masking Format.

6. Click Next to go to the Confirmation screen.

Confirmation

1. On the Confirmation tab, verify the access policy details. The Confirmation screen displays general info, user set rules, and default reveal format.

2. To modify any detail, click Edit and update the details.

3. Click Save to create an access policy. A message stating Access policy created successfully is displayed. The newly created Access Policy is added to the list of access policies.

Using access policy

Once the access policy is created, you must map the access policy to the protection policy for reveal operations. Refer to Create Protection Policy for details.