Configure User for Access Policy

Note

The option to get username from the JWT token is supported with the CipherTrust Manager 2.18 and higher versions.

CRDP provides support of access policy, which contains set of rules that govern how the protected data will be revealed to one or multiple users or user sets. The CipherTrust Manager administrator can configure access policy on the CipherTrust Manager through UI or API. Refer to Managing Access Policy for details.

Each incoming request of /v1/reveal or /v1/revealbulk should have a username. CRDP provides output of these requests as per access policy rules for this username. For CRDP, the CipherTrust Manager administrator can configure access policy to get username from either request body of /v1/reveal or /v1/revealbulk, or from the JWT token provided in each request. The JWT token will only be provided if JWT validation is enabled. Refer to Enable JWT Verification for details.

If the Username location in JWT field in CRDP Application is provided, username in JWT is considered for access policy. If username is not provided in JWT, the default behavior mentioned in access policy is considered. Refer to Enable JWT Verification for details.

If the Username location in JWT field in CRDP Application is not provided, username mentioned in the username field in request body of /v1/reveal or /v1/revealbulk is considered for access policy. If username is not provided in request body, the default behavior mentioned in access policy is considered. Refer to API Reference for details.