Manage access control policies

Access control policies are statements that bring attributes together to establish permissible and impermissible actions. Adobe provides a default policy that can be activated immediately or when your organization is ready to start controlling access to specific objects based on labels. The default policy, Default-Label-Based-Access-Control-Policy, leverages labels applied to resources to deny access unless users are in a role with a matching label.

Configure policy for a sandbox configure-policy

To begin configuring a policy, navigate to Permissions in Adobe Experience Cloud. Select Policies from the left panel. Select the Default-Label-Based-Access-Control-Policy from the list.

{modal="regular"}

The policy’s details workspace will appear. Select the Sandboxes. A list of sandboxes associated with the policy are displayed.

{modal="regular"}

Add policy to all sandboxes add-policy-to-all

Toggle off the Auto-include feature to stop future sandboxes from being automatically added to the policy. Toggling off the feature will not remove any sandboxes from the policy.

{modal="regular"}

If Auto-include is not active in a policy, you can use the toggle to turn it back on. The Enable Auto-include dialog appears prompting you to confirm your selection. Select Enable to complete the configuration setting.

{modal="regular"}

Manually select sandboxes for a policy manually-select-sandboxes

To manually add or remove sandboxes to a policy, the Auto-include toggle must be off.

Add sandboxes

To add sandboxes to a policy, select Add Sandboxes.

{modal="regular"}

The Add Sandboxes dialog appears. Select the sandbox(es) you wish to add to the policy and then select Save.

{modal="regular"}

Remove sandboxes

To remove sandboxes from a policy, find the sandbox you wish to remove from the list and then select the X icon.

{modal="regular"}

A confirmation dialog will appear. Select Confirm to finish removing the sandbox from the policy.

{modal="regular"}

Activate a policy activate-policy

To activate an existing policy, select the policy from the Policies tab in Permissions. The policy’s activation status is visible under the Status section.

{modal="regular"}

The policy’s details workspace will display. Select Activate.

{modal="regular"}

The Activate Policy dialog appears. Select Confirm to finish activating the policy.

{modal="regular"}

Next steps

With a policy activated, you can proceed to the next step to manage permissions for a role.