Skip to Content
DocumentationsBsh EngineSecurityPolicies

Policy Management

Easily manage access control in your application by defining and maintaining policies.

Policies List

View all existing security policies here:

Policies List

Creating a Policy

To create a new policy:

  • Fill in the policy’s details, define who it applies to (principals), and specify the allowed or denied permissions.
  • Save the policy to activate it.

Create Policy

Policy Properties

PropertyTypeRequiredDescription
NamestringyesA unique, descriptive name for your policy.
DescriptionstringnoOptional details about the policy’s purpose.
PrioritynumberyesControls which policy takes precedence (higher means higher priority).
EnabledbooleanyesSet to true to activate, false to disable.
PrincipalsarrayyesDefines which users or roles the policy applies to.
PermissionsarrayyesSpecifies what actions are allowed or denied.

Defining Principals

Principals determine WHO the policy targets.

Create Policy Principals

PropertyTypeRequiredDescription
TypestringyesPrincipal type: currently supported: USER, ROLE.
ValuestringyesThe unique ID for the user or role
  • For USER, use the User ID.
  • For ROLE, use the Role ID.
  • ANY can be used to match all types.

Use the * wildcard value to match all users or all roles.

Support for new principal types like GROUP and API_KEY will be added in the future releases.

Defining Permissions

Permissions define WHAT actions the policy will allow or deny.

Create Policy Permissions

PropertyTypeRequiredDescription
EntitystringyesThe resource/entity that the permission targets.
ActionstringyesThe type of operation permitted.
Allow AccessbooleanyesGrant or deny access.

Allowed actions include: READ, WRITE, UPDATE, DELETE, SEARCH.

Tip: Use priorities to determine which policy takes effect when multiple policies apply to the same entity and principal.

PoliciesFiles