Adding a Policy Statement

Now you have created a policy you will need to add statements. To amend the policy, click on the action menu for the policy and select the Edit Policy option.

You will then be presented with the statement screen where you can add new statements by clicking on the Add Statement button.

Once you have selected the statement button you will then be presented with a dialog modal where you will set the Scope, Permission Set,Permissions, Effect and Resources.

• Permission Set - Here you select the permissions set for the statement, this will be based on the permissions available from the selected Scope
• Permissions - Here you select the permissions for the statement, this will be based on the permissions available from the selected Permissions Set e.g. view:SubjectCustomField.
• Effect - This selects whether you wish to ‘Allow’ or ‘Block’ permissions within the statement. Note: Blocking a resource will deny access to the resource, even if the resource is allowed by another statement.
• Resources - Here you add the resources for this statement.

For example, the AireFrameApi scope has a Custom Fields permission set which controls which fields are visible in AireFrame. These resources must match one of the following templates:

• Subject/${InternalSubjectId}/FieldGroup/${FieldGroupKey}/Field/$
• Subject/${InternalSubjectId}/Field/$
• Subject/$
• FieldGroup/${FieldGroupKey}/Field/$
• FieldGroup/$
• Field/$

To allow access to a specific FieldGroup, select the Allow effect and specify the resource:

• FieldGroup/my-field-group

Once you have finished updating the resource, click on the ‘Update’ button to save the changes.