Entitlement Management

This user guide describes various configuration and management options available with entitlement management.

Use the left had Entitlement menu to configure various options such as Administration, Configuration, Tryit, Publish and Search.

Figure 1: Entitlement Management

Policy Administration

Administration provides various policy administration operations.

  1. Add New Entitlement Policy - use to add a new policy.
  2. Add New Policy Set - use to add a set of new policies.
  3. Import New Entitlement Policy - use to import a policy using either via file system or registry.

Users can combine the policy using the options available in 'Policy Combining Algorithm'. The defined policies can be search using the Search Policy option. Selected policies can be published either one by one or as the whole set using 'Publish' and 'PublishAll'. The selected policies also can be deleted using 'Delete' option.

Figure 2: Policy administration

Create Entitlement Policy

This editor can be used to create a new entitlement policy. Users can view the advance view or row XML coniguration using 'Use Advance View' and 'Use XML View' options.

Figure 3: Basic Policy Creation Wizard UI

Create Entitlement Policy Set

This editor can be used to create a set of policy set.

Figure 4: Creating a policy set

Import New Entitlement Policy

This can be used to import an already existing policy in the file system of in the registry. Select the option from the drop down menu 'Import Entitlement Policy From' to import from file system of registry.

Figure 5: Import a policy set from file system or registry

PDP Configurations

This editor provides the UI requires to configure the PDP.

Figure 6: PDP configurations

Evaluate Entitlement Policy

You can evaluate the defined entitlement policy using this editor. You can define the request using the ling 'Create Request Using Editor'.

Figure 8: Evaluate the defined entitlement policy

Policy Publisher

The defined policy can be published using policy publisher. If there is no subscriber defined use 'Add Subscriber' to define a subscriber.

Figure 9: Publishing a policy

Advanced Search

This UI can be used to locate defined policy. Following options can be configured in the search query.

  1. Search by - search either by user or role.
  2. User/Role name - name of the user or role.
  3. Subject Id - the id of the policy.
  4. Action - the action of the resource.
  5. Resource - the name of the resource
  6. Enable search through child resources - enable this if you want to search through child resources.

Figure 10:

The Entitlement Management component of the WSO2 Carbon facilitates the management and control of policies defined in XACML. The key functionalities of this component includes:

  • Create XACML policy using basic or advance policy creation wizards
  • Edit XACML policy using advance UI view or XML view
  • Activate or De-Activate existing XACML policy
  • Import existing XACML policy from file system or registry
  • Evaluate XACML policies
  • Create basic XACML requests for Evaluation
  • Clear decision cache

External References: