# Soffid XACML Editor Soffid XACML Editor # XACML Editor ## Description
Soffid Console provides a graphical interface, with a hierarchy structure, that allows the management of Policy Decision Points in a easy way. You can create new policy sets, policies, policy set references and policy references.
To start you only need to click the button with the add symbol (+) and start to configure the policy set. Once you have created the root policy set, you can add new policy sets, polices, policy set references and policy references as your company need. You only need to click on the proper button and fulfill the data. You can add more than one root policy set. Also, you can import a PolicySet into the system. You need click the import option on the hamburger icon and pick up the file to import, that file must be a well-formed XML. ## Screen overview ## Related objects - [Policy set](https://bookstack.soffid.com/books/xacml/page/policy-set "Policy set") - [Policy](https://bookstack.soffid.com/books/xacml/page/policy "Policy") - [Policy set reference](https://bookstack.soffid.com/books/xacml/page/policy-set-reference "Policy set reference") - [Policy reference](https://bookstack.soffid.com/books/xacml/page/policy-reference "Policy reference") ## Actions**Add new** | Allows you to add a new policy set. You can choose that option on the hamburger menu or click the add button (+). Second, you need to fulfill the mandatory fields, also the target, and the obligations, and apply changes. |
**Import** | Allows you to import an XML file to add a new policy set. You can choose that option on the hamburger menu. Then you can pick up a .XML file and Soffid will import the file. If you cancel that operation, Soffil will not upload and save the file. |
**New policy set** | Allows you to add a new policy set as a child of another policy set. You can choose that option under the proper policy set, and then fulfill the form. |
**New policy** | Allows you to add a new policy as a child of another policy set. You can choose that option under the proper policy set, and then fulfill the form. |
**New policy reference** | Allows you to add a new policy reference as a child of another policy set. You can choose that option under the proper policy set, and then fulfill the form. |
**New policy set reference** | Allows you to add a new policy set reference as a child of another policy set. You can choose that option under the proper policy set, and then fulfill the form. |
**Apply changes** | Allows you to save the data of a new policy set or to update the data of a specific policy set. To save the data it will be mandatory to fill in the required fields |
**Undo** | Allows you to quit without applying any changes. |
**Delete** | Allows you to delete a policy set. You can choose that option on the trash icon. To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation. |
**Export** | Allows you to export a XML file that contain the policy set. |
**Add new version** | Allows you to add a new versión of the policy set. |
**Test policy set** | Allows you to test the policy set creating the XML file necessary with the defined policies and rules. |
**Apply changes** | Allows you to save the data of a new policy or to update the data of a specific policy. To save the data it will be mandatory to fill in the required fields |
**Undo** | Allows you to quit without applying any changes. |
**Delete** | Allows you to delete a policy. You can choose that option on the trash icon.To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation. |
**Export** | Allows you to export a XML file that contain the policy. |
**Add new version** | Allows you to add a new versión of the policy. |
**Apply changes** | Allows you to save the data of a new policy reference or to update the data of a specific policy reference. To save the data it will be mandatory to fill in the required fields |
**Undo** | Allows you to quit without applying any changes. |
**Delete** | Allows you to delete a policy reference. You can choose that option on the hamburguer icon. To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation. |
**Export** | Allows you to export a XML file that contain the policy reference. |
**Add new version** | Allows you to add a new versión of the policy reference |
**Apply changes** | Allows you to save the data of a new policy set reference or to update the data of a specific policy set reference. To save the data it will be mandatory to fill in the required fields |
**Undo** | Allows you to quit without applying any changes. |
**Delete** | Allows you to delete a policy set reference. You can choose that option on the hamburguer icon. To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation. |
**Export** | Allows you to export a XML file that contain the policy set reference. |
**Add new version** | Allows you to add a new versión of the policy set reference |
**Add new** | Allows you to add a new element to the list. To add a new element you need to click the add button, located at the end of the header and fulfill the form and save the data. |
**Delete** | Allows you to delete an element to the variable list. To delete the element, you need to click the element you want to delete, and click the button with the subtraction symbol (-) at the end of the record. To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation. |
**Close** | Allows you to save the data of a new element or to update the data of a specific element. To save the data it will be mandatory to fill in the required fields |
**Undo** | Allows you to quit without applying any changes. |
**Add new** | Allows you to add a new rule to the rules list. To add a new rule you need to click the add button, located at the end of the header and fulfill the form and save the data. |
**Delete** | Allows you to delete a rule to the rules list. To delete the rule, you need to click the rule you want to delete, and click the button with the subtraction symbol (-) at the end of the record. To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation. |
**Close** | Allows you to save the data of a new rule or to update the data of a specific variable. To save the data it will be mandatory to fill in the required fields |
**Undo** | Allows you to quit without applying any changes. |
**Add new** | Allows you to add a new variable to the variables list. To add a new variable you need to click the add button, located at the end of the header and fulfill the form and save the data. |
**Delete** | Allows you to delete a variable to the variable list. To delete the variable, you need to click the variable you want to delete, and click the button with the subtraction symbol (-) at the end of the record. To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation. |
**Close** | Allows you to save the data of a new variable or to update the data of a specific variable. To save the data it will be mandatory to fill in the required fields |
**Undo** | Allows you to quit without applying any changes. |
**OBLIGATION** | **ATTRIBUTE** |
urn:soffid:obligation:otp | timeout |
urn:soffid:obligation:message | text |
urn:soffid:obligation:bpm | process |
**Add new** | Allows you to add a new obligation to the obligations list. To add a new obligation you need to click the add button, located at the end of the header and fulfill the form and save the data. |
**Delete** | Allows you to delete an obligation to the obligations list. To delete the obligation, you need to click the obligation you want to delete and click the button with the subtraction symbol (-) at the end of the record. To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation. |
**Close** | Allows you to save the data of a new variable or to update the data of a specific variable. To save the data it will be mandatory to fill in the required fields |
**Undo** | Allows you to quit without applying any changes. |
**Add new** | Allows you to add a new condition to the conditions list. To add a new condition you need to click the add button, located at the end of the header and fulfill the form and save the data. |
**Delete** | Allows you to delete a condition to the variable list. To delete the condition, you need to click the condition you want to delete, and click the button with the subtraction symbol (-) at the end of the record. To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation. |
**Close** | Allows you to save the data of a new condition or to update the data of a specific condition. To save the data it will be mandatory to fill in the required fields |
**Undo** | Allows you to quit without applying any changes. |
**EXPRESSION TYPE** | **OTHER FIELDS** | **DATA TYPE** |
Attribute value | **Value**: alfanumeric field | [Available data types](#bkmrk-%C2%A0-0). |
Resource | **Attribute designator** - URL - Soffid object - Account name - System name - Login name - Vault folder - Access level | [Available data types](#bkmrk-%C2%A0-0). |
Subject | **Attribute designator** - User - User attributes - Account - System - Role - Group - Primary Group - IP Address | [Available data types](#bkmrk-%C2%A0-0). |
Action | **Attribute designator**: - method | [Available data types](#bkmrk-%C2%A0-0). |
Environment | **Attribute designator**: - Country - Current Time - Current Date - Current DateTime | [Available data types](#bkmrk-%C2%A0-0). |
Attribute selector | **Attribute selector**: alphanumeric field | [Available data types](#bkmrk-%C2%A0-0). |
Variable | **Variable**: alfanumeric field | -- |
Function | **Function type**: - Comparison - Arithmetic - Conversions - Date conversions - Boolean Operators - String Functions - Set Functions - Bag Functions - HigherOrderBagFunctions - XPath | [Available data types](#bkmrk-%C2%A0-0). |
Function name | **Function type**: - Comparison - Arithmetic - Conversions - Date conversions - Boolean Operators - String Functions - Set Functions - Bag Functions - HigherOrderBagFunctions - XPath **Function**: the value depends on the function type selected. | [Available data types](#bkmrk-%C2%A0-0). |