Conditions

Description

Condition represents a Boolean expression that refines the applicability of the rule beyond the predicates implied by its target. Therefore, it may be absent.

Screen overview

Custom attributes

Condition name

Name to identify the condition.

Expression

Boolean expresion that you can create, to start you need to select the expression type. The other fields depend on the expression type selected.

The following options are available:

Attribute value

Resource

Subject

Action

Environment

Attribute selector

Variable

Function

Function name

Value:
Data type: the data type depends on the expression type.

https://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-core-spec-os.pdf