Policies can contain sets of attributes or endpoints.
Attributes allow a policy to permit access to specific attributes such as siteName.
When configuring granular policies and a user does not have any of the system policies configured, the user must have an attribute policy to be able to view diagrams. The diagram views are protected by a whitelist and will only allow users to view graphs if they have attribute scopes configured.
Endpoints allow a policy to only allow access to specific API endpoints within IP Fabric (e.g. discovery policy allows access to discovery api endpoints).
Policies page enables you to create or modify policies.
Add Attribute Policy
To add a new policy click on + Add policy.
By default the Attributes scope will be selected.
Set a policy name, add attributes (create a filters), select values and save your attribute policy.
Add API Endpoint Policy
To add new policy click on + Add policy.
Select Api endpoints scope
Set a policy name, select API endpoints and save your endpoints scope.
List of Policies
Policies table lists all policies including their details and enables you to modify or delete them (with exception for built-in policies which cannot be modified or deleted).
To modify policy details, click on edit icon in policies table.
Then to modify policy details update data in Edit Policy form and click on Save.
To copy policy, click on copy icon in policies table.
Then modify policy details in Copy Policy form and click on Save.