Manual Chapter : Adding an access policy mapping item

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 15.0.0
Manual Chapter

Adding an access policy mapping item

Before you start this task, configure an access profile.
Configure an access policy with a mapping action to map resources or variables of one type to another type or value. Each mapping action works differently and assigns different items.
  1. On the Main tab, click
    Access
    Profiles / Policies
    .
    The Access Profiles (Per-Session Policies) screen opens.
  2. In the Per-Session Policy column, click the
    Edit
    link for the access profile you want to configure.
    The visual policy editor opens the access policy in a separate screen.
  3. Click the
    (+)
    icon anywhere in the access policy to add a new item.
    Only an applicable subset of access policy items is available for selection in the visual policy editor for any access profile type.
    A popup screen opens, listing predefined actions on tabs such as General Purpose, Authentication, and so on.
  4. Select a mapping action, then click
    Add Item
    :
    Assignment
    AD Group Resource Assign
    Maps resources from an Active Directory group to access policy resources.
    Assignment
    LDAP Group Resource Assign
    Maps resources from an LDAP group to access policy resources.
    Assignment
    Variable Assign
    Allows you to assign predefined or custom variables to attributes, values, text, or expressions.
    A properties screen opens.
  5. For the Variable assign action, click the
    Add new entry
    button.
    The AD and LDAP Group Assign actions already include an entry.
  6. Click the
    Edit
    link.
  7. Configure the settings for the assign action.
    For the AD or LDAP group resource assign action, type the name of the group, then click
    Add group manually
    .
  8. Configure the mapping items.
    Refer to the specific documentation for each item to map items.
  9. Click
    Save
    .
    The properties screen closes and the policy displays.
The access policy is configured with the assignment action you have configured.
Click the
Apply Access Policy
link to apply and activate your changes to this access policy.
To ensure that logging is configured to meet your requirements, verify the log settings for the access profile.