Manual Chapter : About LocalDB Group Lookup

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 15.0.0
Manual Chapter

About LocalDB Group Lookup

A per-request policy LocalDB Group Lookup item compares a specified string against a specified session variable.
The string is specified in a branch rule of the LocalDB Group Lookup item. The default simple branch rule expression is
User is a member of
MY_GROUP
. The default advanced rule expression is
expression
is
expr
{ [
mcget
{
session.localdb.groups
}]
contains
"
MY_GROUP
" }
. In either the simple or the advanced rule, the variable,
MY_GROUP
, must be replaced with a valid group name.
The session variable must initially be specified and populated by a Local Database action in the access policy. A Local Database action reads groups from a local database instance into a user-specified session variable. It can be
session.localdb.groups
(used by default in the LocalDB Group Lookup advanced rule expression) or any other name. The same session variable name must be used in the Local Database action and the LocalDB Group Lookup advanced rule expression.