About LocalDB Group Lookup

A per-request policy LocalDB Group Lookup item compares a specified string against a specified session variable.

The string is specified in a branch rule of the LocalDB Group Lookup item. The default simple branch rule expression is

User is a member of

MY_GROUP

. The default advanced rule expression is

expression

is

expr

{ [

mcget

{

session.localdb.groups

}]

contains

"

MY_GROUP

" }

. In either the simple or the advanced rule, the variable,

MY_GROUP

, must be replaced with a valid group name.

The session variable must initially be specified and populated by a Local Database action in the access policy. A Local Database action reads groups from a local database instance into a user-specified session variable. It can be

session.localdb.groups

(used by default in the LocalDB Group Lookup advanced rule expression) or any other name. The same session variable name must be used in the Local Database action and the LocalDB Group Lookup advanced rule expression.