Create an ABAC Attribute

This article will detail how to configure your first ABAC attribute

Step 1: Create New Attribute

From the ABAC tab, select the Create New ABAC Attribute button in the top right

Step 2: Choose Attribute Type

1. Create an ABAC Attribute Name & Description

   

2. If you plan to utilize multiple attributes (Department + Job Title) for your ABAC profile you would toggle the Enable Concatenation feature, if you plan to utilize a single attribute (Department) for your profiles, leave this unchecked.

3. Select the attribute type, there are three attribute types, Identity Attribute, Service Attribute, and Mixed Attribute.

   Attribute Type	Description
   Identity Attribute	Use attributes directly associated with user identities (e.g., email, role, department)
   Service Attribute	Use attributes from service user accounts from other applications
   Mixed Attribute	Use attributes from both user identities and service user accounts (e.g., department + environment, role + application)

Step 2: Choose Attribute(s) & Priority or Concatenation

1. In this next section, you will select the attributes on the Identity, or Service User to utilize for your ABAC Profile as well as prioritization of those attributes

   1. If you enabled Concatenation on the previous step, you can click Add Group  to select multiple attributes

      

   2. You can then select which seperator you’d like to utilize
      

   3. If you selected Service Users as your attribute types you may want to utilize prioritization. You could prioritize Department from UKG first, and if that isn’t populated we could fall back to a secondary application

      

Step 4: Review

Finally, you will be presented with the details of what you have configured in previous steps, how many unique profile will be generated, and how many identities will be placed into those profiles to review before finalizing the creation of your ABAC Attribute.

Need help?