Skip to main content

Access Policy

Access Policy adds an additional authorization layer for Type instances. It works with existing access controls and is evaluated only after baseline access is granted.

Overview​

Access Policy helps administrators enforce contextual access decisions using configurable rule logic.

  • Layered Security: Applies after primary access checks such as Default everyone access, role-based access, or admin bypass.
  • Rule-Based Access Control: Uses configurable rule groups and conditions to allow or deny access for a specific instance.
  • Context-Aware Evaluation: Supports conditions based on instance attributes and context user attributes.
  • Custom Denial Messaging: Optionally returns a dynamic, expression-based error message when access is denied.

When to Use Access Policy​

Use Access Policy when basic access grants are not enough and you need finer control, for example:

  • Restrict visibility to records created by the current user.
  • Restrict data by region, department, or business unit.
  • Apply additional constraints for sensitive types without changing global role grants.

Child Pages​