Access controls
Users’ access in Bravura Security Fabric is controlled by their permissions and capabilities :
Permissions are the rules that determine whether users can access certain objects, such as profile and request attributes or Bravura Privilege managed system policies.
Capabilities are the tasks that individual users are permitted to perform in Bravura Security Fabric .
Access controls affect API users as well as normal users.
There are many ways to assign access controls in Bravura Security Fabric . Refer to:
Attribute groups to learn how to assign permissions to users.
User types and access rules to learn how to assign product administrator and authorizer capabilities to users.
Authorization workflow options for more information about how access controls can be assigned to users dynamically.
There are also ways to filter access without configuring users’ access controls. Refer to:
Resource filtering for more information about filtering objects available to users.
Plugins for more information about restricting the operations that end users can request.