Secure > Authorization > Customize default access control policies > Examples: Customizing access control policies using the Organization Administration Console
Example: Allowing procurement shopping cart managers to manage the procurement shopping cart for orders created by their organization
By default, procurement shopping cart managers are authorized to manage the procurement shopping cart when they have created the order. In some cases, you might want to extend the authority of procurement shopping cart managers to let them manage the procurement cart for orders created by any member of their organization.
By default, procurement shopping cart managers are authorized to manage the procurement shopping cart when they have created the order. In some cases, you might want to extend the authority of procurement shopping cart managers to let them manage the procurement cart for orders created by any member of their organization.
To make this change, do the following:
- Determine the resource-level policy that authorizes procurement shopping cart administrators to manage procurement shopping carts.
- Change the resource relationship for this policy from creator to same organizational entity as creator.
Change the resource relationship for the resource-level policy
- Find the resource-level policy that authorizes procurement shopping cart managers to manage procurement shopping carts for orders. The policy is:
ProcurementShoppingCartManagersExecuteProcurementShoppingCartManageOnOrderResource
- From the Organization Administration Console, click Access Management > Policies.
- For View, select Root Organization to display policies it owns.
- From the list of policies, select the following:
ProcurementShoppingCartManagersExecuteProcurementShoppingCartManageOnOrderResource
- Click Change to display the Change Policy page.
- For Relationship, select sameOrganizationalEntityAsCreator.
- Click OK.
Update the access control policy registry with the changes
- Open the Administration Console.
- Click Configuration > Registry.
- From the list of registries, select Access Control Policies.
- Click Update.