Attributes

Attributes specify the context of a request to be evaluated as part of an access decision. For example, an attribute might be information in a request, such as a user name, or information in an external source, such as a user's age in a user registry or an information type in a database. Requests contain one or more of the following categories of attributes:

Action	The user action.
Environment	When and how the user is trying to access the resource.
Resource	Information about what the user is trying to access.
Subject	Who is trying to access the resource.

When authoring policies or risk profiles, we select attributes to be evaluated. Commonly used attributes are predefined. We can also create our own to meet the needs of the environment.

• Manage attributes
  
• Updating location attributes
  
• Attribute properties
  
• Predefined attributes
  
• Configure the hash algorithm for attribute storage
  
• Dynamic attributes
  
• Custom attributes for the authorization service
  

Parent topic: Advanced Access Control administration