Authorization service interfaces

Interaction in the authorization service occurs in the management interface and the authorization API.

Management interface

The security administrator manages the security policy with the Web Portal Manager or pdadmin to apply policy rules to resources in a domain. The security policy is managed in the policy database by the policy server. This interface is complex and involves detailed knowledge of the object space, policies, and credentials.

Authorization API

Passes requests for authorization decisions from the resource manager to the authorization evaluator. The authorization evaluator provides feedback on whether to grant or deny the request.

Parent topic: ISAM authorization service