Implementing authorization policy consistently across the enterprise is a common compliance objective in many leading organizations. However, each application and system silo has authorization policies that are redundant, difficult to change, and costly to maintain, and the tools available today do not allow businesses to define their own policies or IT to implement and deploy them easily across applications and systems.

Policy Studio is a graphical application for entitlement management across applications and systems. It is an easy-to-use policy management tool for editing, deploying, and managing policies. Policy Studio speeds up policy development and increases productivity, allowing developers to focus on application logic rather than authorization rules.

Key Benefits

• Create Policy with Ease
  Drag and drop pre-defined components to compose a policy quickly.

• Leverage and Re-use Policy Components
  Write a policy component once and re-use it in many policies.

• Provide Auditor with Evidence of Control
  Print audit reports of who has access to what across all applications and systems.

• Enable Businesses to Write Policy
  Delegate policy creation to businesses that know governance and compliance the best.

• Configure Policy With No Coding
  Change policy quickly and deploy them immediately without writing code or configuring complicated XML.

Policy Author

Policy Author is a powerful, graphical policy editing tool with drag-and-drop ease of use to create policy.

• Declarative Configuration - create and change policy without writing code
• Policy Editors - edit policy in graphical editors instead of error-prone XML
• Expression Builder - create rules with keywords and pattern expressions
• Rules Preview - preview users and resources rules to verify a policy applies correctly
• Lookup Wizards - select users, groups, or contacts directly from Active Directory
• Policy Search - find policy quickly with policy component search
• Policy Validation - validate a policy is complete and deployable
• Policy Testing - deploy a policy immediately to a targeted host to test policy

Policy Manager

Policy Manager is a policy administration tool to review, deploy, and manage policy.

• Status Tab View - select and view policies at-a-glance in tab views
• Policy Preview - review policy and policy components before deploying them
• Deployment Scheduling - schedule policies to be deployed with full or phased deployments
• Policy Deactivation - deactivate and decommission out-dated policies
• Permission Assignment - set permissions to let business groups create and manage policy
• XACML Policy Import/Export - exchange XACML policies with other entitlement systems
• PEP Policy Lookup - see the current policy version on any policy enforcement point
• Policy Version History - maintain a history of all policy deployments for reviewing differences between versions

Authorization Policy Audit Report

Print authorization policy audit reports in PDF format to quickly demonstrate evidence of control and show who has access to what resources across systems and applications.

Reusable Policy Components

Create user, resource, and action rules in policy components that can be re-used in different policies without having to write the same rule many times.

Delegated Administration

Separate tasks by roles between writing and administering policy, efficiently delegating policy creation to business analysts and policy management to administrators.

Multi-user Support

Policy Server supports simultaneous Policy Studio instances, allowing multiple users to work collaboratively or independently on different policies.

Policy Lifecycle Management

Manage the complete lifecycle of a policy with a single tool, taking the user through creating a policy draft, submitting for review and approval, deploying to policy enforcement points, and deactivating and removing from the policy repository.