Policy Evaluator
Simulate and test RBAC/ABAC access control policies
Evaluation Context
user.*resource.*actionenvironment.*Policies
= equals≠ not equals∋ contains∈ in list∃ existsNo policies defined
Click "Add Policy" to create one
Learn More
About Policy Evaluation
- •RBAC (Role-Based Access Control) uses roles to determine permissions
- •ABAC (Attribute-Based Access Control) uses attributes of user, resource, action, environment
- •Policies are evaluated in priority order (lower number = higher priority)
- •First matching policy determines the decision; default is deny
Policy Evaluation in IAM
- •Zero Trust – Fine-grained access decisions
- •API Authorization – Protect API endpoints
- •Data Access – Control resource visibility
- •Conditional Access – MFA, device trust policies