Defining Permissions
You need to setup Permissions in order to define what type of resources your Targets will be allowed/denied to access.
The resources available to grant permission will depend on the Target you select, and the rules will depend on the resource selected.
You can add more resources as wished. An operation OR is applied. Therefore, as you add more permissions, more resources will be included for verification.
If you use one permission with Deny, it will override any options using an Allow that contains the same condition.
Related Articles
Defining Targets
You should define Targets in each policy that are used inside the Access Management module (AM). Targets can be users or things (scripts). Targets are to whom or to what you are giving the permissions. Currently, you can select Run Users and Analysis ...Creating a Policy
You can create individual policies to securely grant access to certain resources in your account for pre-defined targets. You create Targets (e.g. users) and determine which type of resource Permissions (e.g. dashboards) they will have. You can ...Access Management
Access Management (AM) is a module that helps you securely grant access to certain resources in your account. You create Targets (users or things) and determine which type of Permissions for the resources they will have. Some examples of how AM can ...