Configuring Access Policies

The Configure > Administration > User Access > Access Policies page displays the following information for the access policies that are currently available in your system. For more information about role-based access control, see Managing Role Based Access Control.

ACCESS POLICY: The name of the access policy.
ROLE: The name of the user role that is associated with this access policy.
USER GROUP: The name of the user group to which you apply the selected user role.
DESCRIPTION: The description of this access policy.
ACCESS VIEW: The access view that is associated with this access policy. For more information, see Configuring Access Views.

An access policy applies a specific role to a specific user group to grant the set of permissions defined in the user role to all the users in the user group, allowing the users to perform specific tasks for the granted services. For example, the Access Control Administrators Policy applies the Access Control Administrator Role to the access control administrator user group (ib-access-control-admin), so all the users in ib-access-conrol-admin are allowed to access the Infoblox Portal and are able to view and configure licenses, users, user groups, and access policies.

Infoblox Portal provides the following default access policies and their corresponding user roles and user groups for a quick-start configuration, so all you need to do is simply add new users to the correct user groups for them to gain access to their authorized services and tasks. You can also create new access policies based on your business needs.

Access Policy	User Role	User Group	Policy Function

Access Policy	User Role	User Group	Policy Function
Access Control Administrators Policy	Access Control Administrators Role	ib-access-control-admin	This policy allows all users in the access control administrator group to access the system to view and administer licenses, users, user groups, and access policies.
Administrators Policy	Administrator Role	admin	This policy allows all admin users to perform administrative tasks for all aspects of the Infoblox Portal.
DDI Administrators Policy	DDI Administrator Role	ib-ddi-admin	This policy grants all users in the ib-ddi-admin group access to the Universal DDI service and permission to administer all aspects of Universal DDI.
DDI Users Policy	DDI User Role	ib-ddi-user	This policy grants all users in the ib-ddi-user group read-only access to the Universal DDI service so they can view Universal DDI configurations and reports.
TD Administrators Policy	TD Administrator Role	ib-td-admin	This policy grants all users in the ib-td-admin group access to the Infoblox Threat Defense service and permission to administer all aspects of Infoblox Threat Defense.
TD Users Policy	TD User Role	ib-td-user	This policy grants all users in the ib-td-user group read-only access to the Infoblox Threat Defense service to view Infoblox Threat Defense configurations and reports.
Users Policy	User Role	user	This global policy allows all users access to view all the configurations and reports on the Infoblox Portal.

You can also do the following in this tab:

Click to select the columns you want to display or use the arrow keys to reorder the columns.
Click -> Edit to modify access policy information. You can also select the respective policy and click the Edit button to do so.
Click -> Remove to delete a policy. You can also select the respective policy and click the Remove button to do so.

Note

You cannot delete any predefined access policies or default roles that were initially added to your Infoblox account.

Select a policy to view additional details in the right panel. You can collapse the right panel by clicking.
Enter the value that you want to search in the Search text box. The Infoblox Portal displays the list of records that match the keyword in the text box.
Click and then to filter data by the available values.

You can also perform the following actions in this tab: