Close popover

Table of Contents

Creating a client-based access control rule


Create client-based access control (CBAC) rules to identify the personal data and personal identifiers in your Pega Platform application. CBAC rules define how an incoming request finds the personal data in your data store. CBAC rules also define the type of access the client has for each data instance (view, modify, or delete).

To create a client-based access control rule, you must have the pzCanManageSecurityPolicies privilege, which is included in the PegaRULES:SecurityAdministrator role.
  1. In the Dev Studio header, click Create Security Client Based Access .

  2. Specify the applies to class where the personal data is stored or referenced.

    This is a class for Work-, Data-, or Index- instances.

  3. From the Add to ruleset list, select the ruleset to contain the CBAC rule.

  4. Click Create and open.

  5. Configure your access control rule as described in Configuring a client-based access control rule.

  • Configuring a client-based access control rule

    Define the personal data properties and personal identifiers for a client-based access control rule (CBAC) so that requests for personal data can be tracked and processed. A CBAC rule defines access, update, and delete permissions for individual data elements.

  • Defining client-based access control rules

    Client-based access control (CBAC) rules define where personal data is stored and how it can be accessed. These CBAC rules are used by the application server that receives and processes the requests.

Suggest Edit

Have a question? Get answers now.

Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.