Dell Networking W-ClearPass Policy Manager 6.0, User Manual

Page: 70 / 372

70 Dell Networking W-ClearPass Policy Manager 6.0 | User Guide
Policy Manager tests client identity against role-mapping rules, appending any match (multiple roles acceptable)
to the request for use by the Enforcement Policy. In the event of role-mapping failure, Policy Manager assigns a
default role.
In this Use Case, create the role mapping policy RMP_DEPARTMENT that distinguishes clients by department
and the corresponding roles ROLE_ENGINEERING and ROLE_FINANCE, to which it maps:
Table 25:
Role Mapping Navigation and Settings
Navigation Settings
Create the new Role Mapping Policy:
l
Roles (tab) >
l
Add New Role Mapping Policy (link) >
Add new Roles (names only):
l
Policy (tab) >
l
Policy Name (freeform): ROLE_ENGINEER >
l
Save (button) >
l
Repeat for ROLE_FINANCE >
l
When you are finished working in the Policy
tab, click the Next button (in the Rules
Editor)
Create rules to map client identity to a Role:
l
Mapping Rules (tab) >
l
Rules Evaluation Algorithm (radio button):
Select all matches >
l
Add Rule (button opens popup) >
l
Add Rule (button) >
l
Rules Editor (popup) >
l
Conditions/ Actions: match Conditions to
Actions (drop-down list) >
l
Upon completion of each rule, click the
Save button ( in the Rules Editor) >
l
When you are finished working in the
Mapping Rules tab, click the Save button (in
the Mapping Rules tab)