Policies Overview

Gain complete control of your authorization Policies in Nodinite v7. This page guides you through managing, adding, editing, deleting, and restoring Policies—groups of Claims that define permission sets.

✅ Centralized management of all Policies
✅ Track which Roles use each Policy
✅ Powerful filtering and search capabilities
✅ Restore deleted Policies when needed

Note

Policies are only available when Nodinite is configured for OIDC/OAuth 2.0 authentication mode.

Get started now: Add or manage Policy user guide.

The Overview displays all user-defined Policies. You can filter the list and manage Policies through detailed editing pages.

The Policies Overview in the Access Management menu is where a Nodinite Administrator manages Policies for OIDC/OAuth 2.0 authorization.

Policies are collections of Claims that can be assigned to Roles. Make sure to read the 'What is a Policy' topic to understand the basic concepts before continuing.

---

In the Policies Overview, you have a sortable list of defined Policies. You can narrow an extensive list by typing characters into the filter text box.

The Policies Overview with the list of user-defined Policies.

Manage Policies

The available functionalities for Managing Policies are:

• Add new Policy - Create Policies
• Edit existing Policy - Modify Name, Description, or Claims
• Delete Policy - Remove Policies (can be restored)
• Restore deleted Policy - Recover previously deleted Policies
• Filter the list of Policies - Search by Name or Description
• Sort - Order by any column

Add new Policy

Click the "Add Policy" button to create a new Policy.

Click the "Add Policy" button to create a new Policy.

You'll navigate to the Policy detail page where you can:

• Enter Name and Description
• Add Claims using three tabs:
  • New/Edit - Create or edit Claims
  • All - Browse and select existing Claims
  • Selected - View and manage Claims in this Policy

Edit Policy

To Edit an existing Policy, click the link in the Name column or open the menu from the "Actions" button and click "Edit".

Click the Policy name or 'Edit' menu item to edit an existing Policy.

Delete Policy

To Delete an existing Policy, navigate to the Policy detail page and click the "Delete" button at the bottom.

Click the 'Delete' button to delete an existing Policy.

Important

Deleted Policies are removed from Role assignments. Claims within the Policy are not deleted.

Restore deleted Policy

To Restore a deleted Policy, first check the "Include Deleted" checkbox.

Enable "Include Deleted" to show deleted Policies.

Then open the menu from the "Actions" button and click "Restore".

Click the 'Restore' menu item to restore a deleted Policy.

Filter Policies

Use the search filter at the top of the page to find Policies:

• Type any text to search across Name and Description fields
• Results update in real-time as you type
• Clear the filter to show all Policies

Sort Policies

Click any column header to sort the list:

• Name - Alphabetical order
• Created - Date/time order
• Changed - Date/time order

Click again to reverse the sort order (ascending/descending).

---

Understanding the Columns

Column	Description	Sortable
Status	Visual indicator - shows "Available" or "Deleted" badge	No
Name	The Policy name (clickable link to Policy details)	Yes
Description	Description of the Policy's purpose	No
Created	Timestamp when the Policy was created	Yes
Changed	Timestamp when the Policy was last modified	Yes
Actions	Dropdown menu with Edit, Delete, and Restore options	No

---

Validation and Rules

Unique Names

• Policy Names must be unique
• Cannot create two Policies with the same name
• Case-sensitive: "Finance Policy" ≠ "finance policy"

Required Fields

• Name is required
• Description is optional but recommended
• Claims - Policies can exist without Claims but are not useful

Deletion Behavior

• Deleted Policies can be restored
• Deleted Policies are removed from Role assignments
• Claims within deleted Policies are not deleted

---

Best Practices

Naming Conventions

Use clear, descriptive names:

✅ Good Names:
   Finance Admin Policy
   Europe Read-Only Access
   Operations Full Access
   Developer Test Environment

❌ Poor Names:
   Policy1
   Pol_Fin
   ADMIN

Always Add Descriptions

Good descriptions help your team:

✅ Good Description:
   "Full administrative access to finance integrations including 
    invoice processing, payment systems, and financial reporting. 
    Grants read/write/delete permissions in production environment."

❌ Poor Description:
   "Finance policy"
   ""

Organize Related Policies

Group Policies by:

Department:

• Finance Admin Policy
• Finance User Policy
• Operations Admin Policy

Access Level:

• Read-Only Access
• Editor Access
• Full Admin Access

Region:

• European Operations
• Americas Operations
• Asia-Pacific Operations

Review Before Deletion

Before deleting a Policy:

1. Consider the impact on Roles
2. Check if Claims should also be removed
3. Document the reason for deletion
4. Communicate with your team

Regular Maintenance

• Review Policies quarterly
• Remove unused Policies
• Update descriptions for clarity
• Verify Claim assignments

---

Common Scenarios

Department-Based Authorization

Create Policies for each department:

1. "Finance Department Access"
   - department=finance
   - access_level=editor

2. "Operations Department Access"
   - department=operations
   - access_level=editor

3. "HR Department Access"
   - department=hr
   - access_level=editor

Tiered Access Levels

Create Policies for different permission levels:

1. "Read-Only Access"
   - access_level=readonly

2. "Editor Access"
   - access_level=editor

3. "Full Admin Access"
   - access_level=admin

Regional Authorization

Create region-specific Policies:

1. "European Operations"
   - region=europe
   - department=operations

2. "Americas Operations"
   - region=americas
   - department=operations

---

Frequently Asked Questions

Can one Role have multiple Policies?

Yes! Roles can be assigned multiple Policies, and permissions are cumulative.

What happens when I delete a Policy?

• Policy is marked as deleted
• Removed from Role assignments
• Claims within the Policy are not deleted
• Can be restored at any time

Can I rename a Policy?

Yes, edit the Policy and change the Name field. Ensure the new name is unique.

Why can't I create a new Policy?

Possible reasons:

1. Name already exists - Choose a unique name
2. Missing required field - Name is required
3. Insufficient permissions - Need Administrator role

How are Policies assigned to Roles?

In the current version, Policy assignment to Roles is managed through backend configuration or API. The Role detail page shows assigned Policies (read-only).

---

Troubleshooting

Cannot add Policy - "Name already exists"

Solution:

1. Choose a different name
2. Check if the Policy was deleted (enable "Include Deleted")
3. Restore the deleted Policy if appropriate

Policy doesn't appear in Role

Solution:

1. Policy assignment is managed through backend/API
2. Contact your system administrator
3. Verify Policy exists and is not deleted

Cannot delete Policy

Possible causes:

1. Insufficient permissions (not Administrator)
2. Browser session expired
3. Concurrent edit by another user

Solution:

1. Verify Administrator role membership
2. Refresh page and try again
3. Log out and log back in

---

Next Step

Add or manage Policy - Create and manage Policies
What is a Claim? - Learn about Claims
What is a Role? - Understand Roles

Related Topics

Policies:

What is a Policy? - Understanding Policies
Add or manage Policy - Policy management guide

Claims:

What is a Claim? - Understanding Claims
Claims Overview - Manage all Claims
Add or manage Claim - Claim management guide

Roles:

What is a Role? - Understanding Roles
Roles Overview - Manage all Roles

Access Management:

Access Management - Authorization overview
Install Nodinite v7 - OpenID - Configure OIDC/OAuth 2.0