Creating tuple parameters for session-level policies

Combine several session-level policy parameters into a single parameter known as a tuple. Compared to using multiple single parameters, where each parameter matches any value in a group, tuple parameters allow finer control by defining only specific combinations of values to match.

Before you begin

Create or edit a session-level policy using the Policy Builder for Data, and begin creating or editing a policy rule. This procedure begins with either the Create New Rule or Edit Rule window open.

Procedure

  1. From the Rule criteria panel, select Tuples from the Session level criteria menu.
  2. Use check boxes to select parameters to include in the tuple.
  3. Define a new group or select and edit an existing group to use with the tuple.
    • To define a new group:
      1. Use the new icon to open the Create new group dialog.
      2. Use the Description field to provide a name for the group.
      3. Use the General tab to configure the group. For more information, see Using the group builder.
    • To edit an existing group, select the group from the menu and use the edit icon to open the Edit group dialog. If you do not need to edit the existing group, simply select it and continue defining criteria for the session-level policy.
  4. Select the Members tab to populate and work with group members.
    Use the new, edit, and remove icons to add, edit, or remove group members. When adding members, the Add member dialog displays fields matching the tuple criteria.
    Note:

    An empty member matches any value. Use GUARDIUM://empty to match an empty value.