Aliases for Admin policies

Edit online

Aliasing provides a shorthand for referring to lists of users and groups, which simplifies admin policies, and makes them more readable and easier to maintain.

You can define an alias name for a list of users or groups so that you don't have to enter the full list of users, groups, or application names in a rule. A separate alias file is used with each admin policy and is placed in the same directory as its associated Admin policy.

To create an alias where User1, User2, and User 3 are grouped into an alias named dev1 would be defined as follows:

dev1:User1,User2,User3::Development team 1

To use the alias name must be precede the alias name in the admin policy with a dollar sign ('$'). For example, using the dev1 alias instead of User1, User2, and User3 in the admin policy looks similar to the following:

$dev1:-:-:Project List::This is a rule within a user alias

Multiple aliases, separated by a comma, can also be used. Aliases are excluded by placing an exclamation point (!) before the alias name in the admin policy rule.