Skip to content

Grants

Grants represent an assignment or revocation of entitlements or entitlement bundles to a principal. A principal can have multiple grants.

Grant types can have different behavior characteristics.

Base

A principal and resource can only have a single base grant. Creating a base grant type replaces all other existing grants. The following grant types are available:

  • POLICY: Creates a grant for a principal driven by existing policy rules defined for the app.
  • CUSTOM: Creates a grant for a principal with specific entitlement and respective values.