Policies Overview

Gain complete control of your authorization Policies in Nodinite v7. This page guides you through managing, adding, editing, deleting, and restoring Policies—groups of Claims that are assigned to Roles.

• ✅ Centralized management of all Policies
• ✅ Track which Roles use each Policy
• ✅ Powerful filtering and search capabilities
• ✅ Restore deleted Policies when needed

Note

Policies are only available when Nodinite is configured for OIDC/OAuth 2.0 authentication mode (Install Nodinite v7 - OpenID). For Windows authentication mode, use Users and Windows AD Groups instead.

[!IMPORTANT] Modifying Existing Policies Is Extremely Dangerous

Adding Claims to an existing Policy can lock out ALL users (including admins) because:

• Claims use AND logic - users must have ALL Claims in the Policy
• Claims must match EXACTLY what your Identity Provider (IDP) sends
• If you add a Claim your IDP doesn't provide, NO users will match

ALWAYS:

• ✅ Create NEW Policies instead of modifying existing ones
• ✅ Verify Claims exist in your IDP before adding them (Entra ID Token Claims Validation)
• ✅ Test with non-admin accounts first
• ❌ NEVER modify the Administrators Policy without a tested backup plan

[!TIP] Get started now: Add or manage Policy user guide.

The Policies Overview in the Access Management menu is where a Nodinite Administrator manages Policies for OIDC/OAuth 2.0 authorization.

This page focuses on managing the list of Policies. For detailed information about how Policies work, authorization logic, and best practices, see What is a Policy?

Understanding Policies in Access Management

A Policy is satisfied when the user's token holds all of its Claims (AND). A Role is granted when the user satisfies any of the Policies assigned to it (OR).

Blue: Claims; orange: the Policies you manage on this page (AND between their Claims); purple: the Role (OR between its Policies); green: the access granted by the Role's permission sets.

The Policies List

In the Policies Overview, you have a sortable list of defined Policies. You can narrow an extensive list by typing characters into the filter text box.

The Policies Overview lists each Policy with its Description and an Action menu.

Manage Policies

The available functionalities for Managing Policies are:

• Add new Policy - Create Policies
• Edit existing Policy - Modify Name, Description, Claims, or Roles
• Delete Policy - Remove Policies (can be restored)
• Restore deleted Policy - Recover previously deleted Policies
• Filter the list of Policies - Search by Name or Description
• Sort - Order by any column

Add new Policy

Click the "Add Policy" button to create a new Policy.

The "Add Policy" button opens an empty Policy detail page.

You'll navigate to the Policy detail page where you can:

• Enter Name and Description
• Add Claims using three tabs:
  • New - Create or edit Claims
  • All - Browse and select existing Claims
  • Selected - View and manage Claims in this Policy
• Assign the Policy to Roles in the Roles card

Edit Policy

To Edit an existing Policy, click the link in the Name column or open the menu from the "Action" button and click "Edit".

The Action menu on a Policy row holds Edit and Delete.

Delete Policy

To Delete an existing Policy, open the menu from the "Action" button and click "Delete", or click the "Delete" button at the bottom of the Policy detail page.

The highlighted 'Delete' menu item opens a confirmation modal.

Important

Deleted Policies are removed from Role assignments. Claims within the Policy are not deleted.

Restore deleted Policy

To Restore a deleted Policy, first check the "Include deleted" checkbox.

With "Include deleted" checked, deleted Policies are listed with a 'Deleted' badge.

Then open the menu from the "Action" button and click "Restore".

On a deleted Policy, 'Restore' replaces 'Delete' in the Action menu.

A restored Policy is not reassigned to its former Roles; reassign it in the Roles card of the Policy (Add or manage Policy).

Filter Policies

Use the search filter at the top of the page to find Policies:

• Type any text to search across Name and Description fields
• Results update in real-time as you type
• Clear the filter to show all Policies

Sort Policies

Click any column header to sort the list:

• Name - Alphabetical order
• Created - Date/time order
• Changed - Date/time order

Click again to reverse the sort order (ascending/descending).

Understanding the Columns

Quick Reference

Validation Rules

• Names must be unique - Case-sensitive
• Name is required - Description optional but recommended
• At least one Claim - Nodinite 7.2.0+ blocks saving an empty Policy, since it would match every user
• Deleted Policies - Can be restored, removed from Role assignments
• Claims not deleted - When Policy deleted, Claims remain

Tip

For detailed validation rules, naming conventions, authorization logic, and best practices, see What is a Policy?

Frequently Asked Questions

More answers are in the Access Management Troubleshooting guide and in Claims and Policies - Common Scenarios.

Can one Role have multiple Policies?

Yes! Roles can be assigned multiple Policies with OR logic. See What is a Policy? for authorization logic details.

What happens when I delete a Policy?

• Marked as deleted
• Removed from Role assignments
• Claims within Policy not deleted
• Can be restored
• The change is recorded in Log Audits

Can I rename a Policy?

Yes, edit the Policy and change the Name field. Ensure the new name is unique.

Why can't I create a new Policy?

1. Name already exists - Choose unique name
2. Missing required field - Name required
3. No Claims - Add at least one Claim (7.2.0+)
4. Insufficient permissions - Need the Administrators Role

Tip

For authorization flow, AND/OR logic, and conflicting claims guidance, see What is a Policy?

Troubleshooting

Cannot add Policy - "Name already exists"

1. Choose different name
2. Check "Include deleted" - may have been deleted
3. Restore deleted Policy if appropriate

Policy doesn't appear in Role

1. Open the Policy and check the Roles card; check the Role there and save (Add or manage Policy)
2. Verify the Policy exists and is not deleted

Users don't get the Role the Policy should grant

1. Compare the Policy's Claims with the claims in the user's token (Entra ID Token Claims Validation)
2. Remember the AND logic: the user must have every Claim in the Policy
3. Tokens are cached; see What is a Policy? for token caching

Cannot delete Policy

1. Refresh page and try again
2. Check browser session hasn't expired
3. Another administrator may be editing the same Policy

Next Steps

• Add or manage Policy - Create and manage Policies
• What is a Claim? - Learn about Claims
• What is a Role? - Understand Roles

Related Topics

Policies

• What is a Policy? - Understanding Policies
• Add or manage Policy - Policy management guide

Claims

• What is a Claim? - Understanding Claims
• Claims Overview - Manage all Claims
• Add or manage Claim - Claim management guide

Roles

• What is a Role? - Understanding Roles
• Roles Overview - Manage all Roles
• Permission Set for Log Views - What a Role grants in Log Views
• Permission Set for Monitor Views - What a Role grants in Monitor Views

Access Management and Authentication

• Access Management - Authorization overview
• Claims and Policies - Common Scenarios - Implementation examples
• Install Nodinite v7 - OpenID - Configure OIDC/OAuth 2.0
• Install Nodinite v7 - OpenID - EntraID - Microsoft Entra ID app registrations
• Log Audits - Who changed what