Skip navigation.
Downloads | Product Documentation | Support

Administration Console Online Help

# Configure SAF queue security policies

To configure a SAF queue security policy:

1. If you have not already done so, in the Change Center of the Administration Console, click Lock & Edit (see Use the Change Center).
2. In the Administration Console, navigate to the SAF imported destination resource that you want to configure:
   - Navigate to JMS Resources in System Modules
   - Navigate to JMS resources in an application module
3. On the Configuration > Queues tab, select the SAF queue where you want to configure the security policy.
4. On the Security > Policies tab, select the topic security policy you want to configure.
5. Select the method from the drop-down box.
6. Click Add Conditions.
7. Choose a predicate from the list box. Typically, you will choose `Group`. When a group is used to create a security role, the security role can be granted to all members of the group (that is, multiple users). Click Next.
8. The next steps depend on what you chose for your condition predicate.
   1. If you selected `Group` or `User`, enter one or more arguments that define the group or groups that should hold this role and click Finish.
   2. If you selected a time-constrained predicate, such as `Access occurs between specified hours`, select start and end times and a GMT offset and click Finish.
9. If necessary, use the buttons in the Role Conditions section to modify the expressions:
   1. The Move Up and Move Down buttons change the ordering of the selected expression.
   2. The Combine and Uncombine buttons let you merge or unmerge role conditionsswitches the highlighted `and` and `or` statements between expressions.
   3. The Negate button allows you to make a condition negative; for example, `NOT Group Operators` excludes the Operators group from the role.
   4. The Remove button deletes the selected expression.
10. When all the expressions in the Role Conditions section are correct, click Save.
11. To activate these changes, in the Change Center of the Administration Console, click Activate Changes.
    Not all changes take effect immediately—some require a restart (see Use the Change Center).