# Access Policies

Steps to create a new Resource Access Policy in TrustLogix. This specific policy targets the "Finance" module and returns detailed response context (User city, Department, and Sub-module information) when the action View is performed, provided the resource's department is set to Finance.

***

### Initiate Policy Creation

Navigate to the Access Policies management section within your application to begin the registration.

* Navigate to: Application Module
* Click the "Create policy" button.

### Define Policy Details

Provide the basic identification details for your new policy.

* Name: Enter a unique name (e.g., "FinanceModule").
* Description: Provide a summary of the policy's purpose.
* Click "Next" to proceed to resource selection.

### Resource Selection and Actions

Specify which resources this policy protects and what operations are governed.

* Resource Source: Select RESOURCE from the dropdown.
* Resources: Select the specific resource (e.g., Finance).
* Actions allowed: Select View from the available operations.
* Click "Next" to define conditions.

### Set Policy Conditions

Configure the logic that determines when this policy is applied.

* Select Attribute Type: Choose Resource Attributes.
* Select Attribute: Select Department.
* Operator: Choose Equals.
* Value: Enter Finance.

***Note: Policies condition can contain user attribute (created under Attribute Management section) or Request Attributes (which can be send in authorization request payload)***

### Configure Response Context

Define the additional information that will be returned in the policy evaluation response.

* User Attributes: Select city to include the user's city of residence in the response.
* Resource Attributes: Select Department to echo the resource's department.
* Custom Attributes: Add a new custom field:
* Name: Enter Sub Module.
* Value: Enter Plan, Budget.

### Deploy the policy

Complete the policy creation and push it to the authentication service.

* Save: Click the "Save" button to store the configuration.

Deploy: Click "Deploy" in the "Generating Policy" dialog to move the policy into the Auth Service.