Skip to content

Commit cf3899e

Browse files
committed
clarification
1 parent fe6beb7 commit cf3899e

File tree

1 file changed

+9
-9
lines changed

1 file changed

+9
-9
lines changed

articles/purview/troubleshoot-policy-distribution.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -177,11 +177,11 @@ In this example, the delta pull communicates the event that the policy on the re
177177

178178

179179
## Policy constructs
180-
There are 3 top-level policy constructs used within the full pull (/policyElements) and delta pull (/policyEvents) requests: PolicySet, Policy and AttributeRule.
180+
There are 3 top-level policy constructs used within the responses to the full pull (/policyElements) and delta pull (/policyEvents) requests: Policy, PolicySet and AttributeRule.
181181

182-
### PolicySet
182+
### Policy
183183

184-
PolicySet associates Policy to a resource scope. Purview policy decision compute starts with a list of PolicySets. PolicySet evaluation triggers evaluation of Policy referenced in the PolicySet.
184+
Policy specifies the decision the data source must enforce (permit vs. deny) when an Azure AD principal attempts an access via a client, provided request context attributes satisfy attribute predicates specified in the policy (for example scope, requested action, etc.). Evaluation of the Policy triggers evaluation of AttributeRules referenced in the Policy.
185185

186186
|member|value|type|cardinality|description|
187187
|------|-----|----|-----------|-----------|
@@ -190,12 +190,12 @@ PolicySet associates Policy to a resource scope. Purview policy decision compute
190190
|kind| |string|1||
191191
|version|1|number|1||
192192
|updatedAt| |string|1|String representation of time in yyyy-MM-ddTHH:mm:ss.fffffffZ Ex: "2022-01-11T09:55:52.6472858Z"|
193-
|preconditionRules| |array[Object:Rule]|0..1||
194-
|policyRefs| |array[string]|1|List of policy IDs|
193+
|preconditionRules| |array[Object:Rule]|0..1|All the rules are 'anded'|
194+
|decisionRules| |array[Object:DecisionRule]|1||
195195

196-
### Policy
196+
### PolicySet
197197

198-
Policy specifies decision that should be emitted if the policy is applicable for the request provided request context attributes satisfy attribute predicates specified in the policy. Evaluation of policy triggers evaluation of AttributeRules referenced in the Policy.
198+
PolicySet associates an array of Policy IDs to a resource scope where they need to be enforced.
199199

200200
|member|value|type|cardinality|description|
201201
|------|-----|----|-----------|-----------|
@@ -204,8 +204,8 @@ Policy specifies decision that should be emitted if the policy is applicable for
204204
|kind| |string|1||
205205
|version|1|number|1||
206206
|updatedAt| |string|1|String representation of time in yyyy-MM-ddTHH:mm:ss.fffffffZ Ex: "2022-01-11T09:55:52.6472858Z"|
207-
|preconditionRules| |array[Object:Rule]|0..1|All the rules are 'anded'|
208-
|decisionRules| |array[Object:DecisionRule]|1||
207+
|preconditionRules| |array[Object:Rule]|0..1||
208+
|policyRefs| |array[string]|1|List of policy IDs|
209209

210210

211211
### AttributeRule

0 commit comments

Comments
 (0)