Thank you for your feedback.
Form temporarily unavailable. Please try again or contact to submit your comments.
  • Madrid
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store

Configure a cloud policy condition

Log in to subscribe to topics and get notified when content changes.

Configure a cloud policy condition

Configure the condition on a cloud policy rule that determines when the actions in the rule can run. Conditions are optional.

Before you begin

About this task

You cannot edit conditions for policy rules that are in the Published state. Click Edit to make the policy go into a draft mode. After making the required changes, publish the policy again.


  1. Navigate to Cloud Management > Cloud Admin Portal > Govern > Policies.
  2. Open a cloud policy rule.
  3. In the Conditions builder, fill out the form fields (see table). For the on Lease end trigger, the form fields will differ.

    Field Description
    [Criteria type] Select one of the following options:
    • Request Form: base the condition on a value for the field in the blueprint.
    • User: base the condition on a user role or on the group the user belongs to.
    [User criteria type] Select one of the following options for User:
    • Role: base the condition upon the role the user has.
    • Group: base the condition upon the group the user belongs to.
    [Relational Operator] Select an operator that evaluates the user entity to the role or group, or the attribute to the value.
    For example, to create a condition that applies when the user belongs to a specific group like the Database group, select these values for the following fields:
    • [Criteria Type]: User
    • [User Entity]: Group
    • [Relational Operator]: Equals
    • [Group]: Database
    [Value] Based on the [Criteria type] you select, enter or select a value.
    • If you select Request Form, enter a value for the attribute.
    • If you select User > Group, choose from a list of groups.
    • If you select User > Role, choose from a list of roles.
    [Logical operator]
    If you configure multiple conditions, select the logical operator that determines how the system evaluates the condition in relation to the next condition (the next condition is determined by the Order field):
    • AND: this condition the next condition must meet the criteria before the policy is eligible for execution.
    • OR: this condition or the next condition that matches the criteria can allow the policy to be eligible for execution.
    If you do not select an option, AND is used by default.
  4. Click Submit.

What to do next

Configure one or more actions.