Conditional access
Concept
Understanding Conditional ACEs
How conditional ACEs add expression-based requirements to access rules, including three-valued logic behavior.
ConceptUser Claims, Device Claims, and Resource Attributes
How user claims, device claims, and resource attributes provide data for conditional ACE expressions.
ConceptHow Attribute-Based Access Control Works
When and how to use attribute-based access control (ABAC) to express policies that groups alone cannot handle.
How-toWriting Conditional ACE Expressions
Creating conditional ACEs with the sd tool, including expression syntax, practical examples, and verification.