Data Governance Server Documentation Index
Configuration Reference Home

Policy Decision Service

Note: this component stores cluster-wide configuration data and is mirrored across all servers in the topology within the the same cluster.

Note: changes to cluster-wide configuration objects are immediately and automatically mirrored across all servers within the same cluster, so offline changes are not supported.

Policy Decision Service contains the properties that affect the overall operation of the Data Governance Server policy service.

Relations from This Component
Properties
dsconfig Usage

Relations from This Component

The following components have a direct aggregation relation from Policy Decision Service:

Properties

The properties supported by this managed object are as follows:


Basic Properties: Advanced Properties:
↓ pdp-mode  None
↓ deployment-package
↓ policy-server

Basic Properties

pdp-mode

Description
Determines whether policy requests are made to the embedded PDP or over REST to an external policy decision server.
Default Value
embedded
Allowed Values
external - PDP invocations are made over REST to an external policy decision server. This mode may be more convenient in development environments where policies are being developed. When this option is selected policy requests will be directed to the external server defined by the policy-server property.

embedded - PDP invocations are made via a Java call to the embedded PDP library. This is more efficient and is the recommended mode for production environments. When this option is selected the PDP will run with the policies defined by the deployment-package property.
Multi-Valued
No
Required
No
Admin Action Required
None. Modification requires no further action

deployment-package

Description
Contents of the policy Deployment Package to load into the embedded decision point. The policies defined by this Deployment Package are only used if the value of the pdp-mode property is "embedded".
Default Value
None
Allowed Values
A string
Multi-Valued
No
Required
No
Admin Action Required
None. Modification requires no further action

policy-server

Description
Specifies the policy external server that is hosting the Policy Decision Point (PDP) for this instance of Data Governance Server. This external server is only used if the value of the pdp-mode property is "external".
Default Value
None
Allowed Values
The DN of any Policy External Server.
Multi-Valued
No
Required
No
Admin Action Required
None. Modification requires no further action


dsconfig Usage

To view the Policy Decision Service configuration:

dsconfig get-policy-decision-service-prop
     [--tab-delimited]
     [--script-friendly]
     [--property {propertyName}] ...

To update the Policy Decision Service configuration:

dsconfig set-policy-decision-service-prop
     (--set|--add|--remove) {propertyName}:{propertyValue}
     [(--set|--add|--remove) {propertyName}:{propertyValue}] ...