Configuring authority grants

Authority profiles consist of one or more authority grants that give users the authority to approve particular types of issues. Users can have more than one authority profile, and authority profiles can be shared among multiple users.

Like roles and permissions, authority grants are always additive. A user can approve an issue if the user has at least one grant that allows them to approve that issue. For example, a user has one profile that grants a user authority to approve total premium up to $1000. This user also has another profile that grants them the ability to approve total premium up to $1500. In this case, the $1500 limit will be the one that is in effect.

An authority grant has an associated value if the comparator specifies a value type other than None. If the authority grant for a given issue has an associated value, the grant can either be contingent on the given value or can apply to any possible value. If the grant applies to any value then the ApproveAnyValue bit is set on the associated authority grant. Otherwise, PolicyCenter sets the Value field on the authority grant, and compares the grant value to the issue value to determine if the issue can be approved. In addition, PolicyCenter compares the grant value to the approval value, to make sure that the approval falls within the limits of the grant.