Add Policy Panel

Overview

The Add Policy panel allows administrators to create reusable authorization policies within Catalog IAM.

Policies define fine-grained permission rules—specifying resource scopes, allowed or denied actions, and target catalog entities (catalogs, namespaces, tables). These policies can later be associated with roles and bound to principals.

Access Denied

You don't have access to this resource.

Access Requirements

This page is available only to users with Administrator privileges or explicit CREATE permissions for Catalog IAM Policies. Non-administrator users cannot access this form.

Authorization

Prerequisites

Before creating a new policy, ensure that:

You possess administrative privileges within Catalog IAM.
The policy name is unique across the organization.
You have identified the specific resource scopes and actions required for the authorization rule.

Policy Basic Fields

The general settings section requires the configuration of basic metadata attributes:

Field	Required	Description
Name	Yes	Unique name identifying the policy within Catalog IAM.
Description	No	Contextual summary outlining the intent, team, or scope of the policy. Supports up to 200 characters.
Priority	Yes	Numeric evaluation priority used when multiple policies or rules conflict for a single request.

Policy Rules Configuration

The Rules section defines the resource scope, evaluation effect, target resource identifier, and specific permitted/denied actions.

Rule Attributes

Field / Control	Type	Description
Resource Type	Dropdown	Selects the target resource layer (e.g., `CATALOG`, `NAMESPACE`, or `TABLE`).
Effect	Toggle / Button	Defines whether matching requests are permitted (`Allow`) or forbidden (`Deny`).
Catalog / Scope	Input	Specifies target resource patterns or wildcard masks (e.g., `*` for all catalogs, or explicit catalog names).
Action Selector	Multi-select List	Selects allowed/denied operation actions for the rule (e.g., `CATALOG_GET`, `CATALOG_CREATE`).
Show Only Unselected	Toggle	Filters the action list to display only unselected actions for quicker navigation.
Add Rule (`+`)	Button	Appends a new empty rule configuration row to the policy.
Delete Rule (Trash Icon)	Button	Removes the selected rule row from the policy definition.

Policy Creation Process

Open the Add Policy slide-out panel from the Policies overview page.
Enter a unique policy Name, optional Description, and numeric Priority.
Under Rules, select the Resource Type (e.g., CATALOG).
Set the rule Effect to Allow or Deny.
Enter the target resource pattern in the Catalog scope field (e.g., *).
Browse or search through the Action list, checking all applicable permissions for this rule.
Click the Add Rule (+) icon if additional resource rules are required within the same policy.
Review all configured rules and click Save to commit the policy, or Cancel to discard changes.

Validation

Name cannot be left empty or consist solely of whitespace.
Each defined rule must have a valid Resource Type, Effect, target scope, and at least one selected Action.
Priority must be a valid integer value.