Skip to main content


Creating a client-based access control rule

Suggest edit Updated on June 30, 2021

Create client-based access control (CBAC) rules to identify the personal data and personal identifiers in your Pega Platform application. CBAC rules define how an incoming request finds the personal data in your data store. CBAC rules also define the type of access the client has for each data instance (view, modify, or delete).

Before you begin: To create a client-based access control rule, you must have the pzCanManageSecurityPolicies privilege, which is included in the PegaRULES:SecurityAdministrator role.
  1. In the Dev Studio header, click Create SecurityClient Based Access.
  2. Specify the applies to class where the personal data is stored or referenced.
    This is a class for Data-, Index-, or Work- instances.
  3. From the Add to ruleset list, select the ruleset to contain the CBAC rule.
  4. Click Create and open.
  5. Configure your access control rule as described in Configuring a client-based access control rule.
    • Next topic Configuring a client-based access control rule
    Did you find this content helpful? YesNo

    Have a question? Get answers now.

    Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.

    Ready to crush complexity?

    Experience the benefits of Pega Community when you log in.

    We'd prefer it if you saw us at our best. is not optimized for Internet Explorer. For the optimal experience, please use:

    Close Deprecation Notice
    Contact us