---
title: Access Policies
slug: access-policies
docTags: 
createdAt: 2026-04-29T13:59:52.411Z
---

Access Policies grant one or more roles to a subject (user, service ID or access group) over all resources or a set of resources based on attributes or tags. Policies extend permissions without changing a subject’s original role.

The following principles define how access policies work:

- Assign a platform and custom roles within a single policy.
- Choose **All resources** or **Resources based on attributes** (attribute-based access control using tags).
- Attribute-based scope takes effect only when the subject and target resources share the selected tags or attributes.

:::hint{type="info"}
Only administrators can view, assign or modify access policies. Other users cannot view or manage access policies.
:::

# Assigning an access policy to a user 

1. From the Kyndryl Bridge main menu :inlineImage[]{src="https://api.archbee.com/api/optimize/QU1TIK52ntw5Jsos0uOt5/NK7Yw9tQgnlqBGwu7eG4H-20260601-205917.svg" alt caption width="57" height="57"}, go to **Administration** → Bridge Access Management → **Users Groups.**
2. Click the **overflow** menu :inlineImage[]{src="https://api.archbee.com/api/optimize/QU1TIK52ntw5Jsos0uOt5/JndGM9EedPv0uB0o6JMpp-20260601-221027.svg" alt caption width="57" height="57"}next to the user that you want to modify.
3. Select **Edit Membership**.
4. Navigate to the **Access Policies** tab.
5. Click **+ Assign Access Policy.**
6. Select the **Services** that you want to assign.
7. Select the **Scope**: All resources or Resources based on attributes.
8. Select roles (Platform roles, service roles, custom roles, or a combination of the three)).
9. Select **Assign**.

# Assigning an access policy to an access group 

:::hint{type="info"}
A similar flow applies when assigning policies to service IDs or access groups from their detail pages.
:::

# Learn more

****[Assigning access policies to an access group](docId\:HZc4qy5Gh7gwkLHfYsAyC), and [Assigning an access policy to a service ID](docId\:I2WXFQP2tstQi7GfvOF18).