1 Introduction

This document describes the structure of the XML file format used to preserve policy settings for Microsoft Authorization Manager (AzMan). Other formats are possible, but are not addressed in this document. This structure is currently used by all Windows AzMan implementations.

The AzMan XML policy format is used in order to enable interoperability by implementers. By using the specifications in this document, an implementer can:

  • Create a AzMan XML policy file readable by the Microsoft Management Console (MMC) Authorization Manager snap-in, and by the authorization manager runtime used by applications to make authorization decisions.

  • Read an AzMan XML policy file that was created using the MMC Authorization Manager snap-in.

Sections 1.7 and 2 of this specification are normative. All other sections and examples in this specification are informative.