{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40302,"path":"platform-security/access-control/create-a-machine-identity-access-control.md","title":"Create a machine identity access control","bundle":null,"doc_type":null,"release":"australia","body":"\n# Create a machine identity access control\n\nEnable administrators to define and enforce granular control for integration users by introducing User Access Profiles. This feature provides an additional layer of security and control, allowing admins to specify the exact resources \\(REST APIs and SOAP APIs\\) that an integration user can access, ensuring tighter governance and minimizing security risks.\n\n## Before you begin\n\nRole required: admin\n\n## Procedure\n\n1.  Navigate to **All** &gt; **System Security** &gt; **Machine Identity Access Controls**.\n\n2.  Select the **New** button.\n\n3.  Fill in the fields of the form.\n\n<table id=\"table_mmy_wnz_zfc\"><thead><tr><th>\n\nField\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nName\n\n</td><td>\n\nName of the access control record.\n\n</td></tr><tr><td>\n\nApplication\n\n</td><td>\n\nApplication containing the record.\n\n</td></tr><tr><td>\n\nDescription\n\n</td><td>\n\nDescription of the record.\n\n</td></tr><tr><td>\n\nActive\n\n</td><td>\n\nDetermines if the policy is active\n\n</td></tr><tr><td>\n\nREST API Policy\n\n</td><td>\n\nSelect the target REST API policy. **Note:** Select the \\[Omitted image \"machine-acl-lock-icon.png\"\\] Alt text: Lock and the \\[Omitted image \"machine-acl-search-icon.png\"\\] Alt text: Search icon to add a policy.\n\n</td></tr><tr><td>\n\nSOAP API Policy\n\n</td><td>\n\nSelect the target SOAP API policy. **Note:** Select the \\[Omitted image \"machine-acl-lock-icon.png\"\\] Alt text: Lock and the \\[Omitted image \"machine-acl-search-icon.png\"\\] Alt text: Search icon to add a policy.\n\n</td></tr><tr><td>\n\nTables\n\n</td><td>\n\nSelect the tables this policy applies to\n\n</td></tr><tr><td>\n\nApplies to Child Table\n\n</td><td>\n\nCheck this to apply the policy to child tables of the **Tables** field\n\n</td></tr></tbody>\n</table>4.  Select the `Insert a row below` prompt and add users to apply the control to.\n\n    You can add multiple users to the access control.\n\n    **Note:** You can only select users with Web Service Access.\n\n5.  Select **Submit**.\n\n\n## Result\n\nThe following is an example of a machine identity access control form that has been filled out:\n\n\\[Omitted image \"machine-acl-example.png\"\\] Alt text: An example of a machine identity access control form filled out.\n\nA user with an machine identity access control cannot access any other APIs \\(REST or SOAP\\) and will only be able to access the resources explicitly stated in the access control, even if they have the required roles.\n\n"}}