Additional Restriction
additional_restriction
The Additional Restriction object describes supplementary access controls and guardrails that constrain or limit granted permissions beyond the primary policy. These restrictions are typically applied through hierarchical policy frameworks, organizational controls, or conditional access mechanisms. Examples include AWS Service Control Policies (SCPs), Resource Control Policies (RCPs), Azure Management Group policies, GCP Organization policies, conditional access policies, IP restrictions, time-based constraints, and MFA requirements.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Policy | policy | Policy[] | Detailed information about the policy document that defines this restriction, including policy metadata, type, scope, and the specific rules or conditions that implement the access control. |
| Raw Data | raw_data | JSON | Group: |
| Record ID | record_id | String | Group: |
| Status | status | String | The current status of the policy restriction, normalized to the caption of the status_id enum value. |
| Status ID | status_id | Integer | The normalized status identifier indicating the applicability of this policy restriction.
|
| Unmapped | unmapped | Unmapped[] | Data from the source that was not mapped into the schema. |
Relationships
Inbound Relationships
These objects and events reference Additional Restriction in their attributes:
Outbound Relationships
Additional Restriction references the following objects and events in its attributes:
This page describes qdm-1.5.1+ocsf-1.6.0
Updated 22 days ago