.. _policy_ocra:

OCRA Policies
~~~~~~~~~~~~~~
You may define, which administrator or system account is allowed to access the OCRA methods.

Define a policy like this:

 * Policy name: This is the unique name of the policy.
 * Scope: You need to set this to **ocra**. 
 * Action: This is something of:

   * **request** to access *ocra/request*
   * **status** to access *ocra/status*
   * **activationcode** to access *ocra/activationcode*
   * **calcOTP** to access *ocra/calculateOtp*.

.. note:: If no OCRA policy is defined, no administrator or system account is allowed to access the above methods!