OptionalexprA Common Expression Language expression to evaluate when the policy rule is fully activated (action, roles, and derived roles match, and condition is met).
Use when instead.
OptionalwhenCommon Expression Language expressions to evaluate.
User-defined output to be produced when evaluating a policy rule.