OptionalconditionCommon Expression Language expression to evaluate when the policy rule is partially activated (action, roles, and derived roles match, but condition is not met).
OptionalruleCommon Expression Language expression to evaluate when the policy rule is fully activated (action, roles, and derived roles match, and condition is met).
Common Expression Language expressions to evaluate to produce user-defined output from a policy rule.