How to Configure Attribute-Based Access Segments

Last updated: April 10, 2026

Overview

In this article, learn how to configure ABAC segments using Orchestry metadata and M365 security groups.

How to Setup ABAC Segments

  1. Navigate to the ABAC page (Settings > Access Control > ABAC)

  2. Select 'Workspace Surfaces' to enable ABAC

  3. Select the metadata property that will be used on all segments

  4. Setup the first segment

    1. NAME the segment

    2. Assign users and/or security groups as the AUDIENCE

    3. Select the metadata VALUES the audience will have access to

    4. OPTIONAL - enable the segment to show results WITHOUT metadata properties

  5. OPTIONAL - repeat step #4 for additional segments as required

  6. SAVE your changes

NOTE: Remember to TEST your new segments to ensure everything is working as expected.