Define Policies Your Way — Visual or DSL

Whether you're a security architect or a business admin, Keymate lets you write access policies through an intuitive UI or a powerful DSL editor — and switch between them instantly.

How Dual-Mode Policy Authoring Works

Keymate provides a synchronized editing experience: visual form inputs for non-technical users and a DSL expression editor for power users. Switch between the two at any time — without losing fidelity. Behind the scenes, policies are modeled as a normalized AST (Abstract Syntax Tree), enabling accurate transformations between UI and text.

Synchronized UI and DSL Editing

Keymate provides a synchronized editing experience: visual form inputs for non-technical users and a DSL expression editor for power users.

Switch between the two at any time — without losing fidelity. Behind the scenes, policies are modeled as a normalized AST (Abstract Syntax Tree), enabling accurate transformations between UI and text.

Example: Visual UI form for User.department = "Finance" AND Context.time < 1800 is converted to the DSL: user.department == "Finance" && context.time < 1800.

Key Components:

Visual UI Form

Synchronized DSL Editor

Shared AST Model

Safe Transformation

What Makes It Unique in Keymate

UI & Text Mode Interchangeable

Define conditions via forms, dropdowns, or DSL — then toggle back and forth freely.

AST-Based DSL Engine

Internal expression model enables safe round-trip between UI and text.

Autocomplete & Validation

Visual DSL editor with live syntax checking, autocomplete, and token tooltips.

Visual Templates

Start from use-case templates (e.g. "Finance Access", "VPN Block") and customize in either mode.

Multi-Policy Mode Support

Works across ABAC, PBAC, RADAC, DSAC, RBAC with UI-native entry screens.

Seamless Simulation Integration

Test the resulting logic with tokens/context in either mode.

The most flexible and powerful policy editor for any team.

Frequently Asked Questions

Understanding Keymate's Dual-Mode Policy Definition.

It refers to the ability to define access policies using either a visual interface or a text-based DSL editor. Keymate supports both modes interchangeably.

Yes. The visual mode is designed for security and compliance teams that may not be technical. All logic is constructed via dropdowns and structured inputs in Keymate.

Yes. Security engineers can use the DSL editor with autocomplete, validation, and syntax highlighting. The DSL is flexible and audit-friendly in Keymate.

Absolutely. Keymate uses an AST-based model that keeps policy definitions consistent even when toggling between modes.

How to Use Dual-Mode Policy Definition

Follow these steps to create and manage policies your way.

From Creation to Deployment

Create a new policy in Admin Console

Start by giving your new policy a name.

Choose either UI Mode or DSL Mode

Select your preferred editor to begin.

Define conditions using form inputs or write logic in DSL

Use the intuitive UI or the powerful DSL editor to build your rules.

Toggle modes anytime without loss

Switch between UI and DSL views seamlessly.

Use the Simulation tab to test

Verify your logic against sample data.

Save and publish versioned policy

Your policy is now live and tracked with version history.

Launch the Policy Builder

Ready to see it in action? Try the Dual-Mode Policy Builder now.

ELEVATE YOUR IAM STRATEGY

Ready to Transform Your Keycloak Experience?

Implement fine-grained authorization, multi-tenant infrastructure, and comprehensive security policies with Keymate — built on the Keycloak foundation you already trust.