APBR: User source identity in APBR policies

You can configure advanced policy-based routing (APBR) policies by defining the user source identity as one of the match criteria along with source addresses, destination addresses, and applications. If you specify source identity as a match criteria in a policy, then the user and role information are retrieved before policy lookup can proceed. After a successful match, the APBR profile configured with the APBR policy is used for applying the configured rule.