When creating or editing an agreement, you can specify which of the configured security label values will be cleared through the agreement in the Select Authorized Security Label Values step in the New Agreement or Edit Agreement windows. By specifying only a subset of the security labels or security label values to which the agreement can apply, you are able to further limit the objects to which your agreement authorized participants have access. For example, your site may have only one type of agreement that applies to multiple values of several security labels. If you have a contract with another company and need to allow temporary clearance to only one of the configured security labels, you can use this step to apply the agreement to only that security label and its values.

In the example below, the Select Authorized Security Label Values step for the Non-Disclosure Agreement would display only the Corporate Proprietary security label and its values. The agreement will only authorize selected values and only the Internal value is selected. Since only the internal value is applied to object A, the user is cleared for the object.

The Select Authorized Security Label Values step displays the security labels that have at least one value for which the selected agreement type has been configured. The list of security label values that restrict access is under the Authorize drop-down list. The list of security label values that do not restrict access are listed under Unrestricted Values.

You can authorize all configured security label values, selected security label values, or no security label values for a given security label.