Access permission is configured on the Overview tab of each network policy and allows you to configure the policy to either grant or deny access to users if the conditions and constraints of the network policy are matched by the connection request. Access permission settings have the following effect:
Grant access. Access is granted if the connection request matches the conditions and constraints that are configured in the policy.
Deny access. Access is denied if the connection request matches the conditions and constraints that are configured in the policy.
Access permission is also granted or denied with the dial-in properties of each user account.