The mapping state determines the authorization behavior for a logical name instance.
| State | Description |
|---|---|
| AUTO | Map the logical role to a physical role of the same name. The logical role and the physical role must match, otherwise, authorization fails. |
| NONE | Disable the logical role, which means that the logical role is not authorized. This mapping state prohibits anyone from accessing the resource (MBO or Operation). Carefully consider potential consequences before using this option. |
| MAPPED | A state that is applied after you have actively mapped the logical role to one or more physical roles. Click the cell adjacent to the logical role name and scroll to the bottom of the list to see the list of mapped physical roles. |