The Islandora XACML Editor provides a graphical user interface to edit XACML policies for objects in a repository or collection. It adds a new section in the Manage tab for each object and collection called Object Policy where permissions can be granted to Drupal users or roles for the following:
Object Management: Controls ability to view the options on the Manage tab for objects or collections.
Drupal.org modules:
Install as usual, see this for further information.
Using the Object Policy tab to manage access restrictions with XACML
See the Islandora Deployments GitHub repository for more examples of customized global XACML policies in Islandora's Fedora Commons.