Is it possible to automatically control access to portal resources using rules based on user profile, session, time, LDAP identity or http request?

if possible, is it available out of box or we need to use the API to implement it and where to define the rules?

Thanks