Subscribe

About Policy Deployment

You can deploy policies at tenant, group, and user level for each product. Policies deployed at tenant level are applied to all the users in that tenant. For more granularity, you can apply different policies to specific groups or specific users. Deployments defined at user level override deployments at group level, which in turn override those at tenant level.

In addition to the policies you define in Automation Ops, two default deployment options are available for each product:

  • No Policy - Disables the enforcement of a governance policy from Automation Ops at the user, group, or tenant level.
  • Inherit - Inherits the governance policy from the higher level (user inherits from group and group inherits from tenant).

The policy that is applied for a product to a user is determined in the following order:

  1. When a policy is deployed at user level, the policy is applied to the user.
    • If a policy created in Automation Ops is selected, the policy overrides any policy deployed at group or tenant level.
    • If the No Policy option is selected, the product is not governed by Automation Ops for the user, overriding any policy deployed at group or tenant level.
    • If the Inherit option is selected, the policy defined at group level is applied. If one does not exist, the tenant-level policy is applied.
  2. When no policy deployment is defined at user level:
    • If the user is part of a group and a policy is deployed at group level, the group policy is applied to the user.
      • If a policy created in Automation Ops is selected, the policy overrides any policy deployed at tenant level.
      • If the No Policy option is selected, the product is not governed by Automation Ops for the user, overriding any policy deployed at tenant level.
      • If the Inherit option is selected, the policy defined at tenant level is applied.
    • If the user is part of multiple groups where a policy is deployed, the group policy with the highest priority is applied to the user (the lower the priority value, the higher the priority of the group policy).
  3. When no policy deployment is defined at user or group level, the policy deployed at tenant level for the product is applied to the user.
    • If the No Policy option is selected, the product is not governed by Automation Ops for the user.
  4. When the product is not governed by Automation Ops (the No Policy option is applied to the user), the policy enforced using the file-based governance system is applied to the user, if applicable.

📘

Note:

The policies deployed from Automation Ops are applied when the user signs in to their account from Studio or the Assistant, If the user is already signed in, the policies are applied when the user restarts Studio.

Updated 18 days ago


About Policy Deployment


Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.