Configuration policies bring standardization to a particular organizational unit. For example, you could use a configuration policy to grant access to a certain resource for all users within an organizational unit.
Or, you might have two virtual organizational units. One contains people working in the United States, and the other contains people in the United Kingdom. You can create configuration policies to give users in the United States organizational unit a Country attribute of US. And, another configuration policy gives users within the United Kingdom a Country attribute of UK. Take a look:
Note: The configuration policy in the video isn’t active until the policy is assigned to an organizational unit.
Once a configuration policy is assigned to a particular organizational unit, a job is initiated. The job updates all user objects within the organizational unit, as shown below.
After initial setup, any time a new user is added to the organizational unit, a job runs to ensure the user object matches all of the organizational unit’s configuration policies.
Creating a configuration policy
Complete the steps below to set up a new configuration policy.
- In the menu on the left side of the screen, select Policies > Configuration.
- Click Add.
- Enter a Name for the policy.
- With the Organizational units tab selected, click Add, and then select the organizational unit to which the policy will apply.
- Select the Actions tab, click Add, and then select the actions you want to include in the policy.
- Click Save.
Assigning a configuration policy to an organizational unit
A configuration policy isn’t active until you specify the organizational unit(s) to which the policy will apply. Follow the steps below to assign a configuration policy to a certain organizational unit.
- In the menu on the left side of the screen, select Organizational Units.
- Expand the tree and locate the organizational unit to which the config policy will apply.
- Click the desired organizational unit’s ellipses (…) button and select Config policies.
- From the Config policies assigned to OU frame, click Assign.
- Select the configuration policy you want to assign to the organizational unit and click Assign. The policy is now assigned to the organizational unit.
Take a look at these steps in action:
Editing or deleting a config policy
If you want to update or delete an existing configuration policy, follow the steps below.
- In the menu on the left side of the screen, select Policies > Configuration.
- Select the desired policy and either:
- Click Edit, make desired changes, and click Save.
- Click Delete and confirm the deletion.