Working with policies

You can create multiple policies for each policy type, but only one active policy of each type can be applied to a specific device. Use the Policies page to specify and control aspects of enterprise device behavior. To distribute the policy to devices, apply your policy to the relevant labels.

This section includes the following topics:

Accessing the Policies page

You can create multiple policies for each policy type, but only one active policy of each type can be applied to a specific device. Use the Policies page to specify and control aspects of enterprise device behavior.

Users must have one of the following roles to access the Policies page:

  • View policies
  • Apply and remove policy label
  • Manage policy

Procedure 

  1. From the Admin Portal, go to Policies & Configs > Policies.
  2. Refer to the Policy page table table for details.

Policy page table

The following table summarizes fields and descriptions in the Policies Page window.

Table 25.   Policies page table
Fields Description

Policy Name

Identifier for this policy. The policy name must be unique for policies of the same type.

Priority

Priority set for this policy in relation to other policies of the same type.

Status

Current status of this policy. The status can be Active or Inactive.

Description

Additional information about the policy that you entered when you created the policy.

Type

Which policy category this policy belongs to.

Last Modified

The date and time of the last change made to this policy.

# Phones

The number of devices affected by this policy. Click the link to display a list of the devices.

Labels

The labels applied to this policy.

WatchList

Exception: Backup & Restore policies are not distributed to the [email protected] client app. In this case, the WatchList column indicates the devices that are awaiting backup.

Displays the number of devices for which the policy is queued. Click the link to display a list of the devices.

Modifying an existing policy

You can edit an existing default or custom policy in the Admin Portal.

When changing a policy, devices with the changed policy applied may prompt users to restart their devices.

Procedure 

  1. From the Admin Portal, go to Policies & Configs > Policies.
  2. Click a policy in the Policy Name column to open the Policy Details pane on the right of the window.
  3. Click the Edit button to open the Modify Policy window for the policy type you selected.
  4. Refer to following sections as a guide for each policy type.

  5. Click Save.

Policies do not take affect on any device until they are applied to a label. See Applying policies to labels for details.

Creating a custom policy

While you can edit the default policies provided by Ivanti, you can also create your own custom security, privacy, lockdown, or sync policy.

Procedure 

  1. From the Admin Portal, go to Policies & Configs > Policies.
  2. Click Add New and select a policy type you want to create.
  3. Refer to following sections as a guide for each policy type.

    See the AppConnect Guide for EPMM for more information regarding the AppConnect global policy.

  4. Click Save.

Policies do not take effect on any device until they are applied to a label. See Applying policies to labels for details.

Prioritizing policies

When you create a custom policy, you can assign a priority relative to the other custom policies of the same type. This priority determines which policy is applied if more than one policy is associated with a specific device. For example, if you create a security policy for executives and a security policy for Windows devices, then an executive with a Windows device would have two different possible policies applied. Because only one policy of a given type can be applied to a device, the priority defined for the policies determines which is applied.

You can manage priorities for individual policies, or you can use the Modify Priority screen to manage priorities for a policy type in a single screen.

To manage priorities in a single screen:

  1. Go to Policies & Configs > Policies.
  2. Select a type from the Policy Type drop-down.
  3. Click Modify Priority. The Modify Policy Priorities dialog appears.
  4. Drag and drop policies until they reflect the priorities you want to set, with highest priority of 1 appearing at the top of the list.
  5. Click Save.

Displaying custom policies for a selected label

To display a list of the policies associated with a specific label:

  1. Go to a policies page under Policies & Configs.
  2. Select a label from the Labels drop-down list.

Default policies are not included.

Displaying custom policies for a selected user

To display a list of the policies associated with a specific user:

  1. Go to a policies page under Policies & Configs.
  2. In Search by User, enter any portion of the user’s first name, last name, or user ID and click the search icon. Policies assigned to user records matching the entered criteria are displayed.

Default policies are included. See Using default policies.

Deleting a policy

When you delete a policy, all devices to which that policy were applied are updated with the default version of that policy. You cannot delete a default policy.

Procedure 

  1. From the Admin Portal, go to Policies & Configs > Policies.
  2. Click one of the filters under the Policies & Configs tab to display the policy you want to delete.
  3. Select the check box for the policy you want to delete.
  4. Click Delete in the upper left.

Applying policies to labels

Use labels to apply policies to devices.

Procedure 

  1. Log into the Admin Portal.
  2. Select Policies & Configs > Policies.
  3. Click a policy in the Policy Name column to display the policies you want to work with.
  4. Select the check box next to the policy.

    You can search by policy name or description to help find the policy or policies you want to apply.

  5. Click More Actions > Apply To Label.
  6. Select the label.

    You can search by label name or description to help find the label.

  7. Click Apply.

Removing policies from labels

You can remove a policy from a label when you no longer want changes to that policy to affect devices having a given label.

Procedure 

  1. From the Admin Portal, select Policies & Configs > Policies.
  2. Click a policy in the Policy Name column to display the policies you want to work with.
  3. Select the check box next to the policy.
  4. Click More Actions > Remove From Label.
  5. Select the label.
  6. Click Remove.