Working with policies
You can create multiple policies for each policy type, but only one active policy of each type can be applied to a specific device. Use the Policies page to specify and control aspects of enterprise device behavior. To distribute the policy to devices, apply your policy to the relevant labels.
Accessing the Policies page
You can create multiple policies for each policy type, but only one active policy of each type can be applied to a specific device. Use the Policies page to specify and control aspects of enterprise device behavior.
Users must have one of the following roles to access the Policies page:
- View policies
- Apply and remove policy label
- Manage policy
Procedure
- From the Admin Portal, go to Policies & Configs > Policies.
- Refer to the Policy page table table for details.
Policy page table
The following table summarizes fields and descriptions in the Policies Page window.
Fields | Description |
Policy Name |
Identifier for this policy. The policy name must be unique for policies of the same type. |
Priority |
Priority set for this policy in relation to other policies of the same type. |
Status |
Current status of this policy. The status can be Active or Inactive. |
Description |
Additional information about the policy that you entered when you created the policy. |
Type |
Which policy category this policy belongs to. |
Last Modified |
The date and time of the last change made to this policy. |
# Phones |
The number of devices affected by this policy. Click the link to display a list of the devices. |
Labels |
The labels applied to this policy. |
Exception: Backup & Restore policies are not distributed to the Ivanti Mobile@Work client app. In this case, the WatchList column indicates the devices that are awaiting backup. Displays the number of devices for which the policy is queued. Click the link to display a list of the devices. |
Modifying an existing policy
You can edit an existing default or custom policy in the Admin Portal.
When changing a policy, devices with the changed policy applied may prompt users to restart their devices.
Procedure
- From the Admin Portal, go to Policies & Configs > Policies.
- Click a policy in the Policy Name column to open the Policy Details pane on the right of the window.
- Click the Edit button to open the Modify Policy window for the policy type you selected.
-
Refer to following sections as a guide for each policy type.
- Security policies
- Privacy policies
- Lockdown policies
- Using default policies
- AppConnect global policy: see the AppConnect Guide for EPMM for more information.
- Click Save.
Policies do not take affect on any device until they are applied to a label. See Applying policies to labels for details.
Creating a custom policy
While you can edit the default policies provided by Ivanti, you can also create your own custom security, privacy, lockdown, or sync policy.
Procedure
- From the Admin Portal, go to Policies & Configs > Policies.
- Click Add New and select a policy type you want to create.
-
Refer to following sections as a guide for each policy type.
See the AppConnect Guide for EPMM for more information regarding the AppConnect global policy.
- Click Save.
Policies do not take effect on any device until they are applied to a label. See Applying policies to labels for details.
Prioritizing policies
When you create a custom policy, you can assign a priority relative to the other custom policies of the same type. This priority determines which policy is applied if more than one policy is associated with a specific device.
You can manage priorities for individual policies, or you can use the Modify Priority screen to manage priorities for a policy type in a single screen.
To manage priorities in a single screen:
- Go to Policies & Configs > Policies.
- Select a type from the Policy Type drop-down.
- Click Modify Priority. The Modify Policy Priorities dialog appears.
- Drag and drop policies until they reflect the priorities you want to set, with highest priority of 1 appearing at the top of the list.
- Click Save.
Displaying custom policies for a selected label
To display a list of the policies associated with a specific label:
- Go to a policies page under Policies & Configs.
- Select a label from the Labels drop-down list.
Default policies are not included.
Displaying custom policies for a selected user
To display a list of the policies associated with a specific user:
- Go to a policies page under Policies & Configs.
- In Search by User, enter any portion of the user’s first name, last name, or user ID and click the search icon. Policies assigned to user records matching the entered criteria are displayed.
Default policies are included. See Using default policies.
Deleting a policy
When you delete a policy, all devices to which that policy were applied are updated with the default version of that policy. You cannot delete a default policy.
Procedure
- From the Admin Portal, go to Policies & Configs > Policies.
- Click one of the filters under the Policies & Configs tab to display the policy you want to delete.
- Select the check box for the policy you want to delete.
- Click Delete in the upper left.
Applying policies to labels
Use labels to apply policies to devices.
Procedure
- Log into the Admin Portal.
- Select Policies & Configs > Policies.
- Click a policy in the Policy Name column to display the policies you want to work with.
-
Select the check box next to the policy.
You can search by policy name or description to help find the policy or policies you want to apply.
- Click More Actions > Apply To Label.
-
Select the label.
You can search by label name or description to help find the label.
- Click Apply.
Removing policies from labels
You can remove a policy from a label when you no longer want changes to that policy to affect devices having a given label.
Procedure
- From the Admin Portal, select Policies & Configs > Policies.
- Click a policy in the Policy Name column to display the policies you want to work with.
- Select the check box next to the policy.
- Click More Actions > Remove From Label.
- Select the label.
- Click Remove.