Policy Profiles

This page allows administrators to create and manage policy profiles, which are comprised of individual policies which control configurable behaviors and features in Workplace"Workplace" describes the Workplace service in its entirety..

Your Team Defaults and Policies apply to all your users unless you create additional profiles to further define security and functionality for different users. The Team Defaults and Policies also allow for configuration of default values when you create new users, as well as define your team-wide backup exclusions (the extensions and file paths that will be excluded from backups).

Creating additional policy profiles allows you to control the behavior of Workplace on a more granular level. Once you've created your policy profiles, you'll apply them to groups or users to best support your company's internal collaboration workflows and processes, as well as your security needs.

How Policies Are Applied

The policies are applied to any individual users in the following order of precedence:

  • Default policies are your baseline.
    If you don’t apply any other policies, these defaults will apply to everyone. Refer to Team Defaults and Policies for more information.
  • Policies applied to groups override defaults.
    Policies applied are additive. When policies applied at the same level (for example, if a user belongs to two groups with conflicting policies) are in conflict, the more secure option will take precedence.
  • Policies applied to users are absolute.
    Policies applied as default or to groups will be superseded by policies applied to users.

Overriding Policies

If you want to override a policy in a profile with a different setting for that policy in a different profile, you must add that policy to both profiles. In essence, you must intentionally create a policy setting conflict, and let Workplace figure it out.

For example, if you want to disallow remote access for the majority of your employees, but allow it for users who work from home, you would:

  1. Include the Disable Remote Access policy in your Default PolicyA policy is a configurable site-wide setting that dictates how Workplace will behave for your team. Profile, and make sure that the Enable Policy check box is selected.
  2. Create another policy profile for remote users.
  3. Add the Disable Remote Access policy to it your remote user policy profile.
  4. Save your remote user policy profile.
  5. Clear the Enable Policy check box that policy.
  6. Assign the new policy profile to your remote users.

The user who only have the Default Policy profile will not have remote access, but your remote users will.

While policy profiles at a more granular level will take precedence over policy profiles at a more general level (e.g. a profile assigned to groups win over the default profile, and a profile assigned to individuals will win over a profile assigned to a group) the single policies must exist in both policy profiles in order for Workplace to compare them and apply the correct policy.

How to...