Home > Policy Enforcer > Configure Defined Groups

    Export to PDF

    Configure Defined Groups

    Defined groups allow you to apply the following Policy Enforcer rules to multiple SharePoint Online users and/or groups in bulk. While configuring any of these rules in the Configure Rule interface, you can use the Defined Groups field to choose users and groups that will be affected by the rule. For details on the configurations in the Configure Rule interface, refer to Configure a Policy Enforcer Rule.

    • Copy

    • Content Creation/Content Upload

    • Delete

    • Grant, Revoke, and/or Modify Permissions Privilege

    • Move

    • Permission Modification Protection

    • User Permission Enforcement

    • User/Group Restriction

    To create a defined group, complete the following steps:

    1. Select the desired nodes on the tree.

    2. On the Policy Enforcer tab, click Defined Group on the ribbon. The Defined Group interface appears.

    3. Click Create in the Manage group on the ribbon.

    4. In the window for creating a new defined group, complete the following steps:

      The Create a New Defined Group window.

      1. Defined Group Name – Enter a Name with an optional Description.

      2. Defined Group Members – Use the people picker or the user properties to designate which SharePoint Online users/groups and/or Active Directory users/groups will be added into this defined group.

      3. Click Save to create this defined group.

    5. After creating a new defined group, you can also make changes to the existing defined groups on the Policy Enforcer > Defined Group page:

      • View Details – Select an existing defined group and click View Details on the ribbon to view the detailed information of the selected defined group.

      • Edit – Select an existing defined group and click Edit on the ribbon to edit this selected defined group.

      • Delete – Select one or more existing defined groups and click Delete on the ribbon to delete the selected defined groups.

    The tables below detail the supported user/group properties that you can use in defined groups to identify specific users or groups.

    Level - User

    Property NameDescriptionCondition
    DepartmentManages users whose department meets the configured condition.Equals
    DepartmentManages users whose department meets the configured condition.Contains
    DepartmentManages users whose department meets the configured condition.Matches
    Display NameManages users whose display name meets the configured condition.Equals
    Display NameManages users whose display name meets the configured condition.Contains
    Display NameManages users whose display name meets the configured condition.Matches
    Job TitleManages users whose job title meets the configured condition.Equals
    Job TitleManages users whose job title meets the configured condition.Contains
    Job TitleManages users whose job title meets the configured condition.Matches
    OfficeManages users whose office meets the configured condition.Equals
    OfficeManages users whose office meets the configured condition.Contains
    OfficeManages users whose office meets the configured condition.Matches
    User TypeManages users whose user type meets the configured condition.Equals
    User Principal NameManage users whose user principal name meets the configured condition.Equals
    User Principal NameManage users whose user principal name meets the configured condition.Contains
    User Principal NameManage users whose user principal name meets the configured condition.Matches

    Level - Group

    Property NameDescriptionCondition
    Display NameManages groups whose display name meets the configured condition.Equals
    Display NameManages groups whose display name meets the configured condition.Contains
    Display NameManages groups whose display name meets the configured condition.Matches