#Create a Policy Enforcer Profile

To create a Policy Enforcer profile, click Create Profile on the ribbon and complete the steps below:

1. Profile Name – Choose to configure an existing profile or create a new profile:

   • Select an existing profile to configure rules and settings – If you want to configure rules and settings based on an existing profile, select this option. All of the settings will be configured as the selected profile except the Name, and you can still edit the rules and settings.

   • Create a new profile – If you want to create a new profile, select this option and configure the following settings.

2. User Scope – Designate users that are limited by each rule in this profile by selecting user sets, selecting user filters, or entering users.

3. To add rules into this profile, complete the following steps:

   1. Click Add Rule on the ribbon or under the rule table. The Add Rule window appears and displays all of the rules.

   2. Select the checkboxes of the rules that you want to add to this profile.

      *Note: The Ghost Guest Users rule does not identify Microsoft Entra Guest Accounts in groups other than Microsoft 365 Groups.

   3. Click OK to add the selected rules and return to the Policy Enforcer interface. All of the added rules are displayed in the rule table.

   4. To configure a rule, click the rule name link, or select the rule and click Configure Rule on the ribbon. The Configure Rule window appears. For details on configuring a rule, refer to Manage Rules in Policy Enforcer Profile.

4. Scan Schedule – Define when to scan rules in this profile. Specify a start time and interval for the scan, as well as choose whether or when to end the scan.

5. Send Periodic Reports – Choose whether or not to send periodic reports. If you select the Send periodic reports to the recipients configured in each rule checkbox, then select to send daily or weekly reports for the violations of each rule in this profile to the recipients configured in the corresponding rule.

   • To send daily reports, select Send daily reports at … and configure a time.

   • To send weekly reports, select Send weekly reports every … at … and configure a day and time for sending reports.

6. Export Location – To export reports to a specific location, you can select an existing location from the Export Location drop-down list. If you want to create a new export location, select New Export Location in the drop-down list. For detailed instructions on how to create an export location, refer to Configure Export Locations.

   *Note: The location type can only be SharePoint Online Document Library.

7. Click Save on the ribbon to save this profile and return to the Policy Enforcer interface, or click Save and Run Now on the ribbon to save and run this profile immediately.

The created profiles are displayed in the Policy Enforcer interface. To manage these profiles, refer to Manage Existing Policy Enforcer Profiles.