AvePoint Docs
Contact support
Contact support
English

Home > Identity Manager > Configure a Policy Enforcer Profile > Manage Rules in Policy Enforcer Profile

Export to PDF

Manage Rules in Policy Enforcer Profile

After adding a rule to a Policy Enforcer profile, you must configure the required settings for this rule in the Configure Rule window. You can also deactivate, activate, or remove a rule from a Policy Enforcer profile.

Configure a Policy Enforcer Rule

To configure a rule, complete the steps below:

  1. Select the checkbox of the desired rule in the table.

  2. Click Configure Rule on the ribbon, or click the name link of the desired rule in the table. The Configure Rule window appears.

  3. Complete the following settings to configure the selected rule in the Configure Rule window:

    1. Rule Summary – In the Rule Summary area, the name and description of this rule are displayed.

    2. Rule Parameters – Configure specific settings for each rule in this area, and each rule will use these parameters as a standard to identify violations in Microsoft 365. Any users and user activities in Microsoft 365 that do not comply with the standard configured in the rule will be identified as out of policy.

    3. Custom Action – If you want the rule to act on the identified violations, select the checkbox of the custom action.

      *Note: This is not a real-time action, as it will take effect when violations are identified in a scheduled scan.

    4. Recipient – Enter email addresses of users who will receive notifications of this rule when the violations are identified.

    5. Send Notification Immediately – Define whether to send email notifications immediately to the configured recipients when Policy Enforcer identifies violations of this rule. If you want to send the immediate report, select the corresponding checkbox.

    6. Block andAllow List – You can add users that will never be limited by this rule to the Allow List, and add users that will forever be limited by this rule to the Block List.

      *Note: The User Location, License Change, and Password Change rules only support adding users to the Allow List.

  4. Click OK to save the configurations of this rule.

Deactivate, Activate, or Remove a Policy Enforcer Rule

The activated (Icon: Activated status) or deactivated (Icon: Deactivated status) status of a rule is displayed in the Status column of the rule table. Refer to the sections below for details on deactivating, activating, and removing a Policy Enforcer rule:

- **Deactivate** – Select the checkboxes of the added rules that you want to deactivate, and click **Deactivate** on the ribbon. When the rules are deactivated, the users and user activities that are related to the deactivated rules will not be monitored by Policy Enforcer when running the jobs of this profile. - **Activate** – Select the checkboxes of the added rules in the table, and click Activate on the ribbon to activate the rules. - **Remove** – To remove the previously added rules from the currently configured profile, select the checkboxes of the corresponding rules in the table, and click **Remove Rule** on the ribbon.