Managing Policies

Policies can be created in the Policy Wizard or by writing the Policy as Code in Rego. After creating a Policy, you may want to edit it or delete it, as detailed below.

Editing a Policy

To edit an existing Policy:

1. Once a Policy is saved, you can review see it listed in the Policy Catalog in the Authorization Workspace and edit it by clicking on it. This opens the Policy Details screen.
2. Click Edit to enable editable fields to be highlighted.
3. Click Save to save your updates.

Activating and Deactivating a Policy

Active Policies are factored into the authorization decision returned by the Authorization Platform. Similarly, an Inactive Policy is not considered when calculating the authorization decision. The setting for Policy State is per Environment. This means that if you have the same Policy defined in two Environments, change the Policy State in one Environment will have no impact on the Policy in the second Environment.

By default, when created or imported, a Policy is Active.

To activate or deactivate a Policy:

1. In the Authorization Workspace, select the Policy you wish to active or deactivate in the Policy Catalog. The Policy Details screen is displayed.
2. On the title bar, toggle the Policy to select the appropriate Policy State. Options are: Active or Inactive.

Deleting a Policy

Policies can be deleted at any time. Note that when you delete a Policy, the objects (for example: Assets, Rulesets, Asset Types, Actions, etc.) are not deleted from the Platform.

To delete a Policy:

1. In the Policy Catalog area of the Authorization Workspace, click on the Policy to be deleted. This opens the Policy Details screen.
2. Click Delete Policy. A warning message appears, asking you to confirm that you want to delete the Policy.
3. Click Delete. The Policy is deleted.

You can also delete Policies using the Delete Policy API.