Working with policies

12 min

You can create multiple policies for each policy type, but only one active policy of each type can be applied to a specific device. Use the Policies page to specify and control aspects of enterprise device behavior. To distribute the policy to devices, apply your policy to the relevant labels.

Accessing the Policies page

Users must have one of the following roles to access the Policies page:

View policies

Apply and remove policy label

Manage policy

Procedure

From the Admin Portal, go to Policies & Configs > Policies.

Refer to the Policy page table table for details.

Policy page table

The following table summarizes fields and descriptions in the Policies Page window.

Table: Policies page table

Fields	Description
Policy Name	Identifier for this policy. The policy name must be unique for policies of the same type.
Priority	Priority set for this policy in relation to other policies of the same type.
Status	Current status of this policy. The status can be Active or Inactive.
Description	Additional information about the policy that you entered when you created the policy.
Type	Which policy category this policy belongs to.
Last Modified	The date and time of the last change made to this policy.
# Phones	The number of devices affected by this policy. Click the link to display a list of the devices.
Labels	The labels applied to this policy.
WatchList	Exception: Backup & Restore policies are not distributed to the Ivanti Mobile@Work client app. In this case, the WatchList column indicates the devices that are awaiting backup. Displays the number of devices for which the policy is queued. Click the link to display a list of the devices.

Modifying an existing policy

You can edit an existing default or custom policy in the Admin Portal.

When changing a policy, devices with the changed policy applied may prompt users to restart their devices.

Procedure

From the Admin Portal, go to Policies & Configs > Policies.

Click a policy in the Policy Name column to open the Policy Details pane on the right of the window.

Click Edit.

Refer to following sections as a guide for each policy type.

Security policies

Privacy policies

Lockdown policies

Using default policies

AppConnect global policy: see the AppConnect Guide for EPMM for more information.

Click Save.

Policies do not take affect on any device until they are applied to a label. See Applying policies to labels for details.

Creating a custom policy

While you can edit the default policies provided by Ivanti, you can also create your own custom security, privacy, lockdown, or sync policy.

Procedure

From the Admin Portal, go to Policies & Configs > Policies.

Click Add New and select a policy type you want to create.

Refer to following sections as a guide for each policy type.

Security policies

Privacy policies

Lockdown policies

Using default policies

See the AppConnect Guide for EPMM for more information regarding the AppConnect global policy.

Click Save.

Policies do not take effect on any device until they are applied to a label. See Applying policies to labels for details.

Prioritizing policies

When you create a custom policy, you can assign a priority relative to the other custom policies of the same type. This priority determines which policy is applied if more than one policy is associated with a specific device. For example, if you create a security policy for executives and a security policy for Windows devices, then an executive with a Windows device would have two different possible policies applied. Because only one policy of a given type can be applied to a device, the priority defined for the policies determines which is applied.

You can manage priorities for individual policies, or you can use the Modify Priority screen to manage priorities for a policy type in a single screen. Use the following procedure to manage priorities in a single screen.

Procedure

Go to Policies & Configs > Policies.

Select a type from the Policy Type drop-down.

Click Modify Priority. The Modify Policy Priorities dialog opens.

Drag and drop policies until they reflect the priorities you want to set, with highest priority of 1 appearing at the top of the list.

Click Save.

Displaying custom policies for a selected label

To display a list of the policies associated with a specific label:

Procedure

Go to a policies page under Policies & Configs.

Select a label from the Labels drop-down list.

Default policies are not included.

Displaying custom policies for a selected user

To display a list of the policies associated with a specific user:

Procedure

Go to a policies page under Policies & Configs.

In Search by User, enter any portion of the user’s first name, last name, or user ID and click the search icon. Policies assigned to user records matching the entered criteria are displayed.

Default policies are included. See Using default policies.

Deleting a policy

When you delete a policy, all devices to which that policy were applied are updated with the default version of that policy. You cannot delete a default policy.

Procedure

From the Admin Portal, go to Policies & Configs > Policies.

Click one of the filters under the Policies & Configs tab to display the policy you want to delete.

Select the check box for the policy you want to delete.

Click Delete in the upper left.

Applying policies to labels

Use labels to apply policies to devices.

Procedure

Select Policies & Configs > Policies.

Click a policy in the Policy Name column to display the policies you want to work with.

Select the check box next to the policy. You can search by policy name or description to help find the policy or policies you want to apply.

Click More Actions > Apply To Label.

Select the label. You can search by label name or description to help find the label.

Click Apply.

Removing policies from labels

You can remove a policy from a label when you no longer want changes to that policy to affect devices having a given label.

Procedure

From the Admin Portal, select Policies & Configs > Policies.

Click a policy in the Policy Name column to display the policies you want to work with.

Select the check box next to the policy.

Click More Actions > Remove From Label.

Select the label.

Click Remove.