Reordering Policy Components
Reorder your policy's components to control the flow of conditions.
Run Order:
1st
Deny Rules
- Deny rules are always evaluated first, and if any of the conditions are met, all subsequent rule types (approve, obligate) are ignored.
2nd
Approve Rules
- Approve rules are evaluated after deny conditions are checked, if any of the conditions are met, all subsequent rule types (obligate) are ignored.
3rd
Obligation Rules
- Obligation rules are evaluated last, and if any match, the user will be obligated per the matched rule.
If no conditions are met, the Default Rule (located at very bottom of policy) is invoked.
Reordering Rules:
Go to Verification Services > "your service" > Policy:
Click and Drag the ordered list icon on the left-hand side of your rules to change their order.
Updated about 1 year ago