Manage policy templates in the Global Admin Console
Applies to: Enterprise
Learn how global administrators can apply policy templates to any child organization, directly or indirectly from the organization where they are stored in the Global Admin Console.
How policy templates work
Policy Templates are stored with an organization and are visible to all global administrators of that organization. Once applied, the entries from the policy template are individually set in each organization. When a policy template is applied to an organization, each of the entries in the policy template are applied to the organization’s policies, replacing existing policy values.
Locked policy behavior
Updates to locked policies are only performed if the user applying the update is a global administrator of the organization indicated by the Locked By icon of the policy being updated.
If the user applying the template has permission to unlock the policy, the policy locks take the values from the template applied (locked or unlocked). If the template indicates that the lock should be left as is, the value of the lock in the policy stays same as before.
Important Note on saving
Create a policy template
- In the Global Admin Console, select an organization to edit, then navigate to the Policy Templates tab.
- Select Create Template.
- In the Create Policy Template dialog box, enter the name and description for the policy template.
The name of the policy template can be a maximum of 100 characters. - Select the policies to include in the template.
- Set values for the selected policies (see Setting Policy Values below).
- Select Save.
Setting policy values setting-policy-values
For each policy included in the template, configure two settings:
-
Allowed / Not Allowed: Set the slider to the desired value. Learn about policy details.
-
Lock value: Modify the lock state of the policy using one of the following options:
- Lock — The policy will be locked after application of the template.
- Unlock — The policy will be unlocked after application of the template.
- Keep as is — The lock state of the policy will be left the same as before the template was applied.
Apply a template to organizations
- In the Global Admin Console, select an organization to edit, then navigate to the Policy Templates tab.
- Select the More Options
- Select the organizations to which you want to apply the template. You can select multiple organizations.
- Select Apply template.
- To implement pending changes in organizations where the policy template is applied, select Review Pending Changes. After reviewing, select Submit Changes to execute them.
If all the policy values in the organizations you select already match the values in the template, a message appears notifying that no changes were made. Also, Review Pending Changes isn’t enabled if there are no other pending edits.
Edit a template
- In the Global Admin Console, select an organization to edit, then navigate to the Policy Templates tab.
- Select the More Options icon
- Update the policy template and select Update Now.
- To implement pending changes in organizations where the policy template is applied, select Review Pending Changes. After reviewing, select Submit Changes to execute them.
Delete a template
- In the Global Admin Console, select an organization to edit, then navigate to the Policy Templates tab.
- Select the More Options
- Select Yes in the dialog box that appears.