Device policy templates

Device policies control how the Aurora Endpoint Security agents monitor endpoints, store data, and respond to suspicious activity on user devices in tenant organizations. Administrators use device policy templates to manage device policies in bulk, for multiple tenants.

Note:

  • Every user device registered with Aurora Endpoint Security services must have a device policy. All user devices receive the default device policy assigned to the tenant, unless another policy is assigned to the device.

  • A device can only have one device policy assigned at a time. Assigning a policy to a device that already has one replaces the previous policy with the new one.

  • To manage individual device policies instead of policy templates, see Créer et gérer une stratégie de terminal. For more information about device policy settings, see Paramètres de la stratégie de terminal.

When an administrator applies a policy template to multiple tenants, a corresponding device policy is created in each tenant. The way that the policy template is applied determines the relationship between the template and corresponding device policy:

  • Copy — The corresponding device policy is created in the tenants with no relationship to the template. Changes to the template don't impact the device policy in the tenant.

  • Link — The corresponding device policy is created in the tenants with a linked relationship to the template. Changes to the template are automatically passed to the corresponding device policy in all linked tenants.

Policy template actions are recorded in the console audit log, including the user who performed the action and the time of the action. Policy template role permissions allow administrators to grant Aurora Multi-Tenant Console users access to policy templates. Granting a policy template permission does not automatically grant any dependencies. For example, if you grant the read policy template details permission to a user, you must also grant them the view policy template list permission. For more information, see Permissions for user roles.