CA Risk Authentication Administration Guide › Managing Global Configurations › Managing Global Rule Configurations

Managing Global Rule Configurations

Managing global rule configurations is a key part of CA Risk Authentication management and optimization, and a key responsibility of GAs.

Note: The changes you make to the configuration globally or at the organization level are not applied automatically. You need to refresh all server instances to apply these configuration changes.

You can manage CA Risk Authentication rule configurations at two levels:

• Global level, available to all organizations

  Note: Although these rules are available to all organizations, they cannot be used as-is at the organization level. For example, even if you configure a Untrusted IP Check rule at the global level, individual organizations need to configure this rule either by copying from the global rule.

• Organization level, available to individual organizations

  These configurations apply only to the specific organization where they were set.

  Note: Although you can change the default rule configurations individually for every organization in the system, most of the organizations might be using the same configuration settings repeatedly. Also, setting rule configurations for individual organizations can be a cumbersome task if a large number of organizations are configured. In this case, you might want to set the global configurations for the rules so that Organization Administrators (OAs) do not need to specify the same setting every time.

This section discusses the configurations that GAs can set as a "template" for all current and future organizations in the system. These configurations include:

• Configuring Rulesets
• Configuring the CA Risk Authentication Predictive Model
• Configuring Out-of-the-Box Rules
• Adding New Rules
• Deploying a New Rule
• Deploying New Device-Based Rules
• Editing Rule Definitions Using the Rule Builder

Note: These configurations are applicable for all organizations that are in the purview of the GA setting them. If you want to configure individual organizations, then you must log in as the Global Administrator (GA) or as the Organization Administrator (OA) of the target organization to do so.

See "Managing Organization-Specific CA Risk Authentication Configurations" for more information.

In addition to these tasks, GAs can also:

• Refresh the system and organization-level cache configuration (see "Refreshing the Cache" for information on how to do this.)
• Configure the account type for organizations in their purview (see "Configuring the Account Type" for information on how to do this.)
• Configure the basic authentication policy (see "Specifying Basic Authentication Policy Settings" for information on how to do this.)
• Change the profile information (see "Changing Password and Profile Information" for information on how to do this.)