Previous Topic: How to Configure a PolicyNext Topic: Allow Nested Groups in Policies


Exclude a User or Group from a Policy

The Administrative UI allows you to exclude a user or group of users from a policy. This feature is very useful if you have a large user group that should be included in a policy, but you want to exclude a small subset of the group from the policy.

To exclude a user or group from a policy

  1. Navigate to Policy, Users.

    The User Directories pane opens.

  2. On the User Directory group box, click one of the following:
  3. Choose the task from the following list that corresponds to the item you clicked in Step 2:
  4. Click OK.

    The User Directories pane re-opens showing the user or group you chose, along with an Exclude button.

  5. To exclude the selected user or group, click Exclude.

    A check mark appears to the right of the user or group in the Current Members list to indicate that the user or group is excluded from the policy. An Include button replaces the Exclude button.

    When you exclude a group from a policy, the exclusion indicates that anyone included in the policy who is a member of the excluded group (or the specifically excluded user), is not included in the policy. For example, if a policy contained the group Employees, and the excluded group Marketing, anyone who is a member of the Employees group, and not part of the Marketing group is included in the policy.

  6. Click Submit.

    Your changes are submitted. The user or group will be excluded from the policy.