Using administrative policies

If you use administrative policies on premises, you can apply many of those same policy settings to service users as well. Administrative policies enable all users to have the same working experience.

There are two types of policies, organizational and explicit. An organizational policy automatically assigns settings to all people within an organization or organizational unit. You cannot use this type of policy for service users because an organizational policy with a few pre-defined settings is already used within the service.

To assign policies to service users, use an explicit policy. In this type of policy, you use the Policy Assignment field to assign users to the policy.

If you use an organizational policy on premises and want to apply the settings to users in the service, create an explicit policy that mirrors the on-premises organizational policy. For example, the fictitious Renovations Corporation has an organizational policy on-premises that applies to anyone in the Renovations organization. Because it is an organizational policy, anyone whose hierarchical name includes */Renovation, such as Samantha Daryn/Renovations, is assigned this policy. The Renovations organizational policy cannot be used for users in the service. Therefore, the administrator creates an explicit policy, named Renov-Explicit, that includes policy settings identical to the settings that are in the on-premises Renovations organizational policy. Next, the administrator adds the name */Renovations as a name in the Policy Assignment field. This way, users who have /Renovations in their name are automatically assigned this policy.

Note: Note the following additional restrictions when assigning users to policies:
  • To assign a wildcard group such as */Austin/Renovations to a policy, add it directly to the policy assignment field in an explicit policy. Do not put a wildcard card group in a directory group and then assign the directory group to the policy; this configuration isn't supported.
  • You can't specify the policy name in a user's Person record in the Domino® directory. If you are using this kind of policy model, you must switch to a direct assignment in the Policy document itself.
assigning policies by

Although most settings in policies are supported in the service, there are a few restrictions. If you plan to use explicit policies for your service users, read about policy settings restrictions before you do.

If you are unfamiliar with administrative policies, see the topics on policies in the Configuring users and servers section of the IBM® Domino documentation.