Chapter 8. Policy Administration

Table of Contents

About Policy Administration
Creating a Policyset
Defining a Policyset
List of Policies

About Policy Administration

Policy Admin

A policyset is a collection of policy values controlling the setup and functions of a repository, stream, user or group of users

The default policyset is created automatically and can never be deleted. Further policysets can be created for a repository, a stream within the repository, a user or a group. The order of precedence for policysets is:

  • User-Stream. A policyset for a specific user, only applying to a specific stream within a specific repository.
  • Group-Stream. A policyset for all users belonging to a specific group, only applying to a specific stream within a specific repository.
  • User-Repository. A policyset for a specific user, applying to all streams within a specific repository.
  • Group-Repository. A policyset for all users belonging to a specific group, applying to all streams within a specific repository.
  • User. A policyset for a specific user, applying to all streams within all repositories.
  • Group. A policyset for all users belonging to a specific group, applying to all streams within all repositories.
  • Stream. A policyset for all users, only applying to a specific stream within a specific repository.
  • Repository. A policyset for all users, applying to all streams within a specific repository.
  • Default. A policyset for all users, applying to all streams within all repositories.

So if a policy value is set in a policyset applying to that user, and the policy value is also set in a policyset applying to the stream, then the first policy value will be used.

Note

An administrator can reset all policysets with the 'tdbutil resetpolicies' command. This can be useful in situations where no one has the 'Policy Administrator' policy enabled (e.g. you accidentally delete the administrator user). 'tdbutil' is installed with the server. For help on using tdbutil type 'tdbutil' on a command prompt. You must stop the PureCM service before running tdbutil commands.