Policy
Mark each tool as Approved, Tolerated or Not allowed, for every client or for one.
A policy says whether a tool is allowed. Only admins can set one. Staff and read-only users see the policy as text.
| Policy | Meaning |
|---|---|
| Approved | You support this tool. |
| Tolerated | Allowed, but not endorsed. |
| Not allowed | Clients should not use it. In-use devices show under Needs attention on the Overview. |
| Unreviewed | No decision yet. |
Baseline and client overrides
Your baseline is the policy for every client. A client override replaces the baseline for one client.
If a tool has neither, it is Unreviewed.
Set a baseline policy
Open Policy. It lists the tools in your estate. Switch to Whole catalogue to set a policy for a tool before anyone uses it.
Find the tool. Search by tool or vendor, or filter by category and policy.
Choose a policy from the Baseline policy list.
You can also set the baseline from the All AI tools table on the Overview.
To clear a baseline, choose Unreviewed.
Override a policy for one client
Open the client, or one of its devices.
Choose a policy from the tool's list.
To go back to the baseline, choose Baseline at the top of the list. It shows what the baseline is, for example Baseline (tolerated).
Setting a tool to Not allowed
If devices are using the tool now, the console asks first. It shows how many devices will be out of policy, grouped by client.
Select Set to not allowed to go ahead, or Keep current policy to cancel. If no devices are affected, the change applies straight away.
Triage and the suggested policy on a tool's page skip this check.
Suggested policy
A tool with no baseline shows a suggestion on its page, for admins. The suggestion comes from the tool's risk rating and what it can do:
| Tool | Suggested |
|---|---|
| Comes with the operating system | Tolerated |
| High risk | Not allowed |
| Medium risk | Tolerated |
| Low risk | Approved |
Select Set to to accept it, or Other options to pick another. A suggestion always sets the baseline.
Risk levels
Each tool in the catalogue has a risk level: High, Medium, Low or Unclassified. Risk always appears with its label, so colour never carries the meaning alone.
Every policy change is recorded in the activity log as "Changed the policy for".