Help CenterPromoting policies is a quick and efficient way to move a policy from a lower level (such as a computer) to a higher level (such as a group or the entire organization) while eliminating redundant policies.
For example, if an application has 20 computer-level policies and all associated computers belong to the same group, you can promote one of those policies to the group level. This consolidates the configuration into a single group-level policy and removes the remaining redundant computer-level policies.
If an application is widely used across multiple computers within a group, or across the entire organization, promoting a policy to a higher level can significantly reduce the number of policies you need to manage.
Required Permissions
- Super Admin
- Super Admin Child
- Edit Application Control Policies + Promote to Entire Organization
- Allows promotion of computer- or group-level policies to the group level or entire organization level
- Edit Application Control Policies combined with Promote to Group
- Allows promotion of computer-level policies to the group level
- Edit Application Control Policies combined with Promote to Global
- Allows promotion of policies to any level, including Global
How to Promote a Policy
Navigate to the Applications page.
Review the 'Policies' column on the main grid to identify applications with multiple policies for it.
In the picture below, you can see that the top application, Microsoft OneDrive, has 1 entire organization policy, Microsoft Windows has 1 computer-level policy, and Microsoft Windows HCL Publisher has 6 group-level policies.
Because Microsoft Windows HCL Publisher has policies across most groups, promoting one to the organization level helps consolidate management, provided that the application is appropriate to permit for any group.
Select the blue policy icon to open the application sidebar, open to the Existing Policies tab.
Select the blue shield icon to open the 'Applies to' dropdown.
Choose the desired level to promote the policy to, and then press the green checkmark.
Once pressed, the policy will be added to a queue to be promoted. If the queue is busy, it could take a minute or two before the policy promotion is complete. The policy will be marked with a 'Promotion Pending' label. You may need to close the sidebar and reopen it before the chip is removed and the policy list is updated.
If the queue isn't busy, the policy may be promoted instantly, and a green confirmation message will be displayed.
The sidebar will update to show the new policy level, and the removed policies will no longer be listed.
Please Note: The 'Policies' column on the main grid will not be updated right away, but this does not mean that the policy was not promoted successfully.