Global policy enforcement

Global policy enforcement is the manner in which ISIM system globally allows or disallows accounts that violate provisioning policies.. When a policy enforcement action is global, the policy enforcement for any service is defined by the default configuration setting. We can specify one of the following policy enforcement actions to occur for an account that has a noncompliant attribute.

Mark

Sets a mark on an account that has a noncompliant attribute.

Suspend

Suspends an account that has a noncompliant attribute.

Correct

Replaces a noncompliant attribute on an account with the correct attribute.

Alert

Issues an alert for an account that has a noncompliant attribute.

If a service has a specific policy enforcement setting, that setting is applied to the noncompliant accounts; the global enforcement setting does not apply to them.

• Configure a global enforcement policy
  An administrator can create a global enforcement policy to resolve noncompliant accounts on the services.

Parent topic: Configure