Managing Global Policy Compliance

This topic details how you can manage Global Policy Compliance in your Aembit Tenant.

Permission requirements

To configure Global Policy Compliance settings, your users must have the Global Policy Compliance permission with write access. You can set this permission in the Users page to any of the following:

• No Access: Can’t view or modify settings
• Read-Only: Can view settings but not modify them
• Read/Write: Can view and modify settings

Configure Global Policy Compliance settings

1. Log into your Aembit Tenant.

2. Go to Administration in the left sidebar menu.

3. Select Administrator ☰ Global Policy Compliance.

   Aembit displays the following options:

   

The Global Policy Compliance page contains the settings that you can enforce specific security controls. For each setting, you can select from the following enforcement levels:

• Required: Prevents creation/modification of non-compliant policies
• Recommended: Displays warnings but allows creation after confirmation
• Optional: No enforcement applied

Access Policy settings

You can configure the following Access Policy enforcement levels:

• Trust Provider Requirement: Set to Required, Recommended, or Optional
• Access Condition Requirement: Set to Required, Recommended, or Optional

Agent Controller settings

You can configure the following Agent Controller enforcement levels:

• Trust Provider Requirement: Set to Required, Recommended, or Optional
• TLS Hostname Requirement: Set to Required, Recommended, or Optional

Identify non-compliant Access Policies

After configuring your Global Policy Compliance settings:

1. Go to Access Policies in the left sidebar menu to view compliance status.
2. Look for the color-coded status icons in the first column. The status icons indicate whether an Access Policy is compliant with your compliance policy settings.
3. Hover over icons to view specific compliance information or select an Access Policy to see more details about it.

Edit non-compliant Access Policies

When editing Access Policies under Global Policy Compliance:

1. Log into your Aembit Tenant and go to Access Policies in the left sidebar menu.

2. Select the Access Policy you want to view.

3. In the Notes section, Aembit displays Compliance information.

4. When saving a policy:

   • If missing required elements, you can’t save until addressed
   • If missing recommended elements, you’re prompted with a confirmation dialog

   Aembit prevents you from saving your changes and displays a pop up similar to the following when you haven’t configured the elements your compliance policy requires:

   

   For recommended elements that you haven’t configured, Aembit displays a pop up similar to the following, warning you that saving the policy as-is is not recommended:

   

5. To save your Access Policy, you must have no required elements not configured.