Adding a Policy Override

You can add policy overrides to users, groups, and IP addresses in the Policy overrides section located at the bottom of the Device Policy or DLP Policy page. Default device policies are applied to the All Users groups. 

Add a Policy Override

  1. Navigate to login.venn.com and Sign In with valid credentials.
    You may be required to verify the sign-in by completing the multifactor authentication on your mobile device.
  2. Click Company admin or Manage > Company admin.
    Updated_CM.png
  3. Click Policy Admin > Device Policy or Policy Admin > DLP Policy.
  4. Click the Desktops and laptops or Mobile devices tab.
  5. Click Add New to the right of the Policy overrides section.
    Add_Policy_Override_Laptops.png
  6. Name the override.

    Override_Name.png

  7. Select the User, Group of People, or Group of devices (IP range) for the override.

    Override_select_Group_of_devices.png
    • User or Group of people
      • Select the name of the User or Group from the dropdown menu
        Add_Policy_Override_Apply_to_2.png
    • Group of devices (IP-range)
      • Type the range of IP addresses and click Add IP-range.
        Override_IP_Range.png
      • You can add additional IP addresses as needed.
        Override_IP_Range_additional.png

  8. Click Change to the right of the setting you want to modify.

    Add_Policy_Override_Change.png
  9. Select the setting from the dropdown menu, then click Save settings to close the window.

    Mobile_Known_Devices.png
  10. Click Save settings at the bottom to finish.

Note: If the default policy is updated to include an existing override setting, you will see a yellow warning symbol alerting you that the override matches the default company policy.

Override_warning.png

Return to top

Policy Override Order

If a user is listed in two or more overrides, the order in which you prioritize the override will determine whether or not it will be applied to the user. Overrides priority works specifically by individual device compliance policy check. As an example, “Adam Johnson” can exist in two override policies. He can be added using his specific username because he is a part of a group that an override applies to or his IP address could be associated with an override policy. In most cases, this will not be an issue but if these overrides contain the same device compliance policy check to be overridden, then override priority matters.

This example illustrates which policy would apply if “Adam Johnson” existed in two override policies that had the same exact check with different values. 

Override_Position_1.png

This example illustrates which policy would apply if “Adam Johnson” existed in two override policies, with one override policy containing multiple checks.

 

Override_Position_2.png

Override priorities can be changed by moving the override higher or lower in the override list. Click the arrows to the right of the override to move the override up one level of priority.

 

Override_Position_3.png

 

Learn how to remove a policy override here.

 

 

Was this article helpful?