The new Policy 2.0 priority system significantly limits administrators' ability to granularly control web access based on user groupings. This is because only one Policy can be active at a time for a given priority level, which prevents applying multiple policies to a single user.
The Classic policy allowed for greater flexibility by combining policy rules across different user groups.
In order to mimic the Classic policy's flexibility, I propose the following feature change:
• Allow admins to assign the same priority level to multiple, distinct Policies (e.g., Policy A, Policy B, and Policy C could all be set to "Priority 7").
• These individual policies can then be assigned to different user groups.
When a user belongs to multiple groups (e.g., a "Math" group linked to Policy B and an "Coding" group linked to Policy C) that share the same priority, the resultant user policy would be calculated as a combination (sum) of the group policies, using the existing Classic policy algorithms for resolution.
Example: An admin sets Policies A, B, and C to the same priority. If a user belongs to groups linked to Policy B and Policy C, the resulting user policy will be the combined ruleset: Policy B + C.