Allow to set the same Policy 2.0 priority level to multiple, distinct Policies
D
Dimitar Zaprianov
The new Policy 2.0 priority system significantly limits administrators' ability to granularly control web access based on user groupings. This is because only one Policy can be active at a time for a given priority level, which prevents applying multiple policies to a single user.
The Classic policy allowed for greater flexibility by combining policy rules across different user groups.
In order to mimic the Classic policy's flexibility, I propose the following feature change:
• Allow admins to assign the same priority level to multiple, distinct Policies (e.g., Policy A, Policy B, and Policy C could all be set to "Priority 7").
• These individual policies can then be assigned to different user groups.
When a user belongs to multiple groups (e.g., a "Math" group linked to Policy B and an "Coding" group linked to Policy C) that share the same priority, the resultant user policy would be calculated as a combination (sum) of the group policies, using the existing Classic policy algorithms for resolution.
Example: An admin sets Policies A, B, and C to the same priority. If a user belongs to groups linked to Policy B and Policy C, the resulting user policy will be the combined ruleset: Policy B + C.