---
title: "Policies"
slug: "policies-v6-5"
description: "Manage access rights and device settings with customizable policies. Learn to configure entitlements, admin roles, and more for effective administration."
updated: 2025-12-04T16:31:51Z
published: 2025-12-04T16:31:51Z
canonical: "support.appgate.com/policies-v6-5"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Policies

Policies allow/stop Access/Admin rights and configure Device/DNS settings. They include assignment criteria that define exactly when each Policy will be applied.

Before you start, pre-configure the following elements:

- Entitlements: refer to [Entitlements configuration](/v1/docs/configure-entitlements)
- Ringfence: refer to [Ringfence configuration](/v1/docs/configure-ringfence-rules)
- Admin roles: refer to [Admin Roles configuration](/v1/docs/configure-admin-roles)
- Customized Claims: to set up customized claims for Policy assignment criteria, refer to [Identity Provider](/v1/docs/general-settings)
- Scripts: create and upload any [criteria scripts](/v1/docs/using-policies) or [user claim scripts](/v1/docs/user-claims#user-claim-script) or [create (Assignment) Criteria expressions](/v1/docs/criteria-scripts)

Background information:

- The role of Policies in provisioning rights, refer to: [User/Device Access](/v1/docs/userdevice-access) and [System Administration](/v1/docs/admin-user-access)
- The use of [Application Discovery](/v1/docs/application-discovery) to help identify the best Policy fit for groups of Entitlements
- The claims available for creating Policy criteria expressions, refer to: [User Claims](/v1/docs/user-claims), [Device Claims](/v1/docs/device-claims), [Claims in detail](/v1/docs/claims-in-detail)
- Propagating changes to Policies, refer to: [Disable, change or remove access](/v1/docs/disable-change-or-remove-access#propagating-changes-to-users)

Use the Policies form for:

- Creating new Policies to assign rights to one or many users/devices
- Managing Client access rights using Entitlements
- Adding or removing admin roles
- Adding or removing device/Client settings
- Adding or removing DNS settings used by the device
- Stopping one or many users/devices from signing-in
- Performing bulk actions
- Performing actions using the action buttons provided (See below).

For details on completing the form, refer to [configure Policies](/v1/docs/configure-policies)

## Settings ![](https://cdn.us.document360.io/e7482ce5-acfa-4c3b-b76c-b6c32472644a/Images/Documentation/ag62-cog.png?sv=2026-02-06&spr=https&st=2026-10-28T21%3A46%3A11Z&se=2026-10-28T22%3A46%3A11Z&sr=c&sp=r&sig=XnmG7UH13OL%2B9x05JXfyIvgdZFwiuYWqv2L38%2FUu1zc%3D)

In the Settings menu, there is the option of Normal or Details view. Details expands the information for Entitlements.

## Actions

The Admin UI tools page provides [more information](/v1/docs/admin-ui-tools) about the operations that can be performed.

## Action Buttons

Action buttons are accessed by clicking the 3 dots to the right of each line item in the table or from the <Actions> button within the item. They are contextual, changing depending on the type of item and the state of the item.

- ***Enable/disable Policy Status***. This switch allows the status to be set to Enabled or Disabled.

A Policy is a set of rules that govern access control and permissions for users and devices within the Appgate ZTNA system. Policies determine what resources users can access based on their entitlements.

Key-value pairs related to the identity and content of the user or device and are specific to each session.