Policies allow or stop access and admin rights and configure device and DNS settings. They include assignment criteria that define when each policy will be applied.
Before you start, pre-configure the following elements:
Entitlements. Refer to Configure Entitlements
Ringfence. Refer to Configure Ringfence rules.
Admin roles. Refer to Configure Admin Roles.
Customized claims. To set up customized claims for policy assignment criteria, refer to Identity Provider General Settings.
Scripts. Create and upload any criteria scripts or user claim scripts, or create assignment criteria expressions.
Background information:
For more information about the role of policies in provisioning rights, refer to Troubleshooting user and device access and System Administration.
See the Application Discovery section for more information about identifying the best policy fit for groups of entitlements.
For more information about the claims available for creating policy criteria expressions, refer to User Claims, Device Claims, or Claims in detail.
For more information about propagating changes to policies, see the Disable, change or remove access section.
Use the Policies page for:
Creating new policies to assign rights users and devices
Managing client access rights using entitlements
Adding or removing admin roles
Adding or removing device and client settings
Adding or removing DNS settings used by the device
Stopping one or more users and devices from signing in
Performing bulk actions
Performing actions using the action buttons
When you are ready to start configuring policies, see the Configure Policies section.
Settings 
In the Settings menu, you can enable the Normal or Details view of the Policies page. The Details view displays more information for policies.
Actions
The admin UI tools page provides more information about the operations that can be performed with the actions button.
Action Buttons
Action buttons are accessed by clicking the three dots icon (
) to the right of each item in the page or from the <Actions> button within the item. They are contextual, changing depending on the type of item and the state of the item. The action button for policies displays the following option:
Enable/disable Policy Status. This switch allows the status to be set to Enabled or Disabled.