Apply a policy
Applying a draft policy makes it active and assigns entitlements to users who meet its criteria.
Before you begin
-
Sign in as a super admin, an app admin, or an admin with the following permissions:
-
Manage applications
-
Edit application's user assignments
-
Edit groups' application assignments or Edit users' application assignments
-
-
Ensure that you're assigned to the Okta Entitlement Management application.
-
Create one or more policy rules for the app.
-
As a best practice, preview the policy before you apply it.
Start this task
- In the Admin Console, go to .
- Search for and select the app instance that contains the policy.
- Go to the Governance tab.
- Go to the Policy tab.
-
Click Apply policy. Or, if you already have an active policy, click Continue editing policy, and then click Apply policy.
This process usually takes some time to complete. Users' entitlements aren't updated immediately.
Entitlements are assigned to users based on the policy rules that you set up.
In Okta-sourced groups, entitlements are granted only when a user meets the conditions of a policy rule. If a user meets the conditions of more than one rule, that combination determines their entitlements. If their profile attributes or group memberships change and they no longer meet the conditions, the entitlements are revoked.
You can view a user's assigned entitlements from their profile page or from the app's assignments. See Manage user entitlements.