How to Add a Policy to an App

Policies are an essential part of the Bitium setup process, as it serves to give IT admins the flexibility they need to assign permissions around the various applications in your organization.

Policies are comprised of permissions and access control lists. Permissions include the ability to assign an app and the ability to view the password for an app. Access control lists include the list of roles that will be granted the permissions. These roles are admins, group admins, and a specific admin.

Policies are essential for a number of reasons, many of which are outlined below:

  • Enables all admins, group admins, or a specific admin to assign applications that were added by one admin. Otherwise, admins that did not enter in the password for an application will be prompted for a password when assigning that application.
  • Allows all admins, group admins, or a specific admin the ability to view a password for either a shared application (configured by another admin) or passwords for individual applications (configured by end users).
  • Grants all admins the ability to close out Tasks associated with the applications that were added by an admin other than the admin trying to close out the Task.
  • Gives new admins, group admins, or a specific admins inherited permissions for the apps included in the policy.
  • Ensures permissions for apps are propagated to all admins, which is critical in the event an admin leaves the organization.

Admins can easily add apps to a policy at the organization level, covered here, but this article encompasses how an admin can add a policy to a specific app.

To add a policy to an app:

  1. Manage “your organization.”

  2. Select “Manage Apps.”

  3. Search for the app.

  4. Click the “Credentials & Policies” tab.

    Credentials & Policies

  5. Click “Add Policy”

    Add Policy

  6. Choose the Access Control List for which these permissions in the policy will apply.

  7. Select the Permissions: assign only or assign and view.

  8. Click “Assign.”

    Set Permissions

  9. You have now set a policy for this app. You can edit or revoke the policy for the app at any time.

    Configured Policy