Create First Policy

⏱️3 minutes

Create a policy that defines who can use self-service and when.

About Policies

Policies control:

Who can use self-service (by group, OU)
What actions are allowed (unlock, reset)
When auto-approval happens (by risk score)

Create a Basic Policy

1. Navigate to Policies

In Admin Portal, go to Policies
Click Create Policy

2. Configure Basic Settings

Field	Value	Description
Name	Standard Users	Descriptive name
Description	Self-service for regular employees	For documentation
Active	✅	Enable the policy

3. Configure Scope

Field	Value
Target Groups	Leave empty for all users
Target OUs	OU=Users,DC=company,DC=local
Exclude Groups	Domain Admins, IT Administrators

Policies apply to users matching ALL conditions. Leave Target Groups empty to apply to all users in the OUs.

4. Configure Actions

Action	Allowed
Account Unlock	✅
Password Reset	✅

5. Configure Risk Thresholds

Risk Score	Action
0-30	Auto-approve
31-50	Auto-approve with notification
51-79	Require manual approval
80+	Block

6. Save Policy

Click Save to create the policy.

✅Expected Result

Policy appears in the list:

Name: Standard Users
Status: Active
Scope: 150 users

Example Policies

Policy 1: Regular Employees


name: Standard Users
target_ous:
  - "OU=Staff,OU=Users,DC=company,DC=local"
exclude_groups:
  - "Domain Admins"
actions:
  - unlock
  - reset_password
risk_thresholds:
  auto_approve: 30
  notify: 50
  manual_approve: 79
  block: 80

Policy 2: IT Staff (More Restrictive)


name: IT Staff
target_groups:
  - "IT Department"
exclude_groups:
  - "Domain Admins"
actions:
  - unlock
  - reset_password
risk_thresholds:
  auto_approve: 20
  notify: 30
  manual_approve: 50
  block: 60

Policy 3: Contractors (Unlock Only)


name: Contractors
target_ous:
  - "OU=Contractors,DC=company,DC=local"
actions:
  - unlock  # No password reset for contractors
risk_thresholds:
  auto_approve: 20
  notify: 30
  manual_approve: 40
  block: 50

Policy Evaluation Order

User makes request
System finds matching policies (by group/OU)
Most restrictive policy applies
Risk score calculated
Action taken based on thresholds

Next Step

→ Step 4: Install Connector