Create, View, and Edit Endpoint Privilege Management Policies

Create a Policy

  1. From the left menu, select Policies under Endpoint Privilege Management.
  2. Click Create Policy + above the grid.
  3. Enter a name for the policy and select a Workgroup from the list.
  4. Click Create Policy.
  5. Select one of the following:
    • QuickStart for Windows: A preconfigured template with Workstyles, Application Groups, messages, and Custom Tokens already configured.
    • QuickStart for Mac: A preconfigured template with Workstyles, Application Groups, and messages already configured.
    • Server Roles: The Server Roles policy contains Workstyles, Application Groups, and Content Groups to manage different server roles such as DHCP, DNS, IIS, and print servers.
    • Blank: Select to configure a policy from scratch. There are no preconfigured settings in this template.

Table of workstyles

The Policy Editor opens to the Workstyles page. At this point you must configure the Workstyle, Application Groups, Application Rules and other policy configuration as required for your organization. The templates and their configuration components are described in more detail in the below sections.

For quick access to the Workstyles Summary page, click the hyperlink for the Workstyle name.


View a Policy

  1. From the left menu, select Policies under Endpoint Privilege Management.

Table of Endpoint Priilege Management Policies, with View Policy highlighted

  1. Click the vertical ellipsis for the policy you wish to view, and then select View Policy.


Ready only view of the Workstyles table

  1. The Policy Editor opens in Read Only mode.

If you wish to edit the policy, click the Policy List link at the top of the page to go back to the main Policies page where you can select the policy to edit and lock it.

  1. Use the options in the left navigation to view the following policy information:
    • For Windows policies:
      • Workstyles
      • Application Groups
      • Content Groups
      • Messages
    • For macOS policies:
      • Workstyles
      • Application Groups
      • Messages
    • Utilities:
      • Licenses
      • Import Policy
      • Template Policies
You can also filter the contents displayed in each grid using the Filter By list above the grid.


Edit a Policy

When you edit a policy, the policy is locked. Other policy administrators cannot access the policy to change the properties when the status is Locked. The policy is unlocked when changes are saved or discarded.

  1. From the left menu, select Policies under Endpoint Privilege Management.

Endpoint Privilege Management Policies table with Lock and Unlock Policy options highlighted

  1. Click the vertical ellipsis for the policy you wish to edit.
  2. If a policy is locked, the Unlock Policy action displays in the menu. Click to unlock the policy.
  3. Select Edit and Lock Policy.


  1. In the Policy Editor, go to the policy property you want to change and make your edits.
  2. Click Save to save a draft of the policy. Clicking Save allows you to keep the Policy Editor open to continue changing the policy.
  3. Once the policy is updated, click Save and Unlock to save a new revision of the policy, or Discard Changes to remove changes.
  4. If Discard Changes is selected, you are prompted to Continue Editing or Discard Changes.
  5. (Optional). On the Save and Unlock dialog box, you can enter Annotation notes about the policy changes. You can also check the Auto Assign Policy to Groups? box, to automatically assign the latest revision to groups the policy is currently assigned to.

The Auto Assign Policy to Groups? option is only available when the groups are currently on the latest policy. If they are on an older version, only the Annotation notes option is displayed.

You can export a policy and import a policy to overwrite the existing one while viewing a policy in read-only mode and while editing a policy in read/write mode. Select Utilities > Import Policy from the left navigation, click Overwrite Policy, and then click Export Existing Policy to export. Drop a file in the box to upload a new policy and then click Upload File.

For more information on editing the various components of a policy, including Workstyles, Application Rules, and Application Groups, please see "Use the Policy Editor to Manage Policy" in the Privileged Management Cloud Administration Guide.