RapidIdentity Product Guide: New UI

User Policies

The User Policies section of the Folders module allows administrators to define policies specific to a user, set a home folder, and define folder template actions. Policies are added, removed, and prioritized, by clicking their corresponding action icons. Policies may also be duplicated, imported, or exported, and these actions are identical to those described with respect to Folder Templates.

To access User Policies, navigate to the Folders module and click on User Policies.

Folders_User_Policies.png

Once a Policy is added, There are three main tabs that assist in defining a policy. More details on these fields are listed below.

General

Home Folder

Actions

Policies_Tabs.png

General

The General menu contains fields to characterize a User policy.

Table 353. General Tab Fields

Field

Description

Enabled

This checkbox will activate the policy when checked. If this box is left empty, the policy will remain inactive.

This checkbox is disabled by default.

Description

This optional input field allows for a brief description of the policy.

User Base DN Filter

This input field defines the user base that the policy will apply to using the appropriate distinguished name (DN) filter. This will refer to the container that holds the Users to which the policy applies.

The magnifying glass glass.png to the right of the field opens the LDAP directory tree to allow the administrator the ability to locate and select the DN or User.

Include Sub-Containers

This checkbox will apply the policy to all containers under the base container when checked. If this box is deselected, the policy will only apply to the base container.

This checkbox is enabled by default.

User LDAP Filter

This input field defines the user(s) that the policy will apply to using the appropriate Lightweight Directory Access Protocol (LDAP) filter.

The magnifying glass glass.png to the right of the field opens the LDAP criteria builder window to allow the administrator the ability to build the LDAP Filter.

Excluded Users

This field allows administrators to exclude specific users from the policy.



Home Folder

The Home Folder menu contains fields that define the Home Folder of the policy it relates to.

Table 354. Home Folder Fields

Field

Description

Drive Letter

This input field allows the assignment of an alphabetical identifier for the mounted Home Folder.

Template

This dropdown field allows the selection of a specific template to be assigned to the Home Folder.

This field is required.

UNC Path

This input field defines the location of the Home Folder.

The magnifying glass glass.png to the right of the field allows the administrator the ability to search and select the attribute.

The required format must include the path with "%attr%"at the end, where "attr" is the name of the attribute from the object in which the folder is being created.

Example

\\servername\Users\%employeeID%

This example defines the UNC Path with the employeeID as the Users folder attribute.

This field is required.

Create Private Share

This checkbox allows the Home Folder to be shared privately when checked.

This checkbox is disabled by default.

Hidden

This checkbox will determine if the Home Folder will be hidden from a user or a group of users. The value of the checkbox cannot be selected until the Create Private Share checkbox is selected.

This checkbox is disabled by default.

ACL

Once the Create Private Share checkbox is checked, the ACL (Access Control List) field can be set.



Actions

The Actions menu allows administrators to define the folder template actions upon Active Directory interaction.

Table 355. Actions Fields

Field

Description

Apply Folder Template to Existing Home Folders

This checkbox will apply the selected template to the existing Home Folders.

This checkbox is enabled by default.

Allow Takeover of Unassociated Existing Folder

When enabled, this checkbox will allow a takeover of the unassociated existing folder.

This checkbox is disabled by default.

Delete Home Folder

This input field defines the number of days to wait to delete the Home Folder after the user is deleted.

The checkbox is enabled by default, and the input field is disabled if the checkbox is de-selected.

Move Existing Home Folder

This input field defines the maximum GB allowed for a move. For unlimited GB allowance, leave this field blank.

The checkbox is enabled by default, and the input field is disabled if the checkbox is de-selected.

Move Allowed Times

This section allows the administrator to select times and days in which folders will be allowed to be moved.

The checkbox grid displays the time slots as 12 AM through 11 PM and the days as Sunday through Saturday.