Managing and Using the Policy Manager
To function as an MSP and use the Policy Manager, you need:
-
The Managed Service Provider capability
-
The Manage policies role
For complete descriptions of each role available in Flexera One, see Flexera One Roles.
The Policy Manager enables Managed Service Providers (MSPs) to apply, manage, and monitor policies across their child organizations by using tags to group organizations. By using the Policy Manager, MSPs can ensure consistent policy enforcement, streamline policy management, and maintain compliance across their child organizations. From the Policy Manager, MSPs can view applied policies, monitor their status, and adjust policy settings as needed.
Accessing the Policy Manager
To access the Policy Manager, from the Automation menu, click Policy Manager. The Policy Manager page opens and displays a list of all policies that have been applied in child organizations.
Using the Policy Manager
The Policy Manager page displays a list of all policy managers that have been applied in child organizations. For each policy manager, the following information is displayed:
- Policy Manager Name—The name of the policy manager.
- Status—The current status of the policy manager, such as Active or Error.
- Created By—The user who created the policy manager.
- Created On—The date and time when the policy manager was created.
- Last Updated On—The date and time when the policy manager was last updated.
Viewing the Policy Manager Details
To view more information about a policy manager, on the Policy Manager page, click the policy manager name. The Status tab opens and shows additional information about the selected policy manager, including the following details:
- Name—The name of the policy manager.
- Description—A description of the policy manager or the applied policy.
- Applied On—The date and time when the policy manager was applied to the child organization.
- Template—The name of the policy template that was used to create the applied policy.
- Active Policies—The number of policies that are currently active for this policy manager.
- Expected Policies—The total number of policies that are expected to be created when the policy runs.
- Errors—The total number of errors that have occurred when the policy runs.
- Customer Org Policy Status—A table that shows the status of the policy manager for each child organization. This table includes the following columns:
- Customer Org Name—The name of the child organization.
- Org ID—The identifier of the child organization.
- Status—The current status of the policy manager in that child organization.
Viewing the Policy Manager Configuration Settings
To view the configuration settings, on the Policy Manager page, click the policy manager name or click the three-dots icon to the right of the name and select View, and then click the Details tab. The Details tab displays the configuration settings that were specified when the policy manager was applied, including credentials and policy settings.
Creating a New Policy Manager
You can create a new policy manager either directly from the Policy Manager page or the Automation Catalog page.
To create a new policy manager, do one of the following:
- From the Automation menu, click Policy Manager, and then click Create. The Automation Catalog page opens, displaying policies where the Show in customer orgs (enable for Policy Manager) check box is selected. The Policy Manager Enabled filter is applied automatically. This check box applies only to custom policy templates that you publish, not to built-in Flexera policy templates.
- From the Automation menu, click Catalog. Click the policy name to open the Details tab, select the Show in customer orgs (enable for Policy Manager) check box, and then click Apply as Policy Manager by clicking the Apply button.
For the complete steps to apply a policy as a policy manager, see Applying Policies as a Policy Manager Across Multiple Child Organizations.
Editing the Policy Manager
This policy manager cannot be edited if the policy template it is based on has been unpublished. To edit the policy manager, republish the policy template.
You can edit an existing policy manager to update its configuration.
To edit a policy manager:
- On the Policy Manager page, click the three-dot menu to the right of the policy manager name and select Edit. The Edit Policy Manager page opens.
- Make any necessary changes to the policy manager configuration, including the policy name, description, policy settings, and policy manager settings.
- Click Save Changes to save the changes.
Terminating the Policy Manager
You can terminate a policy manager when you no longer want it to manage policies across child organizations.
To terminate a policy manager:
- On the Policy Manager page, do one of the following:
- Click the three-dots icon to the right of the policy manager name, and select Terminate.
- Click the policy manager name, and then click Terminate.
- In the Terminate Policy Manager dialog box, click Terminate to confirm whether you want to terminate the policy manager. The terminated policy manager is removed from the Policy Manager page.
Terminating the policy manager stops it from running and removes all associated information, including any incidents and log data. Only the data related to the most recent incident or incidents triggered by this policy manager will remain; older incident data will be removed.
Exporting the Policy Manager Data
You can export the data from the Policy Manager page to either a comma-separated values (.csv) file or a spreadsheet (.xlsx) file for analysis.
To export the policy manager data:
- Go to the Policy Manager page (Automation > Policy Manager).
- In the upper-right corner of the page, click Export CSV or XLSX, and then select either CSV or XLSX to export the policy manager data table. Hover over the button icon to view the button name.