assigningpasswordpoliciestopeople

• Home
• Password Management
• Current: Assigning Password Policies

Assigning Password Policies

EmpowerID supports having multiple policies to support different security requirements for various classes of users. When assigning Password policies, you should keep the following in mind:

• Directly assigning a policy to a person takes precedence over other types of assignments. For example, if a Password Manager Policy is explicitly assigned to a person, that policy overrules a policy assignment made to the person's Business Role and Location.
• Policies can be assigned any EmpowerID Roles and groups, to include: Business Roles and Locations, Management Roles, Management Role Definitions, groups and Query-Based Collections. If a person does not have a direct policy assignment made to their person, but they belong to a role or group that does, that person receives the policy associated with that role or group.
• If a person does not have a direct assignment or indirect assignment via a role or group, they automatically receive the default policy.

To assign Password Manager policies to Users

1. From the Navigation Sidebar, navigate to the Password Manager Policies management page by expanding Admin > Policies and clicking on Password Manager Policies.
2. From the Policies tab of the Password Manager Policies management page, search for the policy you want to assign to one or more users and then click the Display Name link for that policy.
3. From the View page, click the Policy Assignees accordion to expand it.
4. In the expanded Assignees of this Policy accordion, click the Add New (+) button on the grid for the type of assignee. For example, if you want to assign the policy to a Set Group or Query Based Collection, click the Add New (+) button for that grid.
5. Type the name of the target assignee in the Search field for that assignee type and then click the tile for that assignee.
6. Enter a priority for policy assignment in the Priority field. Priority takes effect if the selected user has another Password Manager policy. The lower the number, the higher the priority.
7. Click Save.

• Related Topics

  Concepts:

  • Password Manager Policies Overview

  Administrative Procedures:

  • Setting up Password Manager Policies
  • Creating Password Challenge Questions
  • Assigning Password Challenge Questions to Password Policies
  • Unlocking People from the Password Recovery Center
  • Resetting Passwords
  • Help Desk Password Reset
  • Sending One-Time Passwords