Create and activate a policy revision

To change the policy you create a new revision. On the quick path, one approval creates the revision and makes it active.

How do I create the revision?

1. Open «Manage» › «Policy» and choose «New revision».
2. Write the «JSON document»: { "schemaVersion": "v1", "version": 1, "rules": [ ... ] }. The console reminds you: «Edit only the versioned request below.» The limit is 256 KiB, 256 rules and 32 conditions per rule.
3. Choose how to save:
   • «Create and activate» (default): «Create and activate asks for one approval and makes this revision active at once.»
   • «Create only, for shadow evaluation»: creates without activating, so you can simulate first.
4. Choose «Review revision» and check the rules.

How do I approve the change?

1. The console asks «Approve this change»: «Approve exactly this change on your approver phone or with your passkey. The approval works once, for this command only, and expires in a few minutes.»
2. Choose «Approve on phone» or «Approve with passkey».
3. On the phone, the request appears as «Create and ACTIVATE now a revision of the policy access», with the revision, the revision digest, the rules and the expected state. The app warns: «On approval, this revision becomes active at once and decides access, without shadow evaluation.»
4. Compare: «The phone shows the same action, policy, revision and command digest. Approve only if they match what you meant to change.»

If your organization requires phone approval

With «Require phone approval», only the phone approves policy changes.

Errors

After activating

Test with a real person. If something goes wrong, «Roll back active» returns to the previous revision (also with an approval).