Policies assigned to an organization vs policies assigned through tags

[Tredmond7511]

We are looking into automating our policy process and are looking into tags to do so. However, we also noticed that we can assign policies to organizations and have a couple questions:

1) Is there advantages to using tags over organizations and vice-versa?

2) If a system that has a tag with one policy is assigned to an organization assigned a conflicting policy, which takes precedence?

[aguevara · Accepted solution]

you can assign policies directly to groups on your system tree or break the inheritance on set of systems and manually assign policies to that system, if you do that the manually assigned policy will take precedence over the policy assigned on the group (as you break the inheritance of the policy)

another way of working with policies is the Policy Assignment Rules which will help you achieve, more info on this is here:

https://docs.mcafee.com/en/bundle/epolicy-orchestrator-5.10.0-product-guide/page/GUID-4CF082B2-CA2F-...

Regards

Alejandro

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[cdinet]

To clarify also, policy assignment rules take precedence over system tree assigned policies.