Exclude representative from Group Policy

Question

Hi. We have a default Group Policy for all support teams that gives access to all jump clients. The policy applies to all members of our tenant, using the tenant ID. Is there a way to exclude specific agents so that the policy does not apply to them? I want to set up a separate Group Policy only for one agent to have access to only a very limited number of jump clients, but I can’t if they are already a member of the default group because they are a tenant member.

tdearman · Answer

Consider organizing your jump clients using Jump Groups. Assign the jump groups to specific group policies.

ie, Jump Group Alpha is assigned to Group Policy A, Jump Group Beta is assigned to Group Policy B.

Also, group policies are enforced top down, so if a rep is a member of multiple group policies, they will receive permissions from the policy that is lower in the list.

https://docs.beyondtrust.com/rs/docs/jump-client-guide

https://docs.beyondtrust.com/rs/docs/jump-client-use-cases

Hope this helps.

Todd