Hello
One feature of On-Prem EPM which I have not yet found a clear explanation in the documentation is how Global Priority actually works in on prem EPM.
While I understand that it has to be configured when there is a default organization - a detailed explanation on how it works (in relation to organizations) appears to be missing.
Hey
On-prem/BI deployments support layered policies. If multiple Smart Rules contain the same asset, and there is a different policy priority set in each Smart Rule, then the endpoint doesn’t know the policy with top priority on that asset. What ends up happening is that a different policy may take precedence each time the agent processes the Smart Rules. In this scenario, we can set a Global Priority to process all policy Smart Rules and serve all policies across all applicable Smart Rules to the endpoint (as defined by the global priority order).
In other words, with Global Policy Priority we can reliably determine the policy read order on the endpoint, ensuring they are applied in the correct sequence.
Let me know if you have any questions.
For reference: https://docs.beyondtrust.com/bips/docs/bi-epm#manage-global-priority-for-endpoint-privilege-management-policies
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
