Aligning by Policy is one of two ways to align your tenants in inforcer, and is best used to assess, manage and deploy a specific policy across multiple tenants at once.
To access Align by Policy:
- Click Align from the inforcer sidebar.
- Click Align by Policy.
Finding your Policy
Finding your Policy
As you might imagine, any Microsoft tenant is home to hundreds of policies - so the first step is identifying the one you want to deploy.
Start with the Policy Filter tool on the left of the screen. From here, you can refine your policy search. Your filtering tools include:
1. Group By – Group the policies in the list below by their:
a. Microsoft Product
b. Baseline
c. Policy Tag
d. Source tenant
2. Sort By – Sort the results of this policy group by:
a. Policy Name
b. Policy Type
c. Alignment Score
3. Filter Tags – Filter results by the Policy Tags you’ve created and applied
4. Filter Source – Filter results by their source tenant or Baseline
5. Filter Type – Filter results by their Microsoft Product and intent
6. Search Policies - Find a specific policy by typing in the name manually.
The policy results will appear in the main policy window, to the right.
Finding Affected Tenants
Finding Affected Tenants
Once you've clicked the appropriate policy from the search results, it will populate results in the Policy Window on the right. The Policy Window categorises the policy status across tenants; click a policy status to see the affected tenants.
You can also filter results using the Sort, Group and Filter options in the Policy Header:
Your options include:
· Sort by – Sorts tenant results by:
o A-Z: alphabetizes affected tenants by name
o Baseline: Alphabetizes by associated Baseline tenant
· Group By – Groups result categories into:
o Alignment Status: The status of this policy across all relevant tenants
o Baseline: The Baseline in which the reference policy resides
o Tag: Any Tenant Tags applied to the tenants adopting this policy
· Filters – Narrow results down to:
o Alignment status
o Baseline source
o Tenant Tags
o Duplicate policies – Tenants with duplicate policies
o Missing from Tenant – Tenants with an absence of expected policies
o Similar Policies - Tenants with unrecognised policies that may be performing similar roles to that of their Baseline policies
The bottom three Filters can be set to:
· Off – Do not apply this filter
· Show only – Show only tenants affected by this filter
· Hide – Hide all tenants affected by this filter
Aligning by Policy
Aligning by Policy
You've found your policy, filtered it down to the affected tenants - all you need to do now is get it standardised across them all. Click one or more Policy Statuses to see all those affected.
From here, you can:
Click the tick box next to the policy status to select all affected tenants
Click the tick box of specific tenants if you want to change only certain tenants' policies.
Click into a single tenant to see single-tenant options. These are explored in greater detail in Single Tenant Options, below.
Whenever one or more tenants are selected, the Actions Bar appears at the bottom of the screen:
From here, you can:
Align the policy
Accept any deviations of this policy
Unaccept this policy (if a previously accepted deviation)
Delete this policy from the tenant.
Certain options may be unavailable (greyed out) if not applicable to all tenants. Some of these options also appear in each tenant's card view, for single-click remediation.
Single Tenant Options
Single Tenant Options
Clicking a single tenant provides a much more granular view of the policy and the affected tenant. Depending on the status of the policy, you can accept deviations, align policies, inspect policy codes, and more.
"Unaccepted Deviation" Options
Unaccepted Deviations usually mean there's a discrepancy between the value of the tenant policy and that of its baseline. Clicking any tenant with an Unaccepted Deviation while in Align by Policy loads up the following policy view:
From here, users can:
Compare the JSON Code of the Baseline and misaligned property by clicking the Magnifying Glass icon to the right of the policy
Select individual policy properties from the tick box to the left of the listed property. This may change some of the options in the Actions Bar at the bottom of the screen
View Baseline Impact, which provides an AI summary of the affect this policy will have on the tenant
Delete the policy from the tenant
Accept all deviations (or accept granular deviations if only one policy property is selected)
Align remaining deviations, aligning any deviations to the standard dictated in the baseline.
"Missing from Tenant" Options
Clicking any "Missing from Tenant" policy to view the following options:
View full Policy Data displays the JSON data of the missing policy, as it appears in the Baseline
Compare: if inforcer finds policies in the tenant that are a potential match for the missing policy, users can compare the code, and rename the policy to match that of the Baseline to track alignment and deviation.
Rename to Baseline: Where relevant, rename a similar customer policy to that of the Baseline, and compare that policy status going forward.
View Impact, which provides an AI summary of the affect this policy will have on the tenant
Accept this deviation and allow this policy to remain absent without affecting alignment score.
Rename all similar policies to that of the Baseline.
Align all differences in Policy name and status to match that of the Baseline.
"Accepted Deviation" Options
Clicking any of your Accepted Deviations provides the following options:
Compare the JSON Code of the Baseline and accepted deviation by clicking the Magnifying Glass icon to the right of the policy
Select individual policy properties from the tick box to the left of the listed property. This may change some of the options in the Actions Bar at the bottom of the screen
View Impact, which provides an AI summary of the affect this policy will have on the tenant
Unaccept all Deviations, (or Unaccept Granular Deviations if only one policy property is selected)
Align remaining deviations, aligning any deviations to the standard dictated in the baseline.