News
Abstract
MaaS360 is deprecating the multi policy feature that allows admins to assign multiple policies to devices, resulting in a "resolved policy."
Content
How do I know whether I am impacted?
All existing users of multi policy are impacted.
To verify whether or not you are impacted, navigate to Security -> Policies -> Resolved Policy (Icon on upper right)
All existing users of multi policy are impacted.
To verify whether or not you are impacted, navigate to Security -> Policies -> Resolved Policy (Icon on upper right)
If you see published resolved policies here, then you are impacted and need to take action.
If you do not see any resolved policies or policies in draft state, then you are not impacted.
What is the change?
In the upcoming Q2 2022 10.86 MaaS360 release, the multi policy feature will be removed from all MaaS360 environments.
https://www.ibm.com/support/pages/applying-multiple-policies-devices-maas360
In the upcoming Q2 2022 10.86 MaaS360 release, the multi policy feature will be removed from all MaaS360 environments.
https://www.ibm.com/support/pages/applying-multiple-policies-devices-maas360
What is the impact?
Existing Users:
Existing enrolled devices will remain on the resolved policy until the next evaluation (group changes, group assignment, location policy assignment, compliance rule policy assignment, etc).
Existing Users:
Existing enrolled devices will remain on the resolved policy until the next evaluation (group changes, group assignment, location policy assignment, compliance rule policy assignment, etc).
In the portal UI, the resolved policy icon (Security -> Policies -> ‘Resolved Policy’ Icon) will disappear. The admin will not be able to view, create, or edit resolved policies moving forward.
However, going forward resolved policies will be viewable only in the device view. When a device, with a resolved policy, is opened from Device Inventory -> Device and then selects the resolved policy hyperlink.
No support will be provided for existing users of the multi policy feature post its removal.
New Users and Devices: New users and devices are not impacted and will not get resolved (multi) policy. Admins will not have access to creating any new multi (resolved) policy.
If I am impacted, what are the next steps?
If you are impacted, for all admin users, we recommend creating a new policy by referring to existing resolved policy and by using the Add Policy feature. Assign the new policy to the devices / groups before the 10.86 release to maintain policy continuity on user devices.
Suggested Actions:
If you are impacted, for all admin users, we recommend creating a new policy by referring to existing resolved policy and by using the Add Policy feature. Assign the new policy to the devices / groups before the 10.86 release to maintain policy continuity on user devices.
Suggested Actions:
- Create a new policy based on the existing resolved policy. Set the appropriate precedence number so that devices do not revert to one of the policies feeding the resolved policy.
- Alter group policy associations accordingly. Once the group evaluation is complete, devices will be assigned policy based on group membership and policy precedence.
- Apply the new policy created to the desired device or user group.
Contact Us:
Reach out to csmaas@us.ibm.com for more information and help.
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSXX","label":"IBM MaaS360"},"ARM Category":[{"code":"a8m0z000000070yAAA","label":"POLICY"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
09 March 2022
UID
ibm16561335