Comment on page
Policy Inheritance and Customization
Any new policy you create will inherit the entire base policy. An “Inherits Base” tag is visible in all the policy screens to highlight this.

Dope Categories with the “Inherits Base” tag

Cloud Application Control with the “Inherits Base” tag
For a policy that inherits from base, you can jump back to the base policy by hovering over the “Inherits Base” tag
. This will change to a “Go to Base Policy” tag
when hovering. If you choose to select, you will be taken to the same policy section of the Base Policy.


A policy that inherits from Base Policy will be automatically updated when an update is made to the Base Policy.
A policy section will become customized once any edits are made to that section.
Once a policy section is customized, any edits made within the policy section will only affect that policy.
A policy has the following sections:
- Dope Categories (includes Custom Categories)
- Cloud Application Control
- Bypass
- Domain Bypass
- Application Bypass
Any of the following edits will result in the section becoming Customized:
- Restriction level change for parent category, subcategory, and custom category
- New policy exceptions
- Updates to the block, security risk, and warning page assignments
Any of the following edits will result in the section becoming Customized:
- Addition of a new domain, sub domain, tenant ID, or account ID to any application
- Enabling a Cloud Application not already enabled
- Disabling a Cloud Application already enabled
Any of the following edits will result in the section becoming Customized:
- Addition or deletion of a domain
Any of the following edits will result in the section becoming Customized:
- Addition or deletion of an application
For a customized policy section you can revert it back to Base Policy by simply hovering over the “Customized” tag
. This will change to a “Reset Policy” tag
when hovering. Selecting the Arrow icon will revert the policy section back to the Base configuration.


Last modified 6mo ago