# Policy Inheritance and Customization

### If you create a new security policy, it will inherit dope.swg’s Base Policy. You can adapt a policy to your individual user needs. And you can undo any policy changes by just reverting back to the dope.swg Base Policy. It's simple. It’s safe.

## Inheritance

Any new policy you create will inherit the entire base policy. An “Inherits Base” tag is visible in all the policy screens to highlight this.

![Dope Categories with the “Inherits Base” tag](/files/JUtk9khB7z8qYwu7sCM6)

![Cloud Application Control with the “Inherits Base” tag](/files/xEq9Cq9RkTlN64JleKZC)

For a policy that inherits from base, you can jump back to the base policy by hovering over the “Inherits Base” tag <img src="/files/aHS0tZS59dZ4oaQ6Xf9M" alt="" data-size="line">. This will change to a “Go to Base Policy” tag <img src="/files/pnloY9WKBWJGlk79xLAe" alt="" data-size="line"> when hovering. If you choose to select, you will be taken to the same policy section of the Base Policy.

{% hint style="info" %}
A policy that inherits from Base Policy will be automatically updated when an update is made to the Base Policy.
{% endhint %}

###

## Customization

A policy section will become customized once any edits are made to that section.

{% hint style="warning" %}
Once a policy section is customized, any edits made within the policy section will only affect that policy.
{% endhint %}

A policy has the following sections:

* Dope Categories (includes Custom Categories)
* Cloud Application Control
* Bypass
  * Domain Bypass
  * Application Bypass

### Dope Categories Customization

Any of the following edits will result in the section becoming Customized:

* Restriction level change for parent category, subcategory, and custom category
* New policy exceptions
* Updates to the block, security risk, and warning page assignments

### Cloud Application Control

Any of the following edits will result in the section becoming Customized:

* Addition of a new domain, sub domain, tenant ID, or account ID to any application
* Enabling a Cloud Application not already enabled
* Disabling a Cloud Application already enabled

### Domain Bypass

Any of the following edits will result in the section becoming Customized:

* Addition or deletion of a domain

### Application Bypass

Any of the following edits will result in the section becoming Customized:

* Addition or deletion of an application

{% hint style="info" %}
For a customized policy section you can revert it back to Base Policy by simply hovering over the “Customized” tag <img src="/files/5tFlHmXJObQSdNByih6U" alt="" data-size="line">. This will change to a “Reset Policy” tag <img src="/files/EeZWpqpI8V7h7VtYizf8" alt="" data-size="line"> when hovering. Selecting the Arrow icon will revert the policy section back to the Base configuration.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://inflight.dope.security/dope.console/dope.swg-policy/policy-inheritance-and-customization.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
