System-wide and Organization-specific Policy Enforcement
The Organization property specifies the organization to which the policy is applicable. When the Organization property is set to All, it indicates that the policy is system-wide. When the Organization property specifies a particular organization, it indicates that the policy is organization-specific.
Organization-specific Policies
An organization-specific policy is enforced on objects that belong to the same organization as the organization to which the policy applies. For example, if you have a policy that executes when user objects are updated and its Organization property specifies organization ABC, CentraSite executes that policy only when user objects in organization ABC are updated.
Remember these points when working with organization-specific policies:
You can create organization-specific policies for any organization for which you have Manage Design Time Policies permission. For example, if have you Manage Design Time Policies permission for organization ABC and XYZ, you can create organization-specific policies for either organization.
At enforcement time,
CentraSite selects policies based on the organization to which the object belongs, and
not the organization to which the requestor belongs. For example, if a user from organization XYZ edits an asset in organization ABC,
CentraSite applies the organization policies of ABC (the organization to which the asset belongs), and not the organization policies of XYZ (the organization to which the requestor belongs).
System-wide Policies
A system-wide policy is enforced for all organizations. For example, if you create a system-wide policy that is executed when an asset is created, CentraSite enforces the policy whenever any user in any organization adds an asset to the catalog.
To create a system-wide policy, you must belong to a role that has Manage System-Wide Design Time Policies permission. In a standard CentraSite configuration, only users with the CentraSite Administrator role and the Policy Administrator role have this permission.
System-wide policies are useful for managing many types of objects. For example, they are often used to assign users to certain server-wide groups or to enforce server-wide naming conventions on objects. However, organization-specific policies are often better choices for asset-related policies, because they enable an organization to tailor its policies to its own development processes and methodologies.