CentraSite 10.7 | CentraSite User’s Guide | Runtime Governance | Run-Time Policy Management | Managing Run-Time Policies through CentraSite Control | Viewing or Modifying a Run-Time Policy
 
Viewing or Modifying a Run-Time Policy
To examine and modify the properties of a run-time policy in CentraSite, you must have one of the following permissions:
*To examine and modify the properties of a organization-specific policy, you must have the Manage Run-Time Policies permission for the organization specified in the scope of the original policy. For example, if the original policy is scoped for organization ABC, you are not permitted to examine and modify the properties of that policy unless you have permission to manage run-time policies for organization ABC.
*To examine and modify the properties of a system-wide policy, you must have the Manage System-Wide Run-Time Policies permission.
Important:
If you belong to a role that includes the Manage System-Wide Run-Time Policies permission, you have the ability to modify CentraSite's predefined policies. However, you should not do this. These policies perform critical functions within the registry and must not be modified except under the direction of a technical representative from Software AG.
You cannot modify a policy while it is in the Productive state. To make changes to a policy, you can do any of the following:
*Create a new version of the policy, make the necessary changes to the new version and switch the new version to the Productive state when you are ready to put it into effect. Switching the new version to the Productive state will immediately put the previous version in the Retired state. (The Retired state is an end state. After you place a policy in this state, you can no longer reactivate it.)
*Create a completely new policy that includes the required changes. When you are ready to put the new policy into effect, switch the old policy to the Suspended state and switch the new policy to the Productive state. When you are certain that you will no longer need to revert to the original policy, switch it to the Retired state.
*Switch the existing policy to the Suspended state, make the necessary changes to the policy and then switch it back to the Productive state. While the policy is in the Suspended state, it will not be enforced. (Because suspending the policy results in an enforcement gap, one usually does not use this approach in a production environment.)
*To view or modify the properties of a run-time policy
1. In CentraSite Control, go to Policies > Run-Time.
This displays a list of defined run-time policies in the Run-Time Policies page.
2. Locate the policy whose details you want to view or edit and select Details from its context menu.
This opens the Run-Time Policy Details page.
3. If the policy is active, deactivate it.
You cannot modify the details of an active policy.
4. On the Policy details page, examine or modify the properties as required.
Field or Profile
Description
Name
The name of the policy. A policy name can contain any character (including spaces).
Description
Optional. Additional comments about the policy.
Version
The user-defined version number to be assigned to the new version. We recommend that you update the version number anytime you make significant modifications to a policy.
State
The policy's current lifecycle state (for example, New, Productive, Suspended, Retired).This field also displays an icon that indicates the activation state of the policy:
*. The policy is active (that is, ready to be deployed to a PEP).
*. The policy is inactive.
Organization
The organization to which the policy belongs.
Owner
The user who created the policy.
System Version
The automatically-generated system version identifier for the policy.
Actions profile
The settings in this profile specify the actions that the PEP will execute when the policy is enforced.
Scope profile
The settings in this profile determine the services to which the policy is applied.
Services profile
Displays the list of web services and virtual services to which the policy applies.
Permissions profile
The settings in this profile identify which users can view, edit and delete the policy.
5. Click Save to save the updated policy.
6. When you are ready to put the policy into effect, activate the policy.