Skip to content →
Log in

Your first access policy

Grant one subject access to one published service.

Prerequisites#

Connect a gateway, enroll a device, and publish at least one service.

Create the grant#

  1. Open Network → Access → Add Policy.
  2. Name the policy and choose Allow.
  3. Set a priority; lower numbers evaluate earlier.
  4. Under subjects, deliberately choose All subjects or Selected, then select the intended user, group, or device when using Selected.
  5. Select at least one service.
  6. Deliberately choose All tenant gateways or selected gateways.
  7. Leave conditions empty. Time and source-IP conditions are visible but unavailable and cannot be saved as enforceable restrictions.
  8. Create the policy and test from the enrolled device.

Expected result#

The matching device receives the service route after configuration refresh. Unmatched traffic remains denied.

Conflict warnings identify overlapping policy, but priority and order determine evaluation. Use Policy simulation before broadening scope.