Policy Creation

Here are the steps to create a Policy. For the details on each GuardRail and their unique features, review the GuardRails in the Policies & GuardRails menu.

When you create a Policy, you start by defining at least one of these attributes:

Choose an option in one or more of the drop-downs. When at least one of the three shown here are populated, the Add New Policy button appears.

Click Add New Policy

Enter a Policy Name, and Policy Description, then click Continue.

The new Policy is ready for us to fill in the Source, Destination, and GuardRails, so click Assignments (1).

Here we have added a couple of User Groups, and all the Sanctioned Providers, Applications, Public and Private Models in our Lists.

Now the Policy “wrapper” is complete. It’s time to add a GuardRail!

Click the GuardRails tab (1), and enable the slider (2) which turns the Harmful Response Prevention button blue, and displays it’s checkmark. This indicates it is active. Action: Block and no Message is usually what you want for this GuardRail, unless you’re testing a Model. So this GuardRail is done!

Let’s do another one!

Now let’s save our work. Click on the Save button in the upper-right of the page. Unlike prior versions, v2.0 does not display a dialog box when you save your Policy. Let’s double-check that it saved.

On the Policy page, scroll down to the bottom. New Policies always start at the bottom, just above the Observability Policy that’s pinned to the bottom.

This is a good precaution. Since the Advanced Policy framework processes Policies from the Top down, also called “First-match precedence”, having a brand new, possibly untested Policy appear at the top of the list could have some unfortunate effects, potentially blocking all traffic for everyone.