Edit the Policy
Only admins can edit the policy, and every policy change requires approval from the Admin Quorum.
The following diagram shows the workflow for editing a policy.
An admin creates a draft of the new policy rules on the Fordefi web console. The draft of the new policy rules is then submitted to the Admin Quorum for their approval. The Admin Quorum are notified on their mobile devices about the draft of the new policy rules. When the required number of admins approve the draft, the new policy rules are created and added to the system.
Only one draft of policy rules is permitted at any time.
Edit the Policy
Open the Fordefi web console.
In the side menu, click Policies. The Transaction Policy screen opens displaying a list of policy rules. Note that the Published button is displayed, indicating that the policy set you are viewing has been approved and is active for the current account.
To create a new draft policy rule, click Edit policy, and then click Create Rule.
In the Create a new rule dialog, enter a meaningful name for the new policy rule.
Add conditions as described in Rule conditions and actions
Specify the action to be taken if the policy rule conditions are fulfilled:
- Allow: Allow the transaction to be made.
- Block: Block the transaction from being made.
- Require Approval: Send the transaction for prior approval before it can be completed.
If this option is selected, specify both the number of approvers required, and specify the people or API users who are required to approve the transaction.
Assume required approvers are from group A and group B. A user who is a member of both groups A and B, need only approve once.
Click Save to save the rule and go back to the policy rules list.
To edit an existing rule, click ✎ next to the rule name. The rule editing dialog opens.
To change the order of the rules, drag a policy rule up or down.
When you are done making changes to the policy, click Submit. The following notification appears:
Click Send for review. The proposal is then marked as Pending Approval. You can click Published in the upper-right corner of the screen to compare the proposed policy version with the published version.
After a policy draft is submitted, the Admin Quorum receive a notification on their mobile devices. When the required number of admins approve the policy rules, the policy proposal becomes "Published" and becomes the active policy for the organization.
Until a policy proposal is approved, you can abort it by clicking Abort on either the web console or the mobile app.