# How to Manage Policies

## Policy Overview

* Policies are used to enforce permissions on Resources using a set of Actions.
* Actions include–but are not limited to–List, Read and Write.
* Policies get attached to entities such as Users, Groups, and Networks.
* Gopher System Policies are preset policies that enforce permissions on preset Resources that apply to API methods used in Gopher dashboard.

<mark style="color:blue;">**Note**</mark>: Policies attach to Users, Groups and Networks.

### **Viewing a System Policy**&#x20;

**Note**:  You can familiarize yourself with the structure and usage of a Policy by viewing one of the preset System Policies.

1. Sign in to the Gopher dashboard.\
   \&#xNAN;*If you do not have a Gopher account, refer to* [Sign Up for Gopher Dashboard](https://docs.gopher.security/gopher-dashboard/sign-up-for-gopher-dashboard#sign-up-for-gopher-dashboard) *for instructions.*
2. From the dashboard home page navigate to IAM & Admin > Policies.

<figure><img src="https://763889363-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FLEGeo1VJx52ReYZGHnWA%2Fuploads%2F9mgWJGhxik51pSchkoU2%2FPolicies-2048x1219.png?alt=media&#x26;token=e68f0753-ba98-4dfb-8a48-0b45e846082b" alt=""><figcaption></figcaption></figure>

3. Select the SuperAdministratorPolicy to view the Policy Summary.

<mark style="color:blue;">**Note**</mark>: This policy provides full access to all Resources because all Services (and Resources) are included in this policy and all available Actions are applied to all Resources.

<figure><img src="https://763889363-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FLEGeo1VJx52ReYZGHnWA%2Fuploads%2Fp6MEnd79TsBL5GcAuHcu%2FpolicySummary.png?alt=media&#x26;token=8835afd2-2280-4912-877f-1a2dc30f28f1" alt=""><figcaption><p>Policy summary</p></figcaption></figure>

### Creating a New Policy

1. From the **IAM & Users** card select **Policies**.
2. Click **Create Policy**.
3. Enter a Name and Description for the new policy.
4. Expand the **Services** menu and select a service.

<figure><img src="https://763889363-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FLEGeo1VJx52ReYZGHnWA%2Fuploads%2FD8c5pocCVoG3oIRs3i51%2FpolicySelectService-2048x1107.png?alt=media&#x26;token=6462536c-286a-4b3c-a2ae-50d6c3e16f9a" alt=""><figcaption></figcaption></figure>

5. Expand the **Actions** menu and select the desired permissions.

<mark style="color:blue;">**Note**</mark>: The system will only display the Actions that were created for the Resource in Services. If you do not see any or all of the expected Actions, Service itself to verify that Actions have been applied to the Resource.

<figure><img src="https://763889363-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FLEGeo1VJx52ReYZGHnWA%2Fuploads%2FgW4hrqYBvZ6k6kavHtM8%2FActions.png?alt=media&#x26;token=51498348-d989-4e42-b57e-e517b2b26000" alt=""><figcaption></figcaption></figure>

6. Expand the Resources section. The default for Resources is set to “**Specific**” which allows you to select specific resources from the list. To apply all Resources change the selection to **All Resources**.

<figure><img src="https://763889363-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FLEGeo1VJx52ReYZGHnWA%2Fuploads%2F1v6pH1LzmLHhwCe7oWkN%2FResourcesForPolicy-2048x1065.png?alt=media&#x26;token=40767a32-c532-4d8b-9183-e76b121f059c" alt=""><figcaption></figcaption></figure>

7. If needed click Add Additional Permissions and repeat STEPS 4-6 until all desired access is provisioned.
8. Click Confirm.

### Attaching a Policy to a User/Group/Organization

1. From the IAM Admin & Users menu click Policies.
2. Select a Policy.
3. Click **Policy Usage** to assign the policy to an entity.
4. To apply the policy to a new entity click **Attach**.
5. Select the User(s), Group(s) or Network(s) from the list of entities.
6. Click **Attach Policy**.
7. To detach a policy from an entity, click **Policy Usage**, select the entities and click **Detach**.
