Bharath
Bharath

Reputation: 31

Intune App Protection - User group can be assigned multiple policies

We are trying out the Intune Graph APIs for App Protection. We have noticed that a user group can be assigned to multiple App Protection Policies. When a user group is assigned multiple policies, which policy takes precedence?

Upvotes: 1

Views: 1038

Answers (1)

Managed app policy conflicts are resolved setting-by-setting to create a net effective policy. The more protection setting wins.

For example consider PolicyA and PolicyB deployed to the same group and app.

PolicyA - pinRequired:false, encryptAppData:true

PolicyB - pinRequired:true, encryptAppData:false

Effective policy - pinRequired:true, encryptAppData:true

Thanks

Alemeshet Alemu (MSFT)

Upvotes: 1

Related Questions