Automation policy

An automation policy is a reusable template that defines a sequence of tasks an automation carries out when it runs. Each policy specifies an instant task and, optionally one or more successive tasks. A task can be an Active Directory action, a Microsoft 365 action, an orchestration template, or a webhook, so a single policy can cover a set of actions that spans multiple systems. Automation policies are applied while creating an automation.

By creating a policy once and reusing it across automations, administrators can standardize routine operations such as user onboarding, offboarding, group cleanup, and license assignment, without reconfiguring the same task chain every time.

How an automation policy works

An automation policy consists of two parts: an instant task, which is the primary action triggered when the automation runs, and one or more optional successive tasks, which are follow-up actions that execute after the instant task at a configured time interval in days, hours, or minutes. Each policy is also tied to an automation category, which can be User Automation, Computer Automation, Group Automation, or Contact Automation, and this category determines the type of AD objects the policy can act on. When the policy is attached to an automation, the product reads the task sequence and executes each task in the defined order and at the specified intervals.

Prerequisite

  • The logged-in technician must have permission to create automation policies, either as a built-in admin or through a delegated role.

Note: Successive tasks within an automation policy execute sequentially based on the configured intervals. If a task fails during execution, the subsequent successive tasks will wait until the current one is resolved.

Configure an automation policy

  1. Navigate to Automation > Configuration > Automation Policy.
  2. Click + Create New Automation Policy in the top-right corner of the page.
  3. Enter an Automation Policy Name and an optional Description.
  4. Select the Automation Category. The available options are User Automation, Computer Automation, Group Automation, and Contact Automation.
  5. Under Instant Tasks, choose the primary action that should run when the automation is triggered, and select the System Template for the action.
  6. To add follow-up actions, click + Add Successive Task, choose the action, and specify the execution interval in days, hours, or minutes.
  7. Repeat step 6 for each additional successive task.
  8. Click Save.

To modify, delete, copy, or share an existing automation policy, navigate to Automation > Configuration > Automation Policy, locate the policy in the list, and hover over the Actions column to access the available icons:

  • Edit: Click to update the policy name, description, instant task, successive tasks, or execution intervals. Click Update to apply the changes. Modifications apply only to future executions; already-executed automation instances are not affected.
  • Delete: Click and confirm the prompt to remove the policy. A policy that is currently linked to an active automation cannot be deleted; detach it from all automations first.
  • Copy: Click to duplicate the policy, provide a new name, adjust any settings as required, and click Update. Use this to create a variant of an existing policy without rebuilding it from scratch.
  • Share: Click to share the policy with selected technicians. Choose the access level: View or Edit, and click Share. Shared policies appear in the recipients' policy list and can be applied to automations they create.