Policy Composition

Policy Composition

What it does

Policy Composition lets you stack several policies on the same device, each with a priority weight from 1 to 1000. Instead of one giant policy that duplicates settings, you build your strategy in layers: a company baseline, department rules, regional compliance, and individual exceptions, all working together.

How it works

Rather than one monolithic policy, you compose from focused ones:

Corporate-Baseline   (Priority: 100)
Sales-Department     (Priority: 200)
EU-Region            (Priority: 300)
Manager-Overrides    (Priority: 400)

When settings overlap, the higher priority wins. Non-conflicting settings from every policy still apply, so each policy stays small and reusable.

Priority bands

• 1 to 100: foundation policies (security baselines, core compliance)
• 101 to 300: organizational policies (department, region, office)
• 301 to 700: team and role-specific policies
• 701 to 1000: individual exceptions and temporary overrides

Why it helps

• Cleaner architecture: single-purpose policies that are easier to maintain
• Less duplication: write common settings once and reuse them
• Safer changes: update one layer without rebuilding a whole configuration
• Guaranteed baselines: core security applies regardless of other layers

Docs

Policy Composition

Shipped October 2025. Available on Enterprise plans.