---
title: "Policies"
slug: "creating-policies"
updated: 2026-07-08T11:25:18Z
published: 2026-04-29T10:55:15Z
canonical: "docs.britive.com/creating-policies"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.britive.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Policies

1. Login to Britive.
2. Click on **System admin** -> **Role & Policy Management** -> **Policies**.
3. The list of policies is displayed. The following actions are available for the policies:
  - **Manage policy**: You can edit, clone, disable, or delete a policy.
  - **Enable/Disable policy**: You can enable or disable any policy.
  - **Clone policy**: Make a copy of the existing policy to fine-tune as per your requirements.
  - **Delete policy**: Delete the customized policy. You cannot delete the predefined policies.
4. Click on the **Add Policy** button to add a new policy.
5. In the **Add Policy** tab, enter the following:
  - **General**
    - Enter the **Policy Name**.
    - Enter the description.
    - Select the **Access Type** either as Allow or Deny.
  - **Members:** 

    - **Users**: Click **Select Users** and add one or more members for this policy.
    - **Tags**: Click **Select Tags** and add one or more tags for this policy.
    - **Service identities**: Click **Select Service Identities** and add one or more service identities for this policy.
    - **AI identities**: Click **Select AI Identities** and add one or more AI identities for this policy.
    - **API tokens**: Click **Select API Tokens** and add one or more API tokens for this policy.
  - **Permissions**: Add the existing permissions to this policy or create a new policy and assign it to this policy. See [Creating Permissions](/v1/docs/creating-permissions).
  - **Roles**: Add a role to this policy. Select from the list of predefined roles or user-created roles.
  - **Generic Conditions**: 

    - IP based: Select if you want access based on the IP addresses. Enter an IP address or a list of comma-separated IP addresses in the text box.
    - Time based: Select the **Start and End Date/Time****Date-time range** or **Set Time Schedule** for applying the policy.
  - **Approvals**: Select whether the user needs approval to access a profile. Enter the following details if you select **Approval Required** as **Yes**:  

    - **Notifications:** Select notification medium(s) using the **Add Notification** button. Before use, notification mediums can be created in the **Admin**->**Global Settings** section. For more details, see [Creating and Managing Notification Mediums](/v1/docs/notification-medium).
      - **Slack** or **Slack Application:**
        - (Optional) Specify the Slack Channel ID:
          1. To find the Slack Channel ID:
            1. Right-click on the Slack channel you want to use.
            2. Select **View Channel Details**.
            3. Scroll to the bottom to find the Channel ID.
          2. Click **Validate Channels** to validate the listed channels. Ensure you have integrated the Britive app with channels (private/public) before validating them. For more information about integrating the app, see [Configuring Slack App](https://docs.britive.com/docs/configuring-slack-app).Note:You can add only one Slack notification medium per policy.
      - **Teams** **Application:**
        1. (Optional) Specify the Team Name:
          1. To find the channels:
            1. Go to the Teams client.
            2. Select the Teams for which you want the list of channels.
            3. Click on **See all channels** to get the list of channels.
        2. Click **Validate Channels** to validate the listed channels.
    - **Manager Approval Settings:** Select Manager Approval if you want the requester's manager as an approver. You can select one of the following:
      - **Manager OR Approvers**: The manager or the approvers approve/reject the request.
      - **Manager AND Approvers**: The manager and approvers must approve/reject the request.
      - **Manager Only**: Only the requester's manager can approve/reject the request. You cannot select individual users or tags as approvers.
    - **Users:** Select the users from the list.
    - **Tags**: Select the tags from the list.
    - **Maximum time to Approve:** Enter the time in *Hours:Minutes* format. The approval request expires if it is not approved within the specified time.
    - **Approval Validity**: Enter the number of days or hours for access validity after the request is approved. Approval validity time must be between 1 and 30 days.
6. Click **Save and Enable** after all the configuration is done.