Configuration policies bring standardization to a particular tenant (organizational unit). For example, you could use a configuration policy to grant access to a certain resource for all users within a tenant.
Or, you might manage two tenants. One contains people working in the United States, and the other contains people in the United Kingdom. You can create configuration policies to give users in the United States a Country attribute of US. And, another configuration policy gives users within the United Kingdom a Country attribute of UK.
Once a configuration policy is assigned to a particular tenant (organizational unit), a job is initiated. The job updates all user objects within the tenant, as shown below.

After initial setup, any time a new user is added to the tenant (organizational unit), a job runs to ensure the user object matches all of the tenant’s configuration policies.
For a brief overview, check out the video below:

Creating a configuration policy

Complete the steps below to set up a new configuration policy.

  1. In the menu on the left side of the screen, select Manage Administration > Configuration policies.
  2. Click Add.
  3. Enter a Name for the policy.
  4. With the Policy Scope tab selected, click Add, and then select the organizational unit to which the policy will apply. This defines the users that the policy may be applied to.
  5. With the User filters tab selected, click Add, and then select the groups or attributes used to filter the users. This defines the filter used to select users from the scope to apply the policy to.
  6. Select the Actions tab, click Add, and then select the actions you want to include in the policy. See below for a list of available actions.
  7. Click Save.

Check out the video below for a video walkthrough:

Examples of Configuration Policies

Check out a couple of examples of configuration policies which may be helpful in your environment.
Assign a Manager to a vOU
Set a User’s Country and Location Details

Editing or deleting a configuration policy

If you want to update or delete an existing configuration policy, follow the steps below.

  1. In the menu on the left side of the screen, select Manage Administration > Configuration policies.
  2. Select the desired policy and either:
  • Click Edit, make desired changes, and click Save.
  • Click Delete and confirm the deletion.

Supported actions

At this time, any of these actions can be added configuration policies:

  • Add User to Groups: add a user to a group
  • Assign User License: Manage Office 365 licenses.
  • Graph Set Out of Office: Set user’s out of office status.
  • Set Cloud User Manager: Set a user’s manager.
  • Set Mailbox Primary SMTP Address: Set a user’s primary email address.
  • Set User Multi-factor authentication: Set a user’s MFA status.
  • Update Cloud User: Update Office 365 user attributes.
  • Update On-Premises User: Update on-prem user attributes.

Processing configuration policies in an organization

Find out about the processing of the virtual organizational unit structure here.

Print Friendly, PDF & Email