How attribute policies work on Modify action

Summary: Cayosoft Administrator has granular control over how attribute data is presented or modified through the use of attribute policies, applied to the desired scope (Administrative Units). This article will describe how the attribute police work on Modify action.

Applies to: Cayosoft Administrator 5.1.0 or later

ID: KB20192801-1

When you configure the attribute policy, you specify how the attribute data should be presented on the object form in the corresponding controls. But if you apply this policy to any modify action for some object, for example, Office 365 License or User properties, you should consider that this object is already created and already has a set of attribute values.

Let’s count all actions that modify existing object properties Modify actions. So, Modify actions are: User Properties, Mail Properties, Office 365 License, and so on.

When you perform such action in Cayosoft Web Portal, the form always displays the current value of objects attributes. 

Due to the fact that the form always displays the current value, attribute policies for default values do not work here. That is why when you open any Modify action form, the default values from the policy won’t be applied automatically as they do on the New User form.

Other attribute policy settings, such as Possible values, Min and Max values, Label changes, Read-only and Hide flags, will be applied, because they didn’t change the existing values.

However, if the current attribute value conflicts with the value defined by the attribute policy, you’ll see an error message near the property when you try to update the object.

For more information about Attribute Policies and how they work, please refer to Cayosoft Administrator documentation at https://support.cayosoft.com/hc/en-us/articles/360015404191.

How the attribute policy works on Office 365 License action

A user doesn't have the license defined in the policy

When configuring the attribute policy for Office 365 License action, one of the attributes you could specify is Licenses. On the Attribute Policy Setting for "Licenses" you select which licenses or license options should be applied to a user, which should be read-only or hidden:

If you connect to Cayosoft Web Portal, find a user that doesn't have this license assigned, and click Office 365 Licenses action for this user, you will see the licenses that are marked as <Not Set> and Read-only, hidden plans, and options won't be available on the form:

If you select the E3 license plan, it would have only the options defined in the policy - Teams and Exchange online,  To-Do option will be hidden:

A user has the license defined in the policy

If a user already has the license defined in the policy - E3 Plan and all its options, and the attribute policy is defined as on the picture above, then you will see all the licenses and options currently assigned to this user:

If you uncheck the E3 Plan and check it again, the license and its options defined in the policy will be applied. But you still need to uncheck the To-Do option manually and save changes to exclude it from the options list. 

If a user has the license plan assigned but this license plan is either hidden by the policy or just made read-only or read-only (including options), this license plan will be displayed on Web Portal as read-only.

For more information about license plans visibility in Cayosoft Web Portal, please see Attribute policies – Cayosoft Help Center.