User`s guide

2.12.4.1 A policy on a machine or a group

In the diagrams below, each numbered scheme illustrates the result of the respectively numbered

action.

The container stands for a group; the colored circle stands for a machine with applied policy; the dark

colored circle stands for a machine with two applications of the same policy; the white circle stands

for a machine to which no policy is applied.

Policy on a machine

1. A policy can be applied to a machine.

2. A policy can be revoked from a machine.

Policy on a group

1. A policy can be applied to a group.

2. A policy can be revoked from a group.

3. A policy applied to a group cannot be revoked from a machine.

4. To revoke the policy from the machine, remove the machine from the group.

The same policy on a group and on a machine

1. The same policy can be applied to a group and to a machine. Nothing changes on the machine at

the second application of the same policy, but the server remembers that the policy has been

applied twice.

2. A policy, revoked from the group, remains on the machine.

3. A policy, revoked from the machine, remains on the group and therefore on the machine.

4. To completely revoke the policy from the machine, revoke it from both the group and the

machine.

2.12.4.2 Operations with a machine

This section is a simplified illustration of what happens with the policies on a machine when the

machine is moved, copied, or deleted from a group.