Reference Guide

Manage Policies
292
Management Console is automatically incremented although an administrator has not modified policy
values, at least one updated profile is available.
The polling interval for cloud storage provider profile updates is daily at 12:30 a.m.
Configure Access Groups
Data Guardian's Access Groups (formerly Circle of Trust) enhance security by creating user groups that
can collaborate on encrypted data. Users outside a group cannot access or view the data unless the
owner of the file grants access. Access Groups can include internal and external users. You can use
Access Groups with Windows, Mac, mobile, and web portal.
Data Guardian encrypted files:
• Internal users within an access group have access to encrypted data.
• Internal users outside an access group or external users do not have access but can request
access.
Important: Currently, if you enable Access Groups in the Management Console, you cannot disable it.
To configure access groups, complete the following:
• Set up Access Groups
• Determine whether the enterprise already has Data Guardian installed. Implementation will be
easier if you have a brief transition period where you allow users with shared files to prepare a
plan for shared files. Do one of these:
o Enterprise_does_not_yet_have_Data_Guardian - Transition time differs based on
Force-Protected or Opt-in mode. Instruct users to process shared files.
o Enterprise_has_Data_Guardian_Installed - Instruct users to process shared, encrypted
files.
• Configure Access Groups
• Disable_Auto_access_for_swept_files
Set up Access Groups
Analyze which users to include within each access group based on which users need to share or
collaborate on documents. You can create groups before or after enabling Access Groups in the
Management Console.
To set up groups, see Add a User Group
.
For Access Groups, you can configure the following:
• Import existing AD groups, for example, an accounting or legal group that shares files.
• Select ADMIN-DEFINED User Groups for cross-functional teams of managed users and any
external users that share or collaborate on files.
Note: When defining new groups, be sure to use descriptive names. On the client side, users will
be selecting some of these groups.
• After you add the user group, you can select that group, select the Details and Action tab, and
enable Access Groups for a single group or a combination of groups.
Also consider the following: