The enterprise administrator can select how the enterprise policy should be applied at the array level:
| • | Enterprise policy only. In this case, the administrator at the enterprise level dictates that only the selected enterprise policy applies. No new rules can be added at the array level. |
| • | Combined enterprise and array policy. In this case, an array policy is added to the enterprise policy. The enterprise policy overrides the array policy. That is, the array policy can impose additional limitations, but cannot be more permissive than the enterprise policy. |
| • | Array policy only. In this case, no enterprise policy is applied to the array. The array administrator can create any rule to allow or deny access. |
If the array uses only an array policy (without an enterprise policy), then you cannot modify the array's policy settings to use an enterprise policy. Likewise, if the array uses an enterprise policy, you cannot set the array's policy settings to use only an array policy (Array policy only).
For more information, see Configure default enterprise policy settings.
You can change the default enterprise policy settings, but only if no array in the enterprise is currently using these default settings. If an array is currently using the default settings, change the array's enterprise policy settings to Use custom enterprise policy settings, then change the default enterprise policy settings.
Publishing rules cannot be created at the enterprise level. However, the enterprise administrator can specify whether an array is allowed to publish servers by creating Web publishing rules or server publishing rules.
Similarly, packet filtering cannot be enabled at the enterprise level. However, the enterprise administrator determines whether packet filtering is forced at the array level. Alternatively, the enterprise administrator can allow the array administrator to decide if packet filtering should be made available.
For more information, see Allow array-level publishing rules and Force array-level packet filtering
Each enterprise policy can be configured to allow different administrators privileges to modify the policy. For more information, see Configuring permissions.