Policies

Policies are how LiveStream determines who may access what, and how, at any given time.

In previous iterations of Getbusi web access management software, Policies were a singular set of rules which could be applied directly to groups or individuals. In order to easily accommodate large directory services with many user groups, Policies have been split into two components.

ProTip: Your entire policy configuration is viewable from the Dashboard, at-a-glance, including time-based policies.

1. Policy Groups

For each Policy Group, four things must be defined:

1. Name: This unique title describes the types of user groups this policy group will be managing e.g. Staff, Managers, Teachers, Students etc.

2. Members: These are the user groups and device groups which this policy group will effect.A client group may only be a member of one Policy Group, this helps to avoid conflicts.

3. Policy Sets: Policy Sets are the actual sets of web access rules which will be applied to the members of the Policy Group. One Policy Set can be applied to multiple Policy Groups.

   • Every Policy Group must have a default Policy Set that determines their primary set of web access rules.
   • Optional time-based Policy Sets may be added to a Policy Group to override the default Policy Set and enforce time-based web access rules.

4. Priority: Policy Groups are automatically positioned in a hierarchy in order to resolve conflicts where one user is a member of multiple directory groups which are assigned to separate Policy Groups.

This allows you to group your organisation's myriad user groups into clear containers within LiveStream rather than forcing you to manage them separately. For example, if you are a school with over five student year groups in your directory, they can now be logically contained in a Policy Group that's relevant to their level of web access e.g. "Students." See specific examples, below

2. Policy Sets

Policy Sets contain all the web access management rules that may be enforced for a Policy Group. Each Policy Group must have a default Policy Set which will always apply to it unless it is overridden by an optional time-based one.

Like Policy Groups, each Policy Set is uniquely identified by its name. Be sure to choose Policy Set names wisely, because you may need to differentiate them from Policy Groups based only on their name.

All rules are optional are separated across five themes:

1. Safety Mode — search engines and YouTube for Schools
2. Categories — deny access to content based on its category
3. Allow & Deny Lists — supplement and/or override the category filtering with custom filter lists.
4. Quota and Credit — limit data usage by file size, quotas and/or by charging credit.
5. Speed Limit — finely control available bandwidth (download speed) based on various factors.

Example usage

The following example represents an education scenario where you have general students which must be assigned the same set of rules all the time and then a more specific subset which also live on campus and therefore require separate rules for when they use the web during their personal time.

This example assumes that members of the directory group boarding_students_2014 are also members of the various Yr## groups.

Policy Group: Boarders

Priority: 1

Policy Group: Students

Priority: 2