Creating policies allows you to define security settings, device restrictions, and configurations that will be applied to specific devices or device groups. You need Policy Management permissions to create policies. Consider which platform you're targeting and what restrictions are appropriate for your organization before starting. Policy creation follows a three-step process: Details, Configuration, and Assignment.

Step 1: Access Policy Creation

Navigate to Fleet > Policy Management > Policies, then click the "Add" button to start creating a new policy.

Step 2: Enter Policy Details

In the Details section, enter a descriptive policy name that identifies its purpose. Add a description explaining what the policy does and why it's needed. Select your target platform from the dropdown menu (macOS, Android, iOS, Windows)

Step 3: Configure Platform-Specific Settings

For Android devices, select the enrollment type between EMM (Enterprise Mobility Management) and RMM (Remote Monitoring and Management) based on your device management approach. Other platforms may have different configuration options specific to their capabilities.

Step 4: Configure Policy Restrictions

Click "Next" to proceed to the Configuration section. In General Restrictions, use the toggle switches to allow or deny specific device capabilities. Available restrictions include account modification, activity continuation, adding Game Center friends, AirDrop usage, AirPlay incoming requests, Apple personalized advertising, ARD remote management modification, Assistant usage, and auto unlock. Each toggle represents a permission that will be enforced on target devices.

Step 5: Assign Policy to Devices

Click "Next" to reach the Assignment section. Choose between assigning the policy to individual Devices or Device Groups using the tabs at the top. Use the search function to find specific devices by name. Select the checkboxes next to devices you want to apply this policy to. The list shows device names, assigned users, and last updated timestamps to help with selection.

Step 6: Complete Policy Creation

Review your policy configuration and device assignments. Click "Create" or "Save" to finalize the policy. A success message will confirm "New policy has been created" and the policy will appear in your policies list with deployment status indicators.

Immediate actions: Monitor policy deployment status in the policies list, review device compliance after policy application, adjust policy settings if needed, assign policy to additional device groups

Policy restrictions vary by platform and device enrollment type. Some restrictions may require supervised device enrollment to function properly. Monitor policy deployment status using the color-coded indicators in the policies list.