Docs

Let someone past a rule

A developer was blocked and has a good reason. Allow it for them, on that laptop, for a week, a month or for good.

A request to be let past a rule arrives under Requests; the finding it came from is under Detections.

How a request reaches you

When a rule blocks something, the developer sees the rule's name and a link. The link opens a page that says Ask for an exception, with a box for "what you're doing and why the rule is in the way", and a button Send to an administrator. The same happens when a held package or MCP server is refused: Ask to install this.

Decide

  1. Click Requests in the top bar.
  2. Under Waiting, each request shows the thing, who asked, on which laptop, when, and their reason.
  3. Click Allow, Allow 7 days, 30 days or Deny.

An exception is for that laptop and that rule only. It's in the policy on the laptop within a few minutes. When it runs out, the rule applies again.

Take it back

Under Allowed on the Requests page, click Revoke.

Require a reason from yourself

Under Rules, Advanced, switch on Require a note to approve. Then every approval asks you for a short reason, which goes in the audit log.

See every exception to one rule

Open the rule on the Rules page and click Exceptions at the bottom of the panel.