Add a New User Activity Policy

1. Log in to Strata Cloud Manager.
2. Select ConfigurationSaaS SecurityData SecurityPoliciesUser Activity PoliciesAdd Policy.
3. Define the basic settings.

   1. Enter a Name for the policy.
   2. (Optional) Enter a Description for the policy.
   3. Specify a Severity for the policy ranging from Very Low, Low, Medium, High, and Critical..
   4. Verify that the Status is Enabled. A policy can be in the enabled or disabled state. After you add a new policy, you must enable the policy.
4. Specify the Items to Detect.

   1. Select one of the following:

      • Users—Applies the policy to users.
      • Assets—Applies the policy to assets such as files or folders.
   2. (Optional) Manage Exceptions for the policy. Enter the users or assets you want to exclude from the policy. For example, you might want to exclude Data Security administrators from user activity monitoring.
5. Specify the match criteria for the activity.
6. Specify the Action that you want Data Security to take:

   • Log Only (default)—For activity logging purposes, log the policy violation.
   • Log and Send administrator alert—For activity alerting purposes, send an email for policy violations that require immediate action by one or more administrators. Data Security can send up to five emails per hour on matches against each policy.
7. Save your new policy.

   Save Policy to create your new User Activity policy.

   Data Security starts scanning files against the policy as soon as you save the changes. After the scan starts, you can start View Policy Violations for User Activity.