Zero Trust Access Policy

Zero Trust Access Policy Presets

Ready-to-deploy configuration presets for Zero Trust Access Policy. Each preset is a complete manifest you can copy, customize, and deploy.

2 presets
01

Preset: Allow staff

A simple `allow` policy that grants access to anyone with a corporate email domain, connecting from an allowed country, with a 24-hour session.

02

Preset: Admins with approval and MFA

An `allow` policy for privileged access: it references a reusable admins group, requires explicit approval and a purpose justification, enforces hardware-key MFA, and uses a short 1-hour session.