Identity policies may be disabled and enabled. Identity policies that are created on the cluster are enabled by default. When enabled, policies are effective for any users and groups that are attached to them.
If there is a protected path replicating data from another cluster to the local cluster, the identity policies on the source cluster are replicated to the cluster. They appear in the identity policy listing and they are disabled by default, so that you can choose to enable them only in the event of failover if you wish.
Enabling and Disabling Identity Policies in VAST Web UI
From the left navigation menu, select User Management and then Identity Policies.
Open the Actions menu for the policy you want to edit, and select Enable or Disable.
Click Yes to confirm the change.
The policy is now enabled or disabled.
Enabling and Disabling Identity Policies in VAST CLI
To enable or disable identity policies from the VAST CLI, use the identitypolicy modify command with the --enable or --disable option specified.