https://docs.protegrity.com/aiteam-edition/docs/gov_policy/policy/configuration/Recent content in Configure Policy onHugoenhttps://docs.protegrity.com/aiteam-edition/docs/gov_policy/policy/configuration/security-settings/Mon, 01 Jan 0001 00:00:00 +0000https://docs.protegrity.com/aiteam-edition/docs/gov_policy/policy/configuration/security-settings/<p>Policy separates authenticated users, command capabilities, resource grants, and integration identities. Each controls a different boundary. Successful network access does not establish permission to approve or repair policies. The application programming interface (API) and Policy Integration Manager (PIM) also enforce different authority boundaries.</p> <h2 id="security-controls">Security Controls</h2> <p>The chart uses non-root workloads, restricted container contexts, dropped Linux capabilities, and read-only filesystems where applicable. It disables privilege escalation and limits network paths. These settings do not replace gateway authentication or cluster network enforcement.</p>