Prepare Access and Example Inputs

Prepare separate user accounts, supported catalog inputs, and verification responsibilities before authoring.

Prepare this checklist before creating a tutorial policy. Use a nonproduction scope that your team permits you to change. Do not use the example to test protection against production data. Identify the exact data locations or runtime consumer before choosing policy inputs.

Before You Begin

Complete these prerequisites:

  • Obtain the Policy address from your platform operator.
  • Identify whether the exercise uses Data or artificial intelligence (AI) authoring.
  • Read roles and permissions.
  • Confirm the target integrations required by your release and exercise.

Prepare the Exercise

Prepare the exercise with the people who will perform it:

  1. Sign in with the account that will author the policy. The account can open Policy and perform its assigned authoring operations.
  2. Ask the platform administrator to verify the required command capabilities. The author can create work and edit policies they own or can access.
  3. Identify the reviewer and approver for this exercise. Each person uses their own account with the appropriate decision capabilities.
  4. Select an available classification from your environment. For a Data exercise, confirm it resolves to the intended discovered locations.
  5. Select the intended principals from the configured catalog. You can explain who should receive each permission. A principal is a runtime subject, such as a directory group, not a Policy reviewer.
  6. Confirm the supported protection method or AI permission choices. Your inputs match the authoring lane and target release.
  7. Agree who will verify delivery and protection after approval. That person has the necessary target access and diagnostic permissions.

If catalogs are empty, stop and ask an operator to check discovery and integration setup. Do not fabricate classification identifiers or select unrelated production locations. If authoring access fails, resolve the permission problem before saving work.

Record Your Input Choices

The following values illustrate an exercise, not preinstalled catalog objects. Replace them with real values selected from your environment.

The table lists example exercise inputs and what to verify before using each one:

Exercise InputExampleVerify Before Continuing
Policy nameCustomer email exerciseChoose a name your team can identify and later archive.
ClassificationA classification containing email addressesConfirm the selected classification actually resolves to your exercise scope.
PrincipalA test application group from the catalogConfirm membership and intended permission with the identity owner.
AuthorAlexUse Alex’s own authenticated authoring account.
ReviewerMorganUse Morgan’s separate account with review and approval capabilities.
Verification scopeOne known nonproduction Data location or AI consumerRecord the intended target and who can inspect its protection or receipt evidence.

Alex and Morgan are illustrative people, not account names to provision. Do not share tokens or credentials to simulate a role handoff.

Verify Preparation

You can identify the selected scope, principals, method, and review owner. You also know which delivery evidence will count as success. Save these choices with your team’s exercise notes. Do not record access tokens in those notes. If a definition remains unclear, consult the glossary before substituting an unrelated catalog value.

Continue with the Quickstart. For installation work, start with Installation.

Last modified : November 03, 2026