Overview

You can use the Fireblocks Console to create Policies customized to your organization's financial security needs. Before you begin, however, you must review the section below and the About Policies article. If you have any questions, contact your Customer Success Manager or email the Fireblocks CSM Team.  

Before creating your Policy

• Read Policy examples for helpful templates and use-case guidance.
• Review the Policy best practices for important tips and reminders.
• Apply rules to specific users, including API users, and make sure to create and configure each user before creating the rules.
• Set up any source or destination in your workspace that you wish to use in a rule before creating the rule.
• Review how to create a vault account or link an exchange account before using them as a source or destination. This also applies to Fireblocks P2P Network connections and whitelisted addresses.
• To apply rules to user groups, create the groups on the Manage Groups page of your Fireblocks Console. We recommend that all users in the same group have similar workspace roles. To change a user’s role, contact Fireblocks Support.

Please note the following:

• Only the workspace Owner or Admin-level users can create Policy rules.
• Policies can only be edited by one person at any given time.
• The Policy Editor automatically times out after 30 minutes of inactivity.
• If you plan to perform Web3 operations, we recommend creating a DeFi policy.

Create a Policy

The Policies page in your Console has two sections: Active and Unconfigured policies. Initially, both sections appear under an Overview tab, but each activated Policy creates its own tab at the top of the page. Follow the steps below for each section.

Active policies

This section allows you to view all currently active Policy types (or categories). To add rules to your active Policies: 

1. In the Fireblocks Console, select Policies in the left navigation panel.
2. Under the Active policies section, choose the Policy type (e.g., Transfer), then select Edit policy.
3. Select +Add rule to open the Policy Editor, where you can configure rules using the appropriate rule parameters. Each parameter allows you to define specific conditions for when the rule should apply.
4. After building your rules, select Add rule. The new rule appears in the Policy Editor. Use the arrows to the left of your rules to reorder the rules to the appropriate place in the Policy following the first-match principle.
5. Review your changes, and then select Publish policy to submit your changes to the approval group assigned to Policy changes. Learn to publish your Policies.  

Unconfigured policies

Create a Policy from this section that displays all Policy types that have not yet been activated: 

1. In the Fireblocks Console, go to Policies in the left navigation panel.
2. Under the Unconfigured policies section, select the Policy type you want to create (e.g., +Add Stake policy).
3. Follow steps 3 to 5 above.

Next steps

• Publish a Policy - Submit your changes for approval and activate your rules
• Edit a Policy - Make changes to existing rules when needed
• Policy Best Practices - Follow recommendations for effective Policy management
• Policy Rule Parameters - Reference guide for all available parameters
• Policy Rule Examples - Review some common use cases 
• Policy Rule Error Messages - Troubleshoot error messages when creating or editing rules