Overview

You can use the Fireblocks Console to create Policies customized to your organization's financial security needs. Before you begin, however, you must review the section below and the About Policies article. If you have any questions, contact your Customer Success Manager or email the Fireblocks CSM Team.  

Before creating your Policy

• Read Policy examples for helpful templates and use-case guidance.
• Review the Policy best practices for important tips and reminders.
• Apply rules to specific users, including API users, and make sure to create and configure each user before creating the rules.
• Set up any source or destination in your workspace that you wish to use in a rule before creating the rule. 
• Review how to create a vault account or link an exchange account before using them as a source or destination. This also applies to Fireblocks Network connections and whitelisted addresses.
• To apply rules to user groups, create the groups on the Manage Groups page of your Fireblocks Console. We recommend that all users in the same group have similar workspace roles. To change a user’s role, contact Fireblocks Support.

Please note the following:

• Only the workspace Owner or Admin-level users can create Policy rules.
• Policies can only be edited by one person at any given time.
• The Policy Editor automatically times out after 30 minutes of inactivity.
• If you plan to perform Web3 operations, we recommend creating a DeFi policy.

Create a Policy

In your Console under Policies, the main page is divided into two sections: Active policies and Available policies. 

Adding a rule

When you first access the Policies page, the Active and Available policy sections are displayed under an Overview tab. Each time you activate a Policy, a corresponding tab appears at the top of the page. 

Active policies

This section allows you to view all currently active Policy types (or categories). To add rules to your active Policies: 

1. In the Fireblocks Console, select Policies in the left navigation panel.
2. Under the Active policies section, choose the Policy type (e.g., Transfer), then select Edit policy. 
3. Select +Add rule to open the Policy Editor, where you can configure rules using the appropriate rule parameters.
4. After building your rules, select Add rule. The new rule appears in the Policy Editor. Use the arrows to the left of your rules to reorder the rules to the appropriate place in the Policy following the first-match principle.
5. Review your changes, and then select Publish policy to submit your changes to the approval group assigned to Policy changes. Learn more about Policies.  

Available policies

Create a Policy from this section that displays all Policy types that have not yet been activated: 

1. In the Fireblocks Console, go to Policies in the left navigation panel.
2. Under the Available policies section, select the Policy type you want to create (e.g., +Add Stake policy).
3. Follow steps 3 to 5 above.

Learn to edit your Policies. 

Rule parameter fields

Below are brief descriptions of the parameters used when building Policy rules. Rule parameters vary depending on the type of Policy you are updating. Learn more about Policy rule parameters.

Scope

• Rule name: The name you want to use to identify the Policy rule.
• Source: The account(s) that the transaction’s source must be for the rule to apply.
• Venue: The account(s) that must be included in the token conversion for the rule to apply. This parameter is only available for the Convert Policy.
• Destination: The account(s) that the transaction’s destination must be for the rule to apply.
• Initiators: The users who must initiate the transaction for the rule to apply. You can select individual users or user groups.
• Blockchains: The blockchains where the transaction must take place for the rule to apply.
• Contract call methods: The smart contract functions to which you want the rule applied.
  • This parameter only applies to the Contract Call Policy.

Funds

• Assets: The assets to which you want the rule applied.
• Base asset: The base assets that must be included in the token conversion for the rule to apply. You also choose the minimum and maximum amounts of the base assets that must be met for the rule to apply.
  • This parameter only applies to the Convert Policy.
• Quote asset: The quote assets that must be included in the token conversion for the rule to apply. You also choose the minimum and maximum amounts of the base assets that must be met for the rule to apply.
  • This parameter only applies to the Convert Policy.
• Amount range: The minimum and maximum amounts of the assets that must be met for the rule to apply.
• Limitations: Whether the rule applies to single transactions or all matching transactions within a specific time period.

Result

• Result: The action to take when a transaction meets the rule’s criteria. You can choose Allow, Block, or Requires approval.
• Approval set configuration: The required number ("threshold") of defined users who must approve the transaction before it can be signed. 
  • This parameter is only available if you selected Requires approval as the rule’s Result.

Learn about editing your Policies.