Example custom policies

The following sections provide examples of custom policies:

• Restrict access to team data sources
• Restrict access to only the stable version of an app

See also Configure team settings and the following sections that describe how to use the predefined policies:

• Disable AppSheet databases   
• Prevent app creators from adding email attachments in automations
• Prevent app creators from enabling Chat apps with AppSheet
• Prevent app creators from enabling the API
• Prevent app creators from using external authentication domains
• Prevent app creators from using external data sources
• Prevent app creators from using Google Forms
• Prevent app creators from using webhooks

 Restrict access to team data sources

Restrict access to team data sources to only specific team members by defining a governance policy. When naming team data sources, AppSheet includes the string: :Team: 

For example: google_cloud_identity-1:Team:1234567

Using the :Team: string in a policy condition, you can restrict the team members that can access any of the team data source. 

To restrict access to team data sources, do the following

1. Add a predefined organization or team policy.
2. In the Policy template drop-down, select Restrict data sources.
3. Click Next.
4. Update the policy definition, as follows:

   Field	Description
   Name	Enter a name for the policy that will appear on the Policies page.
   Condition	Update the condition, as follows: OR(NOT(CONTAINS(DataSourceName], ":Team:")), IN(USEREMAIL(), LIST("emailaddress1", "emailaddress2", ...))) Where: emailaddressN: Approved team member email addresses.

   Modify the other fields, as required. See Configure the policy. 
   
   For example:

5. 

6. Review policy compliance.
7. Click Save.

Restrict access to only the stable version of an app

When you set a stable version of an app, you can define a policy to restrict access to only that version.

To restrict access to only the stable version of an app, do the following:

1. Add a custom policy.
2. In the Policy template drop-down, select Custom policy.
3. Click Next.
4. Update the policy definition, as follows:

   Field	Description
   Name	Enter a name for the policy that will appear on the Policies page.
   Component	Select AppSettings in the drop-down.
   Condition	Update the condition, as follows: IF(CONTEXT("AppName")="appname",[version]=version,true) Where: appname: App name defined by the appName query parameter in the app URL when viewing the app in the editor or accessing the app in your desktop browser. (It is not equivalent to the Short Name of the app defined in Settings.)  version: Stable version of the app. See View or restore a version of your app.

   Modify the other fields, as required. See Configure the policy. 

   For example:
   
   
5. Review policy compliance.
6. Click Save.

Disable the export of a CSV file

To disable the export of a CSV file, do the following:

1. Add a custom policy.
2. In the Policy template drop-down, select Custom policy.
3. Click Next.
4. Update the policy definition, as follows:

   Field	Description
   Name	Enter a name for the policy that will appear on the Policies page.
   Component	Select Actions in the drop-down.
   Condition	Update the condition, as follows: [ActionType]<>"EXPORT_VIEW"

   Modify the other fields, as required. See Configure the policy. 

   For example:
   
   
5. Review policy compliance.
6. Click Save.