If 2 policies have conflicting settings, which one will be applied? Would any of the policies apply? What order are they applied in?
If 2 policies are conflicting, the last policy to be applied will override the settings from other policies in a conflict scenario.
The policies will apply in terms of tree order.
Example.
SELECT ap.edsaBlockingLink, apo.name,*
FROM APOLinks ap join APOs apo
on ap.edsaAPOGUID=apo.objectGUID
where edsaSecObjectGUID in('GUID_OF_OU_GOES_HERE_e.g.- BE1B8494-C855-41E0-B639-A86E781F5177')
where the policy is applied
and ap.edsaBlockingLink <>1
order by ap.name
Whichever policy's name (CN) is last alphabetically is the one being applied to the object.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center