Deploying data-loss-prevention policies to user devices

A method for deploying a data loss prevention (DLP) policy to a user device, comprising:

• displaying a graphical user interface (GUI) at an administrator device;
• receiving, through the GUI, a plurality of selections corresponding to a plurality of DLP options presented on the GUI and applicable to an application;
• receiving, through the GUI, a selection of an assignment group specifying a plurality of user devices to which the DLP policy should be applied;
• generating a configuration that specifies the DLP policy based on the selected options and selected assignment group;
• sending the configuration to the management server, wherein the management server:
• updates a record of the assignment group;
• synchronizes the record of the assignment group with an identity service;
• and
• causes a second server to implement the DLP policy for the plurality of user device in the assignment group;
• and
• causing a user device in the assignment group to retrieve the DLP policy from the second server and implement the DLP policy at the application.

A non-transitory, computer-readable medium comprising instructions that, when executed by a processor of an administrator device, perform stages for deploying a data loss prevention (DLP) policy to a user device, the stages comprising:

• displaying a graphical user interface (GUI) at the administrator device;
• receiving, through the GUI, a plurality of selections corresponding to a plurality of DLP options presented on the GUI and applicable to an application;
• receiving, through the GUI, a selection of an assignment group specifying a plurality of user devices to which the DLP policy should be applied;
• generating a configuration that specifies the DLP policy based on the selected options and selected assignment group;
• sending the configuration to the management server, wherein the management server:
• updates a record of the assignment group;
• synchronizes the record of the assignment group with an identity service;
• and
• causes a second server to implement the DLP policy for the plurality of user device in the assignment group;
• and
• causing a user device in the assignment group to retrieve the DLP policy from the second server and implement the DLP policy at the application.

An administrator device for deploying a data loss prevention (DLP) policy to a user device, comprising:

• a processor;
• and
• a memory storage containing a non-transitory, computer-readable medium comprising instructions that, when executed by the processor, carry out stages comprising:
• displaying a graphical user interface (GUI) at the administrator device;
• receiving, through the GUI, a plurality of selections corresponding to a plurality of DLP options presented on the GUI and applicable to an application;
• receiving, through the GUI, a selection of an assignment group specifying a plurality of user devices to which the DLP policy should be applied;
• generating a configuration that specifies the DLP policy based on the selected options and selected assignment group;
• sending the configuration to the management server, wherein the management server:
• updates a record of the assignment group;
• synchronizes the record of the assignment group with an identity service;
• and
• causes a second server to implement the DLP policy for the plurality of user device in the assignment group;
• and
• causing a user device in the assignment group to retrieve the DLP policy from the second server and implement the DLP policy at the application.