The enforcement tier of the policy. OVERRIDE_ALLOWED means the policy is set but member orgs may mutate it. GROUP_MANAGED means the policy is strictly controlled and mutations are blocked for affected orgs. DELEGATE means each member org controls its own value. role policies only support GROUP_MANAGED and DELEGATE — OVERRIDE_ALLOWED is rejected for this policy type. Transitioning a role policy to DELEGATE (disabling it) is one-way — the policy cannot be transitioned back to GROUP_MANAGED afterward.
The enforcement tier of the policy.
OVERRIDE_ALLOWEDmeans the policy is set but member orgs may mutate it.GROUP_MANAGEDmeans the policy is strictly controlled and mutations are blocked for affected orgs.DELEGATEmeans each member org controls its own value.rolepolicies only supportGROUP_MANAGEDandDELEGATE—OVERRIDE_ALLOWEDis rejected for this policy type. Transitioning arolepolicy toDELEGATE(disabling it) is one-way — the policy cannot be transitioned back toGROUP_MANAGEDafterward.