Use Agent Security in the Admin Console to manage policies and configuration. It replaces Policies & Configuration. Its rollout is independent of local computer access for Work and dots.
When eligible legacy cloud policies migrate, their settings carry over into Global, preserving policy assignments and ordering. Review the migrated policies in Agent Security. Local computer access is a separate opt-in for Work and for dots.
Where settings apply
Each policy starts with a Global baseline. Environment overrides change supported execution settings for Local or Codex Cloud. Where an environment has no override, it inherits the applicable Global settings from that policy.
-
Global: set orchestrator controls, including approvals and web search, and shared execution settings.
-
Local: adjust supported execution settings for work that runs on a connected computer.
-
Codex Cloud: adjust supported execution settings for Codex cloud tasks. You can configure these policies before enabling Codex Cloud, but they apply only after you enable Codex Cloud on the permissions page. Work Cloud has separate capability permissions, described in How Agent Security applies to Work Cloud.