Policy Exemptions
An exemption lets you temporarily suppress a violation when a legitimate business need justifies the conflicting access. Exemptions are time-bound — Zluri automatically re-opens the violation when the duration expires.
Exemptions must be enabled per policy. Turn on Allow Exemptions in the Remediation step when creating or editing a policy, and set the maximum duration allowed. Only Owner, Admin, and IT Admin roles can grant exemptions.
Grant an exemption
Steps
- Open the violation detail.
- Select Exempt in the drawer header.
- Enter the exemption duration in days. The Create Exemption panel shows the max duration allowed by this policy inline (for example, “Max allowed in this policy: 30 days”).
- Enter a Reason. This field is required.
- Select Create Exemption. Zluri moves the violation to Exempted status.
Create Exemption panel with Duration field, max-duration note, required Reason field, and Create Exemption button
!Create Exemption panel with Duration field, max-duration note, required Reason field, and Create Exemption button
Create Exemption panel with Duration field, max-duration note, required Reason field, and Create Exemption button
Zluri automatically re-opens the violation and returns it to Open status when the exemption duration expires.
View and manage exemptions
The Exemptions tab on the policy detail page lists all exemptions for that policy. Each row shows the exemption ID, status, policy, identity, reason, created by, and expiry date.
Exemptions tab with Active Exemptions filter and rows showing Exemption ID, Status, Policy, Identity, Reason, Expiry Date
!Exemptions tab with Active Exemptions filter and rows showing Exemption ID, Status, Policy, Identity, Reason, Expiry Date
Exemptions tab with Active Exemptions filter and rows showing Exemption ID, Status, Policy, Identity, Reason, Expiry Date
Exemptions tab showing Status column with Active and Revoked badges
!Exemptions tab showing Status column with Active and Revoked badges
Exemptions tab showing Status column with Active and Revoked badges
Exemptions filter panel showing Status, Policy, and Expiry Date filter options
!Exemptions filter panel showing Status, Policy, and Expiry Date filter options
Exemptions filter panel showing Status, Policy, and Expiry Date filter options
Exemption row action menu showing Copy Link and View options
!Exemption row action menu showing Copy Link and View options
Exemption row action menu showing Copy Link and View options
Exemptions list More Actions menu showing View Density options
!Exemptions list More Actions menu showing View Density options
Exemptions list More Actions menu showing View Density options
Use the Active Exemptions filter button to show only unexpired exemptions. Select the filter icon to refine by Status, Policy, or Expiry Date.
Revoke an exemption
Steps
- Select the exemption row to open the exemption detail drawer.
- Review the Violation Details, Policy Details, and Exemption Details sections to confirm the scope.
- Select Revoke Exemption. Zluri sets the exemption status to Revoked and returns the linked violation to Open status immediately.
Exemption detail drawer showing Active status, days remaining, Revoke Exemption button, and Violation/Policy/Exemption Details sections
!Exemption detail drawer showing Active status, days remaining, Revoke Exemption button, and Violation/Policy/Exemption Details sections
Exemption detail drawer showing Active status, days remaining, Revoke Exemption button, and Violation/Policy/Exemption Details sections
Exemption detail drawer with Copy Link button highlighted
!Exemption detail drawer with Copy Link button highlighted
Exemption detail drawer with Copy Link button highlighted