Possible enhancement - Orca Report Per Policy

[zzani]

Hello,

after the evaluation, orca report provides recommendation. In will happen that company has more policies (default policy where probably there will be default recommendation and additional policy where recommendation will be applied). As a result of the orca report, recommendation will still be visible although no user is actually using default policy but second policy is applied to all users. Might be good to have a filter while generating Orca report to include default policy or not to include default policy. That was company could have a clean recommendation that applies only to a certain policy.

Thank you very much for the report tool it made my life easier.

[cammurray]

This is probably a bit too complicated, the reason being that whilst I understand the requirement to split out to different policies, there are so many interdependencies, things like inclusions/exclusions in a policy, that mean that a report might not give a full picture of what's going on. E.g if you split it out to a specific policy, it may say that you're in a good state, when in-fact there's some exclusion you're not aware of, giving you a false sense of security.

I think it's best to view the configuration across the whole org because of these dependencies/how policies can be structured, rather than viewing a individual policy.