Allow specific actions in authorized Generative AI apps

You can create a web policy that allows users to upload files and paste data into authorized Generative AI (Gen AI) apps but prevents them from copying data from those apps. This helps users use approved Gen AI while preventing unauthorized data sharing.

Create an application group for authorized Gen AI apps

To create an application group for authorized Gen AI apps, do as follows:

1. Go to My Products > Protected Browser > Policy objects.
2. Click Add object.
3. Select Application group.
4. Enter a name for the application group.
5. Expand Generative AI and select the authorized Gen AI apps.
6. Click Save.

Create a web policy

Create a web policy that allows users to upload files and paste data into authorized Gen AI apps, but prevents them from copying data from those apps.

To create a web policy, do as follows:

1. Go to My Products > Protected Browser > Web policy.
2. Click Add policy.
3. Enter a name for the policy.
4. Select Allow as the policy action.
5. Click Edit.
6. Under Available, select the user groups the policy applies to.
7. Move the user groups to Assigned.
8. Click Save.
9. In Application group, select the application group you created for the authorized Gen AI apps.
10. Under Actions, in Data boundaries, select Keep data within this policy's destination - allow pasting from outside.
11. Click Save.