Policies for Claude Enterprise
AI summary
Claude Enterprise provides policy templates to identify security risks and clean up unused objects. The 17 policies are organized into Security (checking risky settings and broad access), Clean-up (identifying abandoned objects), and Licenses and costs. Start with templates marked Recommended.
These are the policy templatesPolicyA policy is a governance rule that Rencore Governance checks against your inventory, for example Teams without owners.Read more for Claude EnterpriseClaude EnterpriseClaude Enterprise is the business plan of the Claude AI assistant by Anthropic.Read more, grouped by what they look for. Each template checks one kind of object and flags every item that breaks the rule. The severity shows how serious a violation is; a Recommended pill marks the templates Rencore recommends you start with.
See the Claude Enterprise inventory reference for the objects these templates work on.
Security 12
Risky settings, weak credentials and access that is wider than it should be.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| Code artifact publicly readable Recommended | Detects Code artifacts whose read mode makes them readable by anyone on the internet. | High | Claude Code artifact |
| Claude Code user is disabled in Entra ID Recommended | Detects Claude users which have been disabled in Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more and should be removed. | Medium | Claude user |
| Connector used with a personal login Recommended | Detects connectors that people connected with their own credential instead of the company-managed login, from the… | Medium | Claude connector usage |
| Connector performs write actions Recommended | Detects connectors that changed data in other systems rather than only reading it, from the Claude Console analytics… | Medium | Claude connector usage |
| External users in Claude organization Recommended | Detects users flagged as external in the corporate directory who have Claude access. | Medium | Claude user |
| Claude organization with not enough admins Recommended | Detects organizations with only 1 or less admin. | Medium | Claude linked organization |
Show 6 more policies
| Policy | Description | Severity | Checks |
|---|---|---|---|
| Claude organization with too many admins Recommended | Detects organizations where too many users are admins. | Medium | Claude linked organization |
| Single sign-on not enforced Recommended | Detects organizations where the sso_enforced setting is present but disabled. | High | Claude organization setting |
| Plugin from outside the official directory Recommended | Detects plugins in use whose identity does not point at the official Anthropic plugin directory, from the Claude… | Medium | Claude plugin usage |
| Project visible to the whole organization Recommended | Detects Claude projects that are not private and therefore visible to every organization member. | Medium | Claude project |
| Unidentified plugin activity Recommended | Detects activity in the combined third-party bucket, where plugins run that the Claude Console analytics cannot name… | Medium | Claude plugin usage |
| Claude user is not member of Entra ID Recommended | Detects users in Claude organizations which are not part of Entra ID. | Medium | Claude user |
Clean-up 3
Inactive, empty, ownerless or outdated objects you can archive or delete.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| Claude project is empty Recommended | Detects Claude projects that hold neither a chat nor an attachment and are therefore unused. | Low | Claude project |
| Claude project not updated in 90 days Recommended | Detects Claude projects whose last update is more than 90 days old and which are therefore likely abandoned. | Low | Claude project |
| Remote session left unfinished Recommended | Detects remote sessions that are still in a running state but have not been updated in more than 30 days. | Low | Claude remote session |
Licenses and costs 2
Licenses, spend and storage that cost money without being used.
| Policy | Description | Severity | Checks |
|---|---|---|---|
| No spend limit configured Recommended | Detects scopes whose effective spend limit is unlimited, leaving costs uncapped. | Medium | Claude spend limit |
| Spend limit over 80% consumed Recommended | Detects effective spend limits whose current consumption exceeds 80% of the configured limit. | High | Claude spend limit |
Frequently asked questions
How many built-in policies does Rencore Governance provide for Claude Enterprise?
How many built-in policies does Rencore Governance provide for Claude Enterprise?17 built-in policies, such as Code artifact publicly readable, Claude Code user is disabled in Entra ID and 15 more.
How are the Claude Enterprise policies grouped?
How are the Claude Enterprise policies grouped?By category: Security, Clean-up and Licenses and costs.
Which Claude Enterprise policies are recommended?
Which Claude Enterprise policies are recommended?Code artifact publicly readable, Claude Code user is disabled in Entra ID, Connector used with a personal login and 14 more.
Which module includes the Claude Enterprise connector?
Which module includes the Claude Enterprise connector?The Claude Enterprise connector is part of the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans. The connector is in preview.