Sonatype CLM Server - Policy Management Guide

OK, so in total, this first concept of organization vs. application is pretty simple. However, it’s important to remember what you do here is setting up how you can manage policy later. If you followed our steps you should have done at least two things in this section:

You should also have a clear understanding about inheritance and how organizations and applications differ. Finally, when you are first starting out, it is a good idea to experiment by creating a few one-off policies at the application level. Be diligent though, when you find yourself copying constraints and conditions into policies used by more than one application, it’s likely time to consider simply adding the policy at the organization level.