According to the Network Policies documentation, a network policy can be applied to an account, a security integration, or a user. If there are network policies applied to more than one of these, the most specific network policy overrides more general network policies. The following summarizes the order of precedence:
•Account: Network policies applied to an account are the most general network policies. They are overridden by network policies applied to a security integration or user.
•Security Integration: Network policies applied to a security integration override network policies applied to the account, but are overridden by a network policy applied to a user.
•User: Network policies applied to a user are the most specific network policies. They override both accounts and security integrations.
Therefore, if both the account_level and user_level network policies are defined, the user_level policy will take effect and the account_level policy will be ignored. The other options are incorrect because:
•The account_level policy will not override the user_level policy, as explained above.
•The user_level network policies will be supported, as they are part of the network policy feature.
•A network policy error will not be generated, as there is no conflict between the account_level and user_level network policies.
Submit