Naming Conventions

This document describes the emoji-based naming convention used throughout this documentation to ensure consistent, visual identification of resources.

Core Principles​

All resources follow this pattern:

[Type Icon][Target Icon][Modifiers] [Type Code] - [Descriptive Name]

Icon Reference​

Type Icons (Primary Category)​

Target Icons (Who/What is Affected)​

Modifier Icons (Behavior/Status)​

Conditional Access Policy Status (CA Policies Only)​

Named Location Trust Levels​

Type Codes (Text Abbreviations)​

Examples by Category​

Security Groups​

User Groups - Exception Groups​

🛡️🧑‍💼👈🔓🚦Group - No compliant device required for 💻🪟 users

• 🛡️ = Security Group
• 🧑‍💼 = Users
• 👈 = Manual assignment
• 🔓 = Exception (allows something)
• 🚦 = Related to Conditional Access
• 💻🪟 = Windows desktop devices

User Groups - Restriction Groups​

🛡️🧑‍💼👈🔐🚦Group - Not Allowed to Work Remote Users

• 🛡️ = Security Group
• 🧑‍💼 = Users
• 👈 = Manual assignment
• 🔐 = Block/restriction
• 🚦 = Related to Conditional Access

Device Groups - Dynamic Assignment​

🛡️🪟💻⛓️Group - Autopilot Devices

• 🛡️ = Security Group
• 🪟 = Windows
• 💻 = Devices
• ⛓️ = Dynamic membership rule

Device Groups - Manual Assignment with Exception​

🛡️🪟💻👈🔓⚙️Group - Screen Lock Timer Disabled

• 🛡️ = Security Group
• 🪟 = Windows
• 💻 = Devices
• 👈 = Manual assignment
• 🔓 = Exception (disables a security control)
• ⚙️ = Related to configuration policy

Special Groups​

🛡️🧑‍💼⛓️🔓🚦Group - Break the Glass solution

• 🛡️ = Security Group
• 🧑‍💼 = Users
• ⛓️ = Dynamic membership
• 🔓 = Exception (emergency access)
• 🚦 = Related to Conditional Access

Conditional Access Policies​

Grant Access Policies (Green - 🟢)​

🚦🟢👨‍💼CA - MFA for All Users

• 🚦 = Conditional Access
• 🟢 = Grant access (with MFA requirement)
• 👨‍💼 = Users

🚦🟢💻CA - Require Compliant Device 🪟

• 🚦 = Conditional Access
• 🟢 = Grant access (requires compliant device)
• 💻 = Devices
• 🪟 = Windows-specific

Block Access Policies (Red - 🔴)​

🚦🔴📜CA - Block Legacy Other Clients

• 🚦 = Conditional Access
• 🔴 = Block access
• 📜 = Related to legacy protocols/scripts

🚦🔴👨‍💼CA - Block External login for BTG

• 🚦 = Conditional Access
• 🔴 = Block access
• 👨‍💼 = Users (admin/Break the Glass)

Geographic Policies​

🚦🔴🚩CA - Block Non-Trusted Countries All Cloud Apps

• 🚦 = Conditional Access
• 🔴 = Block access
• 🚩 = Geographic/location-based

🚦🟠🚩CA - Require Compliant Device in Less-Trusted Countries

• 🚦 = Conditional Access
• 🟠 = Medium severity (grant with extra conditions)
• 🚩 = Geographic/location-based

Mobile Policies​

🚦🟢📱CA - Require MAM AppProPol or Compliant Device 🍏

• 🚦 = Conditional Access
• 🟢 = Grant access (with MAM or compliance requirement)
• 📱 = Mobile devices
• 🍏 = iOS/macOS specific

Named Locations​

Trusted Locations (Green)​

📍🟢NLOC - Panic Room
📍🟢NLOC - Customer Locations

• 📍 = Named Location
• 🟢 = Trusted/safe

Non-Trusted Locations (Red/Orange)​

🚩🔴NLOC - Non-Trusted Countries
🚩🟠NLOC - Less-Trusted Countries

• 🚩 = Geographic
• 🔴 = High risk / non-trusted
• 🟠 = Medium risk / less-trusted

Configuration Profiles​

Windows Device Profiles​

⚙️🪟💻CP - Screen Lock Timer

• ⚙️ = Configuration
• 🪟 = Windows
• 💻 = Devices

Windows Device Profiles with Exception​

⚙️🪟💻🔓CP - Screen Lock Timer - Disable

• ⚙️ = Configuration
• 🪟 = Windows
• 💻 = Devices
• 🔓 = Exception (disables control)

Windows User Profiles - Block​

⚙️🪟🧑‍💼CP - OneDrive - Block personal OneDrive

• ⚙️ = Configuration
• 🪟 = Windows
• 🧑‍💼 = Users

Windows User Profiles - Allow​

⚙️🪟🧑‍💼🔓CP - OneDrive - Allow personal OneDrive

• ⚙️ = Configuration
• 🪟 = Windows
• 🧑‍💼 = Users
• 🔓 = Exception (allows something)

Autopilot Deployment Profiles​

🚀Autopilot DP - User Driven
🚀Autopilot DP - Self Deploy
🚀Autopilot DP - User Driven with Local Admin

• 🚀 = Autopilot deployment profile

Compliance Policies​

Windows Compliance​

📚🪟💻Compliance - Windows - Bitlocker
📚🪟💻Compliance - Windows - Secure Boot

• 📚 = Compliance policy
• 🪟 = Windows
• 💻 = Devices

Custom Compliance Scripts​

📚🪟💻📜CCScript - Windows - Detect RMM

• 📚 = Compliance
• 🪟 = Windows
• 💻 = Devices
• 📜 = Script

Quick Reference Table​

Common Combinations​

Understanding CA Policy Colors​

Important distinction for Conditional Access policies:

• 🟢 Green = Grant Access (but with conditions)

  • Example: 🚦🟢👨‍💼CA - MFA for All Users
  • Meaning: Users are granted access, but they must perform MFA first
  • Still enforces security, but doesn't block completely

• 🔴 Red = Block Access (explicit deny)

  • Example: 🚦🔴📜CA - Block Legacy Other Clients
  • Meaning: Access is completely blocked, no way around it

• 🟠 Orange = Grant with Extra Caution (medium severity)

  • Example: 🚦🟠🚩CA - Require Compliant Device in Less-Trusted Countries
  • Meaning: Access granted but with stricter requirements

Naming Best Practices​

1. Always start with the type icon (🛡️, 🚦, ⚙️, etc.)
2. Add target icon to show what's affected (🧑‍💼, 💻, 📱)
3. Include modifiers to show behavior:
   • 👈 for manual assignment
   • ⛓️ for dynamic groups
   • 🔓 for exceptions/allows
   • 🔐 for blocks
   • 🟢🔴🟠 for CA policy actions (grant/block/caution)
4. Add platform icons where relevant (🪟, 🍏, 🤖, 🐧)
5. Use the text code (Group, CA, CP, etc.)
6. Write a clear descriptive name in English

Bad Examples ❌​

• Group - Windows Devices (missing icons)
• 🛡️Group - Autopilot (missing device type and assignment type)
• CA - Block (not descriptive enough)

Good Examples ✅​

• 🛡️🪟💻⛓️Group - Autopilot Devices
• 🚦🔴🚩CA - Block Non-Trusted Countries All Cloud Apps
• 🚦🟢👨‍💼CA - MFA for All Users
• ⚙️🪟💻🔓CP - Screen Lock Timer - Disable

Why This Convention?​

Visual Clarity​

The emoji icons allow you to instantly recognize what a resource is and does:

• See 🟢 in CA? It grants access (with conditions)
• See 🔴 in CA? It blocks access completely
• See 🔓? It's an exception
• See 🔐? It blocks something
• See 🚩? It's location-based

Cross-Tenant Consistency​

When managing multiple tenants with SuperVision, consistent naming ensures:

• Easy identification across environments
• Predictable resource discovery
• Simplified documentation
• Better audit trails

Self-Documenting​

The name tells you:

• What it is (Group, CA, CP)
• Who/What it affects (users, devices, platform)
• How it works (manual, dynamic, exception, block, grant)
• Why it exists (descriptive name)

Remember: Good naming is not about being clever. It's about being instantly understandable to anyone who reads it — including your future self at 3 AM during an incident.

Platform-Specific Icons​

When a policy applies to a specific platform, add the platform icon at the end of the emoji sequence:

This document is a living standard. As new patterns emerge, update this reference accordingly.