Editing SaaS app verdicts
When an app is first added to the inventory, it will have a verdict of Not set, indicating it has not been acknowledged. You can then change the verdict to one of the following.
| Verdict | Description | ||
|---|---|---|---|
| Sanctioned | Indicates an app is approved for use. You can include and/or exclude labels to only sanction the app for a group of entities. For information on how this can be used with policies, refer to SaaS apps in the appendix of the FortiDLP Policies Reference Guide. | ||
| Unsanctioned |
Indicates an app is unapproved for use.
|
||
| In review | Indicates an app is being assessed for sanctioning or unsanctioning. |
You can edit an individual app's verdict or edit multiple app verdicts at one time.
How to edit an individual SaaS app's verdict
- In the FortiDLP Console, on the sidebar menu, click
.
- Select the Inventory tab.
- Optionally, filter the apps in the table by entering a query into the search bar at the top of the page. For a list of the available search properties, see SaaS app search properties.
- In the table, at the end of the row of the app, do one of the following:
- To sanction the app:
- Click
> Sanction.
- Do one of the following in the Include section:
- To include all entities, leave the All entities radio button selected.
- To only include specific entities:
- Select the Specific entities (by label) radio button.
- In the list below, select labels assigned to the entities you want to include.
- Do one of the following:
- To include entities that have all of the previously selected labels, select the Require all radio button.
- To include entities that have any of the previously selected labels, select the Require any radio button.
- Do one of the following in the Exclude section:
- To not exclude any entities, leave the No entities radio button selected.
- To exclude specific entities:
- Select the Specific entities (by label) radio button.
- In the list below, select labels assigned to the entities you want to exclude.
- Do one of the following:
- To exclude entities that have all of the previously selected labels, select the Require all radio button.
- To exclude entities that have any of the previously selected labels, select the Require any radio button.

For example, to sanction the app for all entities:
- In the Include section, leave the All entities radio button selected.
- the Exclude section, leave the No entities radio button selected.
To sanction the app for entities that have a "Sales" label but not a "Leavers" label:
- In the Include section:
- Select the Specific entities (by label) radio button.
- In the labels list, select the Sales label.
- In the Exclude section:
- Select the Specific entities (by label) radio button.
- In the labels list, select the Leavers label.

- Click
- To unsanction the app, click
> Unsanction.
- To review the verdict of the app, click
> Review.
- To edit the labels of a sanctioned app, click
> Edit labels, and follow steps 4i-4iii.
- To sanction the app:
- Click Confirm or Save.
How to edit multiple SaaS app verdicts
- In the FortiDLP Console, on the sidebar menu, click
.
- Select the Inventory tab.
- Optionally, filter the apps in the table by entering a query into the search bar at the top of the page. For a list of the available search properties, see SaaS app search properties.
- Above the table, at the right of the page, do one of the following:
- To sanction the apps, click
> Sanction, and follow steps 4i-4iii in How to edit an individual SaaS app's verdict.

This operation affects all apps in the table, updating apps already sanctioned and sanctioning non-sanctioned apps.
- To unsanction the apps, click
> Unsanction.
- To review the verdict of the apps, click
> Review.
- To sanction the apps, click
- Click Confirm or Save.