Vendor Compare

The Vendor Compare View provides a unified, visual interface for managing and reconciling Policies between the PlainID Authorization Platform and connected vendor systems. It helps administrators and auditors identify discrepancies, view synchronization statuses, and take corrective actions without leaving the Authorization Workspace. Through the Vendor Compare View, users can:

• View Platform Policies in relation to protected Assets and vendor policies.
• Compare Platform and vendor policies side by side from the Policy Diff View.
• Identify discrepancies between Platform Policies and vendor policies.
• Manage synchronization and reconciliation operations.

This view is available only for Policies used in SaaS Authorization Management (Orchestration), including both structured and native Policies.

For more details about the surrounding tabs, refer to Managing Policies.

Vendor Compare View

The Vendor Compare View displays a connected layout of the following elements:

• Platform Policies: The selected Platform Policy, marked as Current. Additional Policies that are connected to the same vendor policies are also displayed.
• Assets: Protected Assets connected to the Policy.
• Vendor policies: Vendor-native policies linked to the protected Assets defined within the Platform Policies.
• Visual Connections: Lines connecting the Policy to the protected Assets to the relevant Platform Policies and vendor policies.

Hover over counters to view Asset counts, or click an Asset to filter and highlight related Policies.

To open the Vendor Compare View:

1. In the Authorization Workspace, select a Policy used in SaaS Authorization Management.
2. At the top of the page, under the Policy name, click Vendor Compare.

The view opens, displaying the Platform Policies, connected Assets, and vendor policies side by side. Below is an example of a Policy with multiple Platform Policies:

Browsing and Filtering

Assets and vendor policies act as filters to gain additional information. Click on either Assets or vendor policies to see additional Platform Policies connected to them.

• When you click on an Asset, you can see if there are additional Platform Policies that are protecting and connecting to a certain Asset
• When you click on a vendor policy, you can view and manage additional Platform Policies connected to it. In addition, you can see additional information like vendor policy information, Platform Policy order, and Policy Diff section.
  Note: When there is one vendor policy, it is set as default.

Policy Indicators

Each Policy card includes indicators showing synchronization and state information.

Platform Policies

Tooltips explain the meaning of each indicator.
When multiple discrepancies exist, a general Policy Discrepancies tooltip is displayed.

Icon	Policy Type
	Incomplete Platform Policy, Pending Deployment to Vendor, Vendor Changes detected, and Deployment Failed Multiple flags may appear together.
	Inactive Platform Policy
	Restrictive Platform Policy Note: Only specific vendors support this indicator.

Managing Policy Metadata

Users can manage connected Policies and related Objects directly within the Vendor Compare View. This includes updating key metadata and adjusting policy order. Each update generates a record for every affected Policy. You can filter these records by operation type or user.

Editing Policy Metadata

For any vendor policy, you can manage additional metadata defined by that vendor. An authorizer-specific popup shows which metadata fields are available and allows direct editing.

To edit a Policy:

1. In the Vendor Compare View, select a vendor policy.
2. A drawer opens at the bottom of the screen. Click Edit.
3. Update the visible metadata fields in the pop‑up.
4. Click Save.

Policy Order

When multiple Platform Policies connect to the same vendor policy, you must define an order between them. This order controls how their translated statements appear in the vendor’s native policy language, affecting the actual enforcement sequence. Ensure you select a vendor policy to display the list of relevant Platform Policies.

To change the Policy order:

• In the Platform Policy list, click the number next to the Policy name and choose the desired order from the dropdown.
  Note: Inactive Policies do not have an order value and always appear last.

Policy Diff View

The Diff View (relevant for vendor policies) provides a direct comparison between a PlainID Platform Policies and its corresponding vendor policy. It presents both versions side by side in the vendor’s native language (SQL, DAX, JSON), helping you quickly identify differences and reconcile changes.

Ensure that your POP is set to Manage Mode in order to make reconciliation changes. For more information about Learn and Manage Mode, refer to Managing POPs.

The Diff View includes:

• A tab where you can compare the Platform Policy and the vendor policy code, displayed side by side with collapsible sections.
• Accept Platform Changes (deploy to the vendor) and Accept Vendor Changes (override the Platform policy). These actions reflect that accepting changes in one system deploys or syncs them to the other.
• Status indicators such as Platform Changes Applied or Pending Deployment to Vendor.
• An Audit tab showing actions taken in the context of the vendor policy, including deploys and overrides.

Use breadcrumbs or the X button to return to the Vendor view.

Opening the Diff View

To open the Diff View:

1. Hover or click a vendor policy.
2. Select Diff on the vendor policy card or in the drawer below.
3. The comparison tab opens, showing Platform and vendor policies side by side.
4. You may review the code or accept Platform or vendor changes as needed.

With side-by-side comparisons and direct reconciliation capabilities, users can utilize the Vendor Compare View to efficiently maintain policy consistency and quickly resolve discrepancies without switching between multiple systems, streamlining Policy governance by providing a centralized interface to visualize, compare, and reconcile Policies.