Policy must be used by at least one group. Apply policy to another group and try again.
Description
You may encounter this error when you're trying to remove the only applicable group from a security policy.
Reason
Security policies have to be applied to groups in order to affect the members of the groups. Without being applied to a group, a policy would have no use. Therefore, attempting to remove the last applicable group from a policy will result in an error.
Solutions
- If you do not need the policy anymore, delete it.
- If you do not need the policy right now, but may need it in the future, deactivate it.
- If you're planning to apply the policy to a different group, do so before removing this group.
- If you have a specific user who needs to be excluded from the policy, either remove them from the group, or exclude only them from the policy.