Network policy commands: Cannot drop active network policies¶
This behavior change is in the 2023_07 bundle.
For the current status of the bundle, refer to Bundle History.
Trying to drop a network policy that is assigned to an account, security integration, or user behaves as follows:
- Before the change
You can execute the DROP NETWORK POLICY and CREATE OR REPLACE NETWORK POLICY commands without considering whether the network policy is still assigned to an account, security integration, or user.
- After the change
You must detach a network policy from all accounts, security integrations, and users before you can delete it using the DROP NETWORK POLICY or CREATE OR REPLACE NETWORK POLICY command.
The CREATE OR REPLACE NETWORK POLICY command drops an existing network policy before creating a new one with the same name.