Network policy commands: Cannot drop active network policies¶

Trying to drop a network policy that is assigned to an account, security integration, or user behaves as follows:

Before the change:

You can execute the DROP NETWORK POLICY and CREATE OR REPLACE NETWORK POLICY commands without considering whether the network policy is still assigned to an account, security integration, or user.

After the change:

You must detach a network policy from all accounts, security integrations, and users before you can delete it using the DROP NETWORK POLICY or CREATE OR REPLACE NETWORK POLICY command.

The CREATE OR REPLACE NETWORK POLICY command drops an existing network policy before creating a new one with the same name.

Ref: 1337