Create a policy

A policy defines which actions members can execute for a vault. The policy is not a convention: the Roles Modifier enforces it onchain, on every call.

Steps

1. Select Policies in the sidebar.

2. Click Create policy.

3. Configure the base settings:

   • Name — a descriptive label, for example “Treasury Ops” or “Swapper”.
   • Vaults — the vaults that the policy applies to. A policy can span several vaults.
   • Members — the addresses that can execute actions under this policy.

4. Open the Actions section and click Add action.

5. Select an action type:

   Action type	What it allows
   Swap	Token swaps through CoW Protocol. You configure which tokens the members can sell and buy, with optional limits.
   Transfer	Token transfers to listed recipients. You scope by token, amount, or destination.
   DeFi	Prepared permissions for common protocols, for example Aave, Spark, or Lido. You select the protocol and the allowed operations.
   Custom	Permissions for any dapp. You record the actions with Zodiac Pilot and turn the recording into permissions.

   Add more actions to the same policy to build the complete permission set.

6. Click Apply Changes. The app submits a transaction that writes your permissions to the Roles Modifier. Sign it with the Safe.

After the transaction executes, members can perform the allowed actions without more signer approvals. Everything outside the policy reverts onchain.

Next steps

• Execute within the policy: Execute a transaction
• Copy a proven setup: Recipes
• Set spending limits with refill schedules: Allowances