# Zia Create Cloud App Control Rule

> Create ZIA Cloud App Control rules that enforce granular, action-level decisions on cloud applications (Dropbox, OneDrive, Google Drive, ChatGPT, GitHub, YouTube, Slack, etc.). Cloud App Control is action-level, not block/allow at the connection layer — actions are things like ALLOWFILESHAREUPLOAD, BLOCKWEBMAILATTACH, ISOLATEAIMLWEBUSE, DENYAIMLCHAT, BLOCKSOCIALNETWORKINGPOST. Each rule belongs to a category (ruletype) such as FILESHARE, WEBMAIL, AIML, SYSTEMANDDEVELOPMENT, SOCIALNETWORKING, STREAMINGMEDIA, etc. Action vocabulary is surfaced at the category level, but the API validates per (ruletype, application, action) tuple — combining multiple apps in a single rule frequently fails with INVALIDINPUTARGUMENT, so this skill creates one rule per cloud application when the admin names multiple apps. Use when an admin asks to 'allow Dropbox uploads', 'block ChatGPT', 'restrict GitHub edits', 'isolate AI tools', 'block YouTube uploads', 'allow only viewing on OneDrive', 'block file uploads to personal cloud storage (Dropbox, Google Drive, OneDrive)', or 'create a Cloud App Control rule for X'. Chains to zia-look-up-cloud-app-name and zia-manage-time-interval when needed.

## Facts
- Page: https://tashan.sh/capability/skill-zscaler-zia-create-cloud-app-control-rule
- tashan id: skill:zscaler/zia-create-cloud-app-control-rule
- Source: https://github.com/zscaler/zscaler-mcp-server
- Type: skill
- Category: other
- tashan score: not scored (catalogued only — too little public evidence)
- Adoption: 9.0
- Upkeep: 97.0
- Freshness: 94.0
- Evidence coverage: 84% of the inputs this score can use
- Health: active
- Instruction depth: not yet graded
- License: MIT
- Official: no

## Install

```sh
cp -r zia-create-cloud-app-control-rule ~/.claude/skills/
```

## Security audit
Not scanned. We audit npm-published capabilities; this one has no npm package we can resolve, or has not reached the queue. This is not a clean bill of health.

---
Measured 2026-08-14 by tashan (https://tashan.sh) from public evidence. Scorer s5.