Say we have enabled the pega security policies, it is global to all applications on the same platform and applied to all profiles using basic authentication.

However, is there an option to exclude certain operators from being impacted by these policies.

I believe the exclusion list for "Operator disablement policy" is specific to that policy and the operators listed here will still be forced to change their passwords and strength of passwords as normal?