Dynamic population with compliance rules


The Compliance Rule subnode (Device Groups > Your Group > Dynamic Population > Compliance Rule) provides access to the compliance rule populating the currently selected device group. Compliance rules can define the group membership according to different criteria, that is, a compliance rule populates a group with all devices which are compliant with the rule, all devices which are not compliant, or those devices which could not be evaluated. This topic includes: 

  • Name: Displays the name of the compliance rule.
  • Compliance: Displays the criteria which defines the group membership, that is, if the group members are compliant, non-compliant or those which could not be evaluated.
  • Last Evaluation: Displays the date and time of the last compliance evaluation of the object.
  • Status: Displays the evaluation status of the compliance rule, possible values are: InactiveEvaluatedEvaluation FailedNot EvaluatedEvaluating, and Evaluation Scheduled

To assign compliance rule to a device group

  1. Select Device Groups in the left window pane.
  2. Select the desired device group in the left window pane.
  3. Select the subnode Dynamic Population in the left window pane.
  4. Select the subnode Compliance Rule in the left window pane.
  5. Select Edit > Assign Compliance Rule link.png.
    The Assign a Compliance Rule dialog box appears.
  6. Select the desired compliance rule from the list in the dialog box.
  7. Click OK to confirm the assignment.
    The Desired Compliance dialog box appears. In this dialog box you define the type of compliance for the member devices. The options are: Compliant , Not Compliant and Evaluation Impossible.
  8. Select the desired option by clicking the respective radio button.
  9. Click OK to confirm.

The compliance rule was assigned to the selected device group. The icon of the device group will now change to its compliance rule populated one and the members of the group will now be managed by the results of the rule.

To unassign compliance rule from a device group

To unassign a compliance rule from a device group, proceed as follows:

  1. Select Device Groups in the left window pane.
  2. Select the desired device group in the left window pane.
  3. Select the subnode Dynamic Population in the left window pane.
  4. Select the subnode Compliance Rule in the left window pane.
  5. Select the compliance rule you want to unassign from the device group in the right window pane.
  6. Select Edit > Unassign Compliance Rule unlink.png.

The compliance rule will be unassigned from the selected device group.

To reevaluate members of a device group

You can launch a manual reevaluation of a device or of all members of a device group assigned to a compliance rule at any time.

  1. Select Device Groups in the left window pane.
  2. Select the desired device group in the left window pane.
  3. Select the subnode Dynamic Population in the left window pane.
  4. Select the subnode Compliance Rule in the left window pane.
  5. Select the compliance rule in the right window pane.
  6. Select Edit > Evaluate evaluate.png.

The members of the selected device group will immediately be updated.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*