Organizations / Machine Groups

NAVIGATION  Policy Management > Organizations / Machine Groups

The Organizations / Machine Groups page assigns policies to organizations and machine groups. A System cabinet provides built-in policies that reflect best-practice solutions for common IT management tasks. Policies can be configured for an organization automatically using the Systems Management Configurationsetup wizard and these System cabinet policies.

Actions

• Select & Assign - Selects and assigns a policy to an organization or machine group. This button only enables if a view is assigned the selected policy, and both the policy and at least one organization or machine group is selected.
• Select All - Selects all organizations.
• Unselect All - Unselects all organizations.
• Collapse All - Fully collapses the organization/machine group tree.
• Expand All - Fully expands the organization/machine group tree.
• Remind me that items will automatically synchronize when moved - If checked, displays a popup warning message that changes will be applied immediately. Applies to each VSA user individually.
• (Folder Tree Filters) - Applies to Machine Groups cabinet and Policies cabinet and System cabinet - Enter text in the filter edit box, then click the funnel icon to apply filtering to the folder tree. Filtering is case-insensitive. Match occurs if filter text is found anywhere in the folder tree.

Assigning Policies

Drag and drop a policy from the Policies folder tree in the right hand pane to the Machine Groups tree in the middle pane.

Policies Without Views

Assigning a policy to a view on the Policies page is required to assign a policy using the Organizations/Machine Groups page. This prevents the unintentional assignment of a policy to all machines in the VSA. A policy without a specified view displays as a red scroll icon in the policy tree of the Organizations/Machine Groups page, indicating that it cannot be assigned. A folder with a red exclamation mark icon displays in the policy tree if it contains at least one policy without a specified view. When assigning an entire folder of policies to an organization or machine group, policies without a specified view are ignored.

Policies Assignment Rules

• Multiple policies can be assigned to any organization or machine group or machine.
• A machine with multiple policies assigned to it has conflicting policies when both specify the same policy type.
  • Multiple policies are not in conflict if different policy types are specified.
  • Policy types that combine with each other include:
    • Event log alerts, distribute files, monitor sets, and agent procedures.
• Policies are assigned by organization/machine group using the Organizations/Machine Groups page.
  • Policies assigned to a child node in an organization hierarchy have precedence over policies assigned to a parent node in the same organization hierarchy.
  • Unless a child node policy conflicts with it, policies assigned to a node apply to all descendant nodes.
  • When multiple policies are assigned to the same organization or machine group, the assigned policies have precedence in the order listed.
• Policies can be assigned by machine using the Machines page.
  • Policies assigned by machine have precedence over all policies assigned to that machine by organization/machine group.
  • Policies assigned by machine have precedence in the order listed.
• All policy assignments can be overridden by changing agent settings manually throughout the VSA.
  • Manual changes have precedence over all policies assignments.
• A policy can be associated with a view definition in the Policies page.
  • When machine is assigned to a policy by organization or by machine group an associated view filters the machines associated with a policy. If a machine is not a member of the view definition, then the policy will not be propagated to that machine.
  • When a machine is assigned to a policy by machine, then the view associated with a policy is ignored and the policy will be propagated to that machine.
  • Associating a policy with a view does not, by itself, assign a policy to any machine.
• The order of precedence for views depends on the policies they are associated with.