Groups & Departments

Groups let you organize agents by department, location, or role — for example, “Finance,” “Production Servers,” or “Lab Room 3.” A device can belong to a group and still be reassigned to another one at any time from the Agents page.

Viewing groups

The Groups page lists every group with a color swatch and its current member count. Selecting a group shows its members (hostname, OS, and online status) alongside the agents not yet in it.

Creating and editing groups

Creating, editing, and deleting groups requires the Superadmin role. To create a group, provide:

• Name (required)
• Description (optional)
• Color — chosen from a fixed palette, used as the group’s badge color throughout the dashboard

Deleting a group does not delete its member agents — they’re simply no longer associated with that group.

Managing membership

From a group’s detail view, superadmins can:

• Add any agent not already a member from the “Add agents” list
• Remove a member from the group

For the common case of moving a single device to a different department, it’s often faster to do it from the device’s own Agents detail panel rather than from the Groups page.

Automatic assignment rules

Superadmins can set rules at the bottom of the Groups page so new devices land in the right department without a manual step. A rule matches on one of:

• Hostname — with wildcards: * matches any text and ? matches one character (for example LAB-*). Case does not matter.
• Operating system — for example windows or linux.
• Environment — the environment recorded from the enrollment token (for example prod*). A device with no environment never matches.
• IP range — a CIDR range such as 10.20.0.0/16.

When a device enrolls for the first time and its token has no department, the first matching rule, from the top of the list, decides its department. Rules are checked in priority order, then oldest first. A rule only fills an empty slot: a department chosen on the enrollment token, or set by hand, is never overridden, and re-installing the agent never moves a device that already has a department.

Apply to devices without a department runs the rules over devices that were already enrolled and have no department. It does not touch devices that already have one. Deleting a rule does not move devices it already placed. Rule changes are recorded in the Audit Log.