Attribute Rules for Dynamic Device Groups<\/h3>\n

\n \n\n \n \n \n \n \n \n \n \n \n \n

\n Attribute <\/th>\n	\n Operator <\/th>\n	\n Value <\/th>\n <\/tr>\n
\n Operating System <\/td>\n	\n \n \n equals<\/li>\n not equals*<\/li>\n<\/ul>\n *If not equals is selected, the next two rows don't apply<\/p>\n<\/div> <\/td>\n	\n \n MacOS<\/li>\n Windows<\/li>\n Linux<\/li>\n iOS\/iPadOS<\/li>\n Android<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
\n \u21b3 Version (Windows only)<\/p><\/div> <\/td>\n	\n \n \n equals<\/li>\n not equals<\/li>\n starts with<\/li>\n ends with<\/li>\n contains<\/li>\n does not contain<\/li>\n<\/ul>\n<\/div> <\/td>\n	\n \n Free text field with no validation. Input is case sensitive<\/strong>. See the version field in the API<\/a>.<\/p>\n For example:<\/p>\n \n 10 Pro<\/li>\n 11 Pro<\/li>\n 10 Enterprise<\/li>\n 10 Home<\/li>\n 11 Home<\/li>\n 8.1 Pro<\/li>\n Server 2019 Datacenter<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
\n \u21b3 Distribution (Linux only)<\/p><\/div> <\/td>\n	\n \n equals<\/li>\n not equals<\/li>\n<\/ul><\/div> <\/td>\n	\n \n \n Amazon<\/li>\n CentOS<\/li>\n Debian<\/li>\n Fedora<\/li>\n LinuxMint<\/li>\n Pop!_OS<\/li>\n RedHat<\/li>\n Rocky<\/li>\n Ubuntu<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
\n \u21b3 OS Major Version<\/p><\/div> <\/td>\n	\n \n equals<\/li>\n not equals<\/li>\n greater than<\/li>\n greater than\/equal to<\/li>\n less than<\/li>\n less than\/equal to<\/li>\n<\/ul><\/div> <\/td>\n	\n \n \n 12, 13, 14 (macOS)<\/li>\n Free text with number validation (Linux)<\/li>\n 13, 14, 15, 16, 17, 18 (iOS, iPadOS)<\/li>\n 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 (Android)<\/li>\n<\/ul>\n Note<\/strong>: Windows is not included in this list since Major Version = 10 for all Windows Versions<\/p>\n<\/div> <\/td>\n <\/tr>\n
\n Arch Family <\/td>\n	\n \n equals<\/li>\n not equals<\/li>\n<\/ul><\/div> <\/td>\n	\n \n amd64 (64-bit x86)<\/li>\n 386 (32-bit x86)<\/li>\n arm 64 (64-bit ARM)<\/li>\n arm (32-bit ARM)<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
\n Vendor <\/td>\n	\n \n \n equals<\/li>\n not equals<\/li>\n starts with<\/li>\n ends with<\/li>\n contains<\/li>\n does not contain<\/li>\n<\/ul>\n<\/div> <\/td>\n	\n Free text field <\/td>\n <\/tr>\n
\n Creation Date <\/td>\n	\n \n \n greater than<\/li>\n greater than\/equal to<\/li>\n less than<\/li>\n less than\/equal to<\/li>\n<\/ul>\n<\/div> <\/td>\n	\n \n <date picker><\/p>\n Note<\/strong>: Date selected are in Coordinated Universal Time (UTC) and not<\/strong> your local time zone.<\/p>\n<\/div> <\/td>\n <\/tr>\n
\n Hostname <\/td>\n	\n \n \n equals<\/li>\n not equals<\/li>\n starts with<\/li>\n ends with<\/li>\n contains<\/li>\n does not contain<\/li>\n<\/ul>\n<\/div> <\/td>\n	\n Free text field <\/td>\n <\/tr>\n
\n Public IP Address <\/td>\n	\n \n \n equals<\/li>\n not equals<\/li>\n starts with<\/li>\n ends with<\/li>\n contains<\/li>\n does not contain<\/li>\n<\/ul>\n<\/div> <\/td>\n	\n Free text field <\/td>\n <\/tr>\n <\/table>\n<\/div><\/div>\n\n\n\n To create an attribute-based rule<\/strong>:<\/p>\n\n\n\n \n Select the Attribute<\/strong> from the drop-down. <\/li>\n\n\n\n Select an Operator<\/strong>.<\/li>\n\n\n\n Select a Value<\/strong>.<\/li>\n\n\n\n (Optional) Click +<\/strong> to add a second attribute value<\/strong>. <\/li>\n<\/ol>\n\n\n\n <\/p><\/div> Tip:<\/strong> \n Additional attribute values are applied with an “or” operator. In the following example, new mobile devices will be added automatically to this group.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n <\/figure>\n\n\n\n \n (Optional) Click Add Condition<\/strong> to add multiple conditions to a rule for the dynamic group. <\/li>\n<\/ol>\n\n\n\n <\/p><\/div> Tip:<\/strong> \n Additional conditions are applied with an “and” operator. In the following example, all existing and new macOS 14 Sonoma devices will be added to this group.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n <\/figure>\n\n\n\n \n Continue to the next section to add exemptions to the rule, or click save<\/strong>.<\/li>\n<\/ol>\n\n\n\n <\/p><\/div> Tip:<\/strong> \n Click the trash can icon to remove an added attribute or an added condition from the rule.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Using Exemptions<\/h3>\n\n\n\n Under the Exemptions<\/strong> section, you can specify devices to include in or exclude from the dynamic group, regardless of the rules of the group. Devices added here will automatically be bound or unbound on the Devices<\/strong> tab. <\/p>\n\n\n\n To add a device to the inclusion or exclusion list<\/strong>:<\/p>\n\n\n\n <\/p><\/div> Tip:<\/strong> \n This action can be accomplished from the device group’s devices list. If a device is removed or added from the devices list, the corresponding action will automatically take place on the exemptions list. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n \n In the Devices to Include<\/strong> or Devices to Exclude<\/strong> section, click in the Search bar.<\/li>\n\n\n\n Search for the device you would like to add to the list and then select the checkbox next to the device in the dropdown.\n \n Devices appear in alphabetical order by Device Name<\/strong> (assigned under the device’s Details<\/strong> tab).<\/li>\n\n\n\n Selected devices appear as pills below the Search bar.<\/li>\n<\/ul>\n<\/li>\n\n\n\n When finished adding devices, click save<\/strong>.<\/li>\n<\/ol>\n\n\n\n <\/p><\/div> Note:<\/strong> \n \n Exemptions configured to include a device in or exclude a device from a device group are NOT<\/strong> reflected in the Preview Group Membership<\/strong> modal.<\/li>\n\n\n\n Configure rules strategically to result in the targeted group membership, using exemptions sparingly. If you find you can’t reach the desired group membership without a large number of exemptions, reach out to JumpCloud so that we can understand what additional rules or conditions may be needed.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n To remove a device from the inclusion or exclusion list<\/strong>:<\/p>\n\n\n\n \n In the Devices to Include<\/strong> or Devices to Exclude<\/strong> section, click in the Search bar.<\/li>\n\n\n\n Search for the device(s) you would like to remove from the list and then clear the checkbox next to the device(s) in the dropdown.\n \n Alternately, click x<\/strong> on the pill next to the name of the device you want to remove.<\/li>\n<\/ul>\n<\/li>\n\n\n\n When finished removing users, click save<\/strong>.<\/li>\n<\/ol>\n\n\n\n To remove a device from the Devices list<\/strong>:<\/p>\n\n\n\n \n In the device group aside, select the Devices<\/strong> tab. A list of the devices that are included in the device group is displayed.<\/li>\n\n\n\n Clear the checkbox next to any devices you want to exclude from the list. <\/li>\n\n\n\n Click Save<\/strong>.<\/li>\n\n\n\n A Membership Conflict<\/strong> message appears. Manual changes made to the device group by deselecting devices under the Devices tab will create an automatic exemption. Click Continue<\/strong> to accept. <\/li>\n<\/ol>\n\n\n\n <\/p><\/div> Tip:<\/strong> \n Devices that have been added or removed from a dynamic group using an Exemption display a Manual Include<\/strong> or Manual Exclude<\/strong> status in the Exemption<\/strong> column on the Devices list.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Previewing Configuration<\/h3>\n\n\n\n <\/p><\/div> Important:<\/strong> \n There is no validation in the rule builder, meaning that you could potentially configure rules that aren’t logical or that contradict each other. Leverage the Preview<\/strong> before saving the group configuration to confirm that your rules make sense. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n <\/p><\/div> Note:<\/strong> \n Exemptions configured to include a device in or exclude a device from a device group are NOT<\/strong> reflected in the Preview Group Membership<\/strong> modal.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n When you have finished configuring attribute-based rules and exemptions for the dynamic device group, click Preview<\/strong> before saving the group configuration to see a list of membership updates that will take place upon save. When you have finished reviewing, click Close<\/strong>, then click save<\/strong> to save the group.<\/p>\n\n\n\n <\/figure>\n\n\n\n Reviewing Membership Updates<\/h2>\n\n\n\n When configuring a dynamic device group, you have the option to add a review requirement before membership changes are made. <\/p>\n\n\n\n <\/figure>\n\n\n\n Considerations<\/strong>:<\/p>\n\n\n\n \n All administrators, excluding those with Read Only or Help Desk roles, will be able to review and accept or reject membership updates. <\/li>\n\n\n\n If the option to send email notifications is selected, the emails will be sent to all applicable administrators in the organization. See Admin Portal Roles<\/a> for more information.<\/li>\n<\/ul>\n\n\n\n Optional settings for membership updates include:<\/p>\n\n\n\n \n Require administrator review of updates<\/strong>: Select this option to require that membership changes be reviewed and manually applied by the administrator. <\/li>\n\n\n\n Receive emails when administrator review is needed for updates<\/strong>: This option becomes available when Require administrator review of updates<\/strong> is selected, but it is not selected by default. Select this option to send a nightly email notification to all administrators in the organization with a list of the group membership suggestions that need to be reviewed.\n \n Click Review Suggestions<\/strong> to open the Review Device Group Membership modal in the Admin Portal. <\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n When Require administrator review of updates<\/strong> is selected and membership updates are ready to review, you will see Pending changes found | Review<\/strong> in the Device Membership Controls<\/strong> column of the Device Groups<\/strong> list.<\/p>\n\n\n\n <\/figure>\n\n\n\n \n Click Review<\/strong> to see the device group’s membership updates. \n \n Note<\/strong>: When making configuration changes directly within a group, you must save the changes before you are able to review.<\/li>\n<\/ul>\n<\/li>\n\n\n\n Use the checkboxes on the select individual updates you would like to apply. <\/li>\n\n\n\n Click Accept<\/strong> and Save <\/strong>when finished to update the group. <\/li>\n<\/ul>\n\n\n\n Disabling Dynamic Device Groups<\/h2>\n\n\n\n When you convert a dynamic device group, the group becomes a manually controlled static group moving forward, with device membership preserved as-is in that moment. <\/p>\n\n\n\n <\/p><\/div> Note:<\/strong> \n The attribute-based rules that were configured for the previously dynamic group will persist for the group, making it easy to revert back to a dynamic group.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n To turn off dynamic group membership<\/strong>:<\/p>\n\n\n\n \n Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n Go to DEVICE MANAGEMENT > Device Groups<\/strong>.<\/li>\n\n\n\n Select the group for which you would like to disable group membership automation.<\/li>\n\n\n\n Under Membership Controls<\/strong>, select Static<\/strong>. <\/li>\n<\/ol>\n\n\n\n Building on Dynamic Device Groups<\/h2>\n\n\n\n Dynamic device groups are the foundation for IT Admins to take scalable actions that increase efficiency and security across their organizations. For example, you can use dynamic device groups automation to streamline the process of binding an admin account to a device when a device is onboarded by creating and binding a user group to the device group. Any device meeting the specified conditions of the dynamic device group will automatically inherit the admin account, streamlining the onboarding process.<\/p>\n\n\n\n \n Next step: Assign a Policy Group<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":" Dynamic Device Groups give Admins the ability to streamline membership of device groups using rules-based automation. The configurable rules are […]<\/p>\n","protected":false},"author":206,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2928,2852],"support_tag":[],"coauthors":[2842],"acf":[],"yoast_head":"\n