Policy Management > Organizations / Machine Groups
The Organizations / Machine Groups page assigns policies to organizations and machine groups. A System cabinet provides built-in policies that reflect best-practice solutions for common IT management tasks. Policies can be configured for an organization automatically using the Systems Management Configurationsetup wizard and these System cabinet policies.
Actions
Select & Assign - Selects and assigns a policy to an organization or machine group. This button only enables if a view is assigned the selected policy, and both the policy and at least one organization or machine group is selected.
Select All - Selects all organizations.
Unselect All - Unselects all organizations.
Collapse All - Fully collapses the organization/machine group tree.
Expand All - Fully expands the organization/machine group tree.
Remind me that items will automatically synchronize when moved - If checked, displays a popup warning message that changes will be applied immediately. Applies to each VSA user individually.
(Folder Tree Filters) - Applies to Machine Groups cabinet and Policies cabinet and System cabinet - Enter text in the filter edit box, then click the funnel icon to apply filtering to the folder tree. Filtering is case-insensitive. Match occurs if filter text is found anywhere in the folder tree.
Assigning Policies
Drag and drop a policy from the Policies folder tree in the right hand pane to the Machine Groups tree in the middle pane.
Policies Without Views
Assigning a policy to a view on the Policies page is required to assign a policy using the Organizations/Machine Groups page. This prevents the unintentional assignment of a policy to all machines in the VSA. A policy without a specified view displays as a red scroll icon in the policy tree of the Organizations/Machine Groups page, indicating that it cannot be assigned. A folder with a red exclamation mark icon displays in the policy tree if it contains at least one policy without a specified view. When assigning an entire folder of policies to an organization or machine group, policies without a specified view are ignored.
Policies Assignment Rules
Multiple policies can be assigned to any organization or machine group or machine.
A machine with multiple policies assigned to it has conflicting policies when both specify the same policy type.
Multiple policies are not in conflict if different policy types are specified.
Policy types that combine with each other include:
Event log alerts, distribute files, monitor sets, and agent procedures.
Policies assigned to a child node in an organization hierarchy have precedence over policies assigned to a parent node in the same organization hierarchy.
Unless a child node policy conflicts with it, policies assigned to a node apply to all descendant nodes.
When multiple policies are assigned to the same organization or machine group, the assigned policies have precedence in the order listed.
Policies can be assigned by machine using the Machines page.
Policies assigned by machine have precedence over all policies assigned to that machine by organization/machine group.
Policies assigned by machine have precedence in the order listed.
All policy assignments can be overridden by changing agent settings manually throughout the VSA.
Manual changes have precedence over all policies assignments.
A policy can be associated with a view definition in the Policies page.
When machine is assigned to a policy by organization or by machine group an associated view filters the machines associated with a policy. If a machine is not a member of the view definition, then the policy will not be propagated to that machine.
When a machine is assigned to a policy by machine, then the view associated with a policy is ignored and the policy will be propagated to that machine.
Associating a policy with a view does not, by itself, assign a policy to any machine.
The order of precedence for views depends on the policies they are associated with.