Membership: Patch Policy
The Membership page assigns machine IDs to one or more patch policies. Patch policies contain all active patches for the purpose of approving or denying patches. An active patch is defined as a patch that has been reported by a patch scan by at least one machine in the VSA. Any machine can be made a member of one or more patch policies.
For example, you can create a patch policy named
You can filter the display of machine IDs on any agent page using the following options in View Definitions.
Assign machines to a patch policy
Click one or more patch policy names to mark them for adding or removing from selected machine IDs.
Click Add to add selected machine IDs to selected patch policies.
Click Remove to remove selected machine IDs from selected patch policies.
Always show all Patch Policies to All Users
If checked, always show all patch policies to all users. This allows all non-master role users to deploy patch policies, even if they did not create the patch policies and don't have machines yet that use them. If blank, only master role users can see all patch policies. If blank, non-master role users can only see patch policies assigned to machines within their scope or to unassigned patch policies they created. This option only displays for master role users.
The list of Machine.Group IDs displayed is based on the Machine ID / Group ID filter and the machine groups the user is authorized to see using System > User Security > Scopes.
Displays a comma separated list of patch policies that each machine ID is a member of.
Topic 218: Send Feedback. Download a PDF of this online book from the first topic in the table of contents. Print this topic.