Dynamic Groups

Dynamic Groups as the name indicates are dynamic in nature where admin can define a set of rules and when those rules or conditions are met, the devices get added to the groups. This allows IT Admins the flexibility to auto-adjust the profiles/policies based on certain conditions where if the devices meet those conditions the groups are auto-assigned to them. In other words, the set of rules act as device collectors periodically.

Let us understand how you can create rules to move the devices automatically.

Before you Begin

  1. Have a valid Scalefusion Dashboard account.
  2. Device Groups should exist in Scalefusion Dashboard.
  3. Access to Device Groups.
  4. Users should be subscribed to Modern Enterprise Plan to use this feature.
Device Admins and Group Admins won't be able to create automation rule

How to Access

The conditions for Dynamic Groups can be defined through Automation feature under Device Groups. To access:

  1. On Scalefusion Dashboard, navigate to Groups > Device Groups.
  2. Click on View Details on the Group in which you have to define rules for adding devices. The group under which you are defining rules becomes the target group. So those devices belonging to other groups or not belonging to any group get moved to this group, if they meet the conditions defined herein.
  3. Navigate to Automation tab. Click on Create which opens the rule wizard

Create New Rule

The rule wizard opens in which you can define the rules. This involves following steps:

Step 1: Configure the conditions by creating condition groups and define the rules for automation.

Step 2: Choose a schedule to run this rule and configure the email alerts to finish creating the rule.

Step 3: Save the Rule

You can define a single automation rule for one group

Step 1: Configure Conditions

Select Properties

Select Properties from the Property section

The first step to configure conditions is to select properties over which you can define rules. To do so,

  1. Navigate to Configure Conditions
  2. Go to Property section on the left. The properties are divided and listed under different categories. To add a property click on the arrow next to the category that expands it.
    You can use search bar to search for a specific property
  3. Here is a list of categories and properties under each:
Some properties will apply to specific OS types. The OS type for which the property is supported, is marked with its icon next to the property name.

Category

Property

Hardware

Make

Model

Total RAM

Available RAM

Software

Any application

MDM agent version

Build Version

OS Type

OS Version

Firmware

Device management

Enrollment Date

Enrollment Method

Management Mode

Management state

Management type

Compliance

AntiSpyware

Antivirus

Device Encrypted

Fire Vault

Firmware password

JailBroken/Rooted

Password

Network

Bluetooth mac address

Connection status

Connection type

Ethernet mac address carrier

Firewall

IP Address

Wifi SSID

Wifi mac address

Storage

Device storage

External storage

Telemetary

Battery level

Battery temperature

CPU temperature

Screen temperature

Custom Fields

  1. Select one or more property (by clicking on + sign). It gets displayed on the right side section under Condition Group 1.
  2. Define rule(s) for the selected property.
Add Conditions

Add conditions for the property to create a rule

The next step is to add conditions over the selected properties to define the rule. To do so:

  1. Add a property by clicking on + sign next to the property.
  2. You will see it displayed on the right section as Condition Group 1 (if it is the first condition).

The Condition Group names can be renamed by clicking on the edit (pencil) icon next to it.

  1. For the added property, select the operator from the drop-down. Here, the values are based on the property type. For example, for Available RAM the operators are Less or equal, Greater or equal
  2. Add values - To complete defining the rule, add values for the property. This can be an input area or drop-down or date widget depending upon property type.
  3. To add another condition in the same group, select one more property from the properties on left.
  4. The same steps (#1 to #4) need to be repeated to add next rule in the condition group. In between the conditions select an And/OR.
  1. After defining the rules, click Next button on top.
Important Points
  1. There can be multiple condition Groups. To add another condition group:
    1. Add And/OR group condition from the top (right of condition group name) and select an operator.
    2. A new condition group will be displayed in which you can define properties and create rules in similar way.
  2. Each condition group can have multiple conditions separated by And/OR
  3. An AND condition would mean that all the conditions should be satisfied and an OR condition would require any one of them to be true.
  4. Users can delete a Rule by using the delete icon next to rule
  5. Users can delete a Condition Group using the bin icon.
  6. Some properties can be selected multiple times within a condition group. They are:
  • Any Application
  • MDM Agent Version
  • Management State
  • Management Type
  • OS Type
  • OS Version
Example

To explain with an example, in the above screenshot we have defined a rule where:

  • Condition Group 1 has two properties viz Make AND Model
  • Condition Group 2 has one property viz OS type

So it will look for devices of OS type Android having Make Samsung and Model SM-A920F. Where all the three conditions are met, such devices will be added to this Group.

Make sure model etc. are correctly mentioned. These are case sensitive

Step 2: Set Automation rules, Schedule and Alerts

Automation Rules

Move the devices out of this group or to their last known group if they no longer meet the rules

This setting becomes effective if you are editing the already defined rules. If this setting is enabled and in case rules are updated,

  • It removes the devices which do not meet the conditions as per the updated rules, from this group and/or
  • moves the devices to their known group if they meet all the conditions.

If disabled, it would not automatically move the devices which are already added to this group. Instead you will need to manually move them by removing them from this group.

If device is not part of any group but still meets conditions, it will move to the group
Configure Schedule

You can configure the schedule for running this rule and alerts that are triggered post this rule is executed.

Setting

Description

Frequency

Select how frequently the rules should be run and executed, from the following options:

  • Every 6 hours
  • Every 12 hours
  • Daily (selected by default)
  • Selected Days - Select the day(s) from Monday to Sunday to run the rules. The days get displayed when you choose this option.

Timezone

Select the timezone which has to be followed for the rules to be run, from the drop-down

Time

Allows you to select a time when this rule will be run. The drop-down shows time in 15-minute intervals.

If a rule is set to be run at a given time then another rule cannot be scheduled to run at that time. As a result, while creating other rules, the time interval (for which a rule is already set) will appear as greyed out. Mousing over it, will display the group to which that timeframe is allocated.
Configure Email Alerts

You can also configure to whom the Email alerts should be sent once the rule is executed and devices meet the conditions. Following are the options. Select any one:

  • Global Email Settings: Sends emails as per global email settings configured under Workflows
  • Custom Email Settings: Enter email ids (separated by comma) to whom email should be sent.

The email provides a summary of the no. of devices added and removed from the group based on the conditions defined. It also has a csv attached which contains information of all the devices (moved and removed).

Step 3: Save the rule

  1. Once rules are defined, schedules and email alerts are configured, click Create Rule on top.
  1. Test Run: Indicates devices that will be moved once the rule will get executed. The device details are displayed in a dialog box that opens when you click on the button Test Run

  1. On clicking Create Rule, the automation rule gets created and displayed under Automation tab with the logs as shown below:

  1. When the rule will be executed as per schedule, the logs will reflect the same. From Actions, you can also download the automation rule execution report in csv format.
  2. At any point you can edit a rule by clicking on Edit Rule button on top right. Click Delete to remove the automation rule.
  3. On the main device groups page where all groups are listed, note that the group over which automation rules are defined, is marked with an icon and the time at which it is scheduled to execute.

Frequently Asked Questions

  1. Can the automation rules be defined for User Groups also?

Yes. Automation rules can be defined for User groups as well. At execution, it moves users along with their devices which meet the conditions.

  1. From where can we define automation rules for User groups?

The conditions for Dynamic Groups can be defined through Automation feature under User Groups. To access:

  • On Scalefusion Dashboard, navigate to Groups > User Groups.
  • Click on View Details on the Group in which you have to define rules for adding users' devices. The group under which you are defining rules becomes the target group. So those devices belonging to other groups or not belonging to any group get moved to this group, if they meet the conditions defined herein.
  • Navigate to Automation tab. Click on Create


How did we do?


Powered by HelpDocs (opens in a new tab)