Privilege Management Console Computer Groups

PMC functions on a role-based access control (RBAC) system, in which the role assigned to a user dictates what features this user has access to. A standard user must have sufficient permissions to access the Computer Groups page and options. For more information, see Role Based Access Control.

Computer Groups contain one or more computers. A policy is assigned to a group.

To access the Computer Groups page, on the sidebar menu, select Computer Groups.

Groups contain one or more computers. A policy is assigned to a group.

You can perform the following tasks on the Computer Groups page:

  • Create a group
  • View the group details
  • Edit the group properties
  • Set the default group
  • Set or edit the policy assignment for the group
  • Delete a group

Choose Computer Groups Columns to Display

Choosing the columns to display image

You can choose which columns to display in the grid.

To select which columns to display, at the top-right of the grid, click the Choose Columns to Display icon and select one or more columns to display.

The columns appear from left to right in the grid, in the order that you select them.

The following columns can be displayed:

  • Name: The group name. Click to view the Computer Group Details page.
  • Created: The date and time when the group was created.
  • Active Computers: The active computers in the group (authorized and not deactivated). Click to view the list of computers associated with this group.
  • Policy: The policy associated with this group. Click to access the Policy Editor for this policy.
  • Policy Status: The current status of the policy associated with this group.
  • Description: The group description, if one was provided when the group was created.
  • Users: The list of users that can access this group, by user roles. Click to view the list.
  • All Computers: All computers, regardless of state.

 

Create a Group

A group is a collection of computers to which a policy can be assigned.

  1. On the sidebar menu, click Computer Groups.
  2. Click Create Group.
  3. Enter a Group Name. The Description field is optional.
  4. Click Create Group. Your group is created and appears in the grid list below.

Once the group is created, you can set it as the Default group. If set, the Default group will be selected by default when you add one or more computers to a group. To set the group as the Default group, select the desired group name, and then click Set Default at the top of the Groups grid.

View Group Details

Computer Group Details panel

  1. On the sidebar menu, click Computer Groups.
  2. To the right of the group you want to view, click the vertical ellipsis icon, and then select View Group Details. You can also click the name of the group in the grid to access the panel.
  3. To the right of the group you want to view, click the vertical ellipsis icon, and then select View Group Details. You can also click the name of the group in the grid to access the panel.
  4. The Group Details panel allows you to see additional information for the group and what policy is currently applied to it, if any. You can click Edit Group to change these details.

At the top-right of Group Details page, you can also click the vertical ellipsis menu icon and access other options for this group.

 

For more information, please see Edit User Account Properties.

Edit Group Properties

  1. On the sidebar menu, click Computer Groups.
  2. To the right of the group you want to edit, click the vertical ellipsis icon, and then select Edit Group.
  3. Change the Group Name, and Description as required, and then click Save Group.

Changing the details of a group, including the name, does not affect the computers that are added to the group, or the policy delivered to those computers.

Set a Default Group

  1. On the sidebar menu, click Computer Groups.
  2. To the right of the group you want to set as default, click the vertical ellipsis icon, and then select Set as Default.
  3. A prompt briefly appears and flashes green to indicate that PMC has processed your request and the new default group now has a (default) indicator beside its name to show the new status.

Computers being added to the system do not join the Default group if no group is specified at install time.

For more information, please see Create Groups and Assign Policy.

Assign a Policy to a Group

Assigning a policy to a group allows you to manage computers in that group with the policy.

  1. On the sidebar menu, click Computer Groups.
  2. To the right of the group you want to assign a policy to, click the vertical ellipsis icon, and then select Edit Policy Assignment.
  3. In the Edit Policy Assignment panel, use the dropdown list to select the policy you want to assign, and then select which revision to use.
  4. Click Save Policy Assignment. A prompt briefly appears and flashes green to indicate that PMC has processed your request.

Clear a Policy from a Group

Computers in the group will have the policy removed when you clear a policy from a group.

  1. On the sidebar menu, click Computer Groups.
  2. To the right of the group you want to edit, click the vertical ellipsis icon, and then select Edit Policy Assignment.
  3. To remove the policy from the group, click Clear Policy Assignment.
  4. You are notified how many computers will be affected by the change. To clear the policy assignment, click Clear Policy Assignment.

Delete a Group

You can only delete groups that do not have any computers assigned to them. Groups can be deleted if they have a policy assigned to them.

  1. On the sidebar menu, click Computer Groups.
  2. To the right of the group you want to delete, click the vertical ellipsis icon, and then select Delete.
  3. You are prompted to confirm the decision. To delete the group, click Delete Group.