With Addigy Flex Policies, you can set up device filters that describe a set of devices in your organization, apply that filter to an existing policy, and Addigy will automate assigning that policy to the devices as they check in.

Part of this feature is that devices can be assigned to multiple policies at once, so you can use automated assignments without modifying your existing policy structures. If a new device gets added to your organization and fits the filter, it will automatically be added to the Policy.

Let's look at the steps required to add this feature to a policy:

• Navigate to the Policy you would like Addigy to auto-assign devices to
• Create a Filter targeting the devices you want to assign
• Add a catalog item/software to the Policy
• Disabling Auto Assignments
• Scoping to another policy
• Deploy

Select a Policy

Start by navigating to an existing policy or creating a new one. In the summary page for that Policy, press the "Auto Assignments" button.

 

 

Create a filter set to target the devices for the policy

Create each filter using any standard or custom device fact available. Example: ‘Device Model Name’ equals ‘iMac’

Note: All additional filters within the same block are to be treated as AND logical operators. Meaning the device must meet Filter #1 AND Filter #2 AND Filter #3, and so on. You can also extend this logic with OR logical operators after each group.

AND logical operator example

OR logical operator example

Use the "contains" comparison to match a partial string of text.

Disabling an Auto-Assignment

You can enable or disable any auto-assignment by toggling the button on the top. Any devices that were assigned to the policy previously will remain assigned.

 

Scoping to other policies

You may only want to target devices that are assigned to another policy (those other policies can represent an organization or department). You can do this by selecting the "Policy IDs" fact, and clicking the Edit button to select any number of policies.

Now, your flex policy will target all devices in the selected policies. Any assets you add to the flex policy will now also be deployed to all the devices in the targeted policies.

Note: Selecting a parent policy automatically includes all of its child policies. 

You can exclude any of the child policies by adding a second filter with the "does not contain" operator.

 

Deploy assets from your flex policy

With the auto-assignment in place, any management assets you add to the policy will be deployed to the devices described by the filter. These could be items from the catalog or software updates required by those devices.

Each time a device checks in, Addigy will check its current state against any auto-assignments and assign the appropriate policies and deploy all management items configured in the Policy. Enjoy!

Additional Notes

• Devices should no longer be said to "move" from policy to policy. Because devices can now have multiple policies, they should be described as "assigned" or "unassigned" to devices.
• Devices will receive the MDM enrollment profile from their initial Policy.
• During the beta period, you can disable the feature and return all your devices into their original policy structure. Because of this fallback, the original policy the device was enrolled into cannot be changed using the new UI. Once the beta period is over, all policies will be available to assign or unassign, including the original enrollment policy.