Overview of groups in Nebula

A group is a collection of endpoints that share the same policy. In Nebula, you can choose which policy you assign to each group. Organize your endpoints by adding groups and moving endpoints to them. This article provides an overview of how endpoints, groups, and policies work together.

Groups

• Groups must have a policy. When you create or edit a group, you assign a policy for the group to use.
• Groups can be children of other groups. When creating a group, you can create it as a child of an existing group.
• You can change a group's policy. Select a different policy for a group at any time.

Endpoints

• Endpoints must belong to a group. By default, endpoints belong to the Default Group which uses the Default Policy.
  • Endpoints can be directed into a specific group during installation using the GROUP="Group_ID" parameter. To find your Group ID's:
    1. Go to the Download Center > Advanced tools.
    2. Click Specify group assignment.
    3. The list of install commands and Group ID's displays.  For more information, see the following links:
       • Add Windows endpoints in Nebula
       • Add Mac endpoints in Nebula
       • Add Linux endpoints in Nebula
  • If the Active Directory organizational unit structure has been imported using the Discovery and Deployment tool, endpoints are automatically assigned to their Active Directory group. For more information, see Discovery and Deployment Tool Handbook.
• You can move endpoints to other groups. When you move endpoints to a different group, they use that group's policy.

Policies

• You can create a policy without assigning it to a group. When you create a policy, you do not have to assign it to a group. However, if a policy is not assigned to a group, it is not applied to any endpoints.