diff --git a/docs/Using-Fleet/Teams.md b/docs/Using-Fleet/Teams.md index b25350e78f..3551286fa2 100644 --- a/docs/Using-Fleet/Teams.md +++ b/docs/Using-Fleet/Teams.md @@ -56,7 +56,14 @@ Hosts can only belong to one team in Fleet. You can add hosts to a new team in Fleet by either enrolling the host with a team's enroll secret or by [transferring the host via the Fleet UI](#transfer-hosts-to-a-team) after the host has been enrolled to Fleet. -To automatically add hosts to a team in Fleet check out the ["Adding hosts" documentation](./Adding-hosts.md#automatically-adding-hosts-to-a-team). +To automatically add hosts to a team in Fleet, check out the ["Adding hosts" +documentation](./Adding-hosts.md#automatically-adding-hosts-to-a-team). + +> If a host was previously enrolled using a global enroll secret, changing the host's osquery enroll +> secret will not cause the host to be transferred to the desired team. You must delete the +> `osquery/osquery.db` file on the host, which forces the host to re-enroll +> using the new team enroll secret. Alternatively, you can transfer the host via the Fleet UI, the +> fleetctl CLI using `fleetctl hosts transfer`, or the [transfer host API endpoint](https://fleetdm.com/docs/using-fleet/rest-api#transfer-hosts-to-a-team). ## Transfer hosts to a team