2.7 KiB
Teams
Teams are available in Fleet Premium.
In Fleet, you can organize hosts into 'teams' to apply queries, policies, scripts, and other configurations tailored to their specific risk and compliance requirements.
To manage teams:
- Select your avatar in the top navigation.
- Choose Settings > Teams.
Note:
- A host can only belong to one team.
- You can give users access to only some teams.
Best practice
Fleet's best practice teams:
💻 Workstations: End users' production work computers (macOS, Windows, and Linux)☁️ IT servers: Production servers used to host internal tools like certificate authorities (CAs).📱🔐 Personal mobile devices: iPhones, iPads, and Android devices owned by employees that can access company data.📱🏢 Employee-issued mobile devices: iPhones, iPads, and Android devices issued to employees that can access company data.🖥️ Dedicated devices: iPads or iPhones for dedicated or shared use. If some of your devices have different use cases, break this team into separate teams (ex.🖥️ Kiosk devicesand🎥 Zoom room devices).
Add hosts to a team
You can add hosts to a team in Fleet by either enrolling the host with a team's enroll secret or by transferring the host via Fleet UI after the host has been enrolled to Fleet.
Enroll hosts with a team's enroll secret
- In Fleet UI, navigate to Settings > Teams and select the team you wish to add a host to.
- Select Add hosts and follow the on-screen instructions.
Quick tip: When viewing a specific team (from the Teams dropdown), Selecting Add hosts will display instructions to add new hosts directly to that team.
Transfer a host
- In Fleet UI, navigate to the Hosts page and select the host you wish to transfer.
- From the host details page, press Actions > Transfer and follow the on-screen instructions.
Quick tip: You can hit the checkbox next to the host you wish to transfer to access its quick menu. From there, select Transfer and follow the on-screen instructions.
Advanced
You can automatically enroll hosts to a specific team in Fleet by installing a fleetd agent with a team enroll secret.
Changing the host's enroll secret after enrollment will not cause the host to be transferred to a different team.