Configuring Endpoint Automation

Configure Endpoint Automation to create a scalable automation environment by setting up policies, permissions, notifications, and operational settings. This guide explains the key configuration options and best practices that help automate endpoint management, improve compliance, and streamline IT operations.

Prerequisites

To configure Endpoint Automation, you will need the following:

• An appropriate license to permit using Endpoint Automation. This is normally included in a standard license.

• A domain security group representing the Guaranteed State Administrators who will use Endpoint Automation, refer to Roles and Securables.

Endpoint Automation users and roles

Configure users with the following roles to use and administer Endpoint Automation, refer to Platform Roles and Securables

Role	Description
Guaranteed State Administrator	To upload, create, approve and manage policies.
Guaranteed State Approver	To use Endpoint Automation, and approve rule changes.
Guaranteed State Policy Assigner	Assign Policies to Management Groups (does not allow use of Endpoint Automation).
Guaranteed State Report Viewer	View Guaranteed State reports and dashboards for permitted devices. Enables targeted access for users who need visibility into compliance reporting, without the ability to manage rules or policies.
Guaranteed State user	Can only view the administration of policies and rules for Endpoint Automation.

Creating a user

The following steps describe how a Platform user will be created for this group, and a role which grants access to the Endpoint Automation pages and instructions.

You'll need a Platform user with these permissions:

Role	Description
Permissions Administrators	To create the Platform user for the security group.
Guaranteed State Administrators	To upload, create and manage policies (optionally member of the above security group).
Instruction Set	To upload instructions.
Log Viewers	To aid troubleshooting (optional).

Assigning users to the Guaranteed State Administrators role

To optionally create a new user:

1. Navigate to the Settings > Permissions > Users page.

2. Click Add to start the add user process.

3. In the Add user popup subsequently displayed, type the name of an Active Directory account or security group in the Select user field.

4. Select a name from the search results list and click Add.

5. The new user will be added to the Users table.

To assign the new user to the Guaranteed State Administrators role in the:

1. Users table, locate the row for the new user and click on the link in its Name column.

2. User : <user/group> page, click Edit.

3. Edit roles assigned to user popup, scroll down the list and check the checkbox for the Guaranteed State Administrators role.

4. Click Save.

Verifying the user

1. Logon to the Platform using the user account with the Guaranteed State Administrators role.

2. Navigate to the Endpoint Automation > Overview page.