Forum Discussion
MecroTech
May 21, 2020Copper Contributor
Dynamic Device Groups and Scope Tags
I have an interesting requirement, and wondered if someone could clear something up for me. I am working with a very large client (130,000+ users) who are using scope tags extensively to delegate pe...
Thijs Lecomte
May 23, 2020Bronze Contributor
To answer your first question:
Scope tags are only for RBAC, they don't do anything for policy assignments.
So if you assign a policy a tag, but assign it to all devices. All devices will receive it, the tag will not have an impact on this.
I cannot answer your question concerning the dynamic groups. I would advise you to utilize the Graph Explorer to check out the properties of a devices.
That way, you can check what values 'SystemLabels' have
Scope tags are only for RBAC, they don't do anything for policy assignments.
So if you assign a policy a tag, but assign it to all devices. All devices will receive it, the tag will not have an impact on this.
I cannot answer your question concerning the dynamic groups. I would advise you to utilize the Graph Explorer to check out the properties of a devices.
That way, you can check what values 'SystemLabels' have