mirror of
https://github.com/empayre/fleet.git
synced 2024-11-07 01:15:22 +00:00
133 lines
4.6 KiB
Markdown
133 lines
4.6 KiB
Markdown
# Teams
|
||
|
||
`Applies only to Fleet Premium`
|
||
|
||
```
|
||
ℹ️ In Fleet 4.0, Teams were introduced.
|
||
```
|
||
|
||
- [View teams](#view-teams)
|
||
- [Create a team](#create-a-team)
|
||
- [Automatically adding hosts to a team](#automatically-adding-hosts-to-a-team)
|
||
- [Transfer hosts to a team](#transfer-hosts-to-a-team)
|
||
- [Add users to a team](#add-users-to-a-team)
|
||
- [Remove a member from a team](#remove-a-member-from-a-team)
|
||
- [Remove a team](#remove-a-team)
|
||
|
||
In Fleet, you can group hosts together in a team.
|
||
|
||
With hosts segmented into exclusive teams, you can apply specific queries, policies, and agent options to each team.
|
||
|
||
For example, you might create a team for each type of system in your organization. You can name the teams `Workstations`, `Workstations - sandbox`, `Servers`, and `Servers - sandbox`.
|
||
|
||
> A popular pattern is to end a team’s name with “- sandbox”, then you can use this to test new queries and configuration with staging hosts or volunteers acting as canaries.
|
||
|
||
Then you can:
|
||
|
||
- Enroll hosts to one team using team specific enroll secrets
|
||
|
||
- Apply unique agent options to each team
|
||
|
||
- Schedule queries that target one or more teams
|
||
|
||
- Run live queries against one or more teams
|
||
|
||
- Grant users access to one or more
|
||
|
||
## View teams
|
||
|
||
To view teams:
|
||
|
||
In the top navigation select "Settings" and then "Teams."
|
||
|
||
## Create a team
|
||
|
||
To create a team:
|
||
|
||
1. In the top navigation select "Settings" and then, in the sub-navigation, select "Teams."
|
||
|
||
2. To the left of the search box, select "Create team."
|
||
|
||
3. Enter your new team's name and select "Save."
|
||
|
||
## Automatically adding hosts to a team
|
||
|
||
Hosts can only belong to one team in Fleet.
|
||
|
||
You can add hosts to a new team in Fleet by either enrolling the host with a team's enroll secret or by [transferring the host via the Fleet UI](#transfer-hosts-to-a-team) after the host has been enrolled to Fleet.
|
||
|
||
To automatically add hosts to a team in Fleet, check out the ["Adding hosts" documentation](https://fleetdm.com/docs/using-fleet/adding-hosts#automatically-adding-hosts-to-a-team).
|
||
|
||
> If a host was previously enrolled using a global enroll secret, changing the host's osquery enroll
|
||
> secret will not cause the host to be transferred to the desired team. You must delete the
|
||
> `osquery/osquery.db` file on the host, which forces the host to re-enroll
|
||
> using the new team enroll secret. Alternatively, you can transfer the host via the Fleet UI, the
|
||
> fleetctl CLI using `fleetctl hosts transfer`, or the [transfer host API endpoint](https://fleetdm.com/docs/using-fleet/rest-api#transfer-hosts-to-a-team).
|
||
|
||
## Transfer hosts to a team
|
||
|
||
Hosts can be transferred to a different team they've has been enrolled to Fleet.
|
||
|
||
To transfer a host to a team:
|
||
|
||
1. In the top navigation, select "Hosts."
|
||
|
||
2. Using the checkboxes in the Hosts table, select the hosts you'd like to transfer.
|
||
|
||
3. In the Hosts table header select "Transfer to team."
|
||
|
||
4. Choose the team you'd like to transfer the hosts to and confirm the action.
|
||
|
||
## Add users to a team
|
||
|
||
Global users cannot be added to a team.
|
||
|
||
To add users to a team:
|
||
|
||
1. In the top navigation, select "Settings" and then, in the sub-navigation, select "Teams."
|
||
|
||
2. Find your team and select it.
|
||
|
||
3. To the left of the search box, select "Add member."
|
||
|
||
4. Select one or more users by searching for their full name and confirm the action.
|
||
|
||
Users will be given the [Observer role](https://fleetdm.com/docs/using-fleet/permissions#team-member-permissions) when added to the team. The [Edit a member's role](#edit-a-members-role) provides instructions on changing the permission level of users on a team.
|
||
|
||
## Edit a member's role
|
||
|
||
To edit a member's role:
|
||
|
||
1. In the top navigation, select "Settings" and then, in the sub-navigation, select "Teams."
|
||
|
||
2. Find your team and select it.
|
||
|
||
3. In the Members table, select the "Actions" button for the user you'd like to edit and then select "Edit."
|
||
|
||
4. In the Teams section of the form, to the right of the team you'd like to change the users role on, select "Observer" (this may also say "Maintainer") and then select the new role.
|
||
|
||
5. Confirm the action.
|
||
|
||
## Remove a member from a team
|
||
|
||
To remove a member from a team:
|
||
|
||
1. In the top navigation, select "Settings" and then, in the sub-navigation, select "Teams."
|
||
|
||
2. Find your team and select it.
|
||
|
||
3. In the Members table, select the "Actions" button for the user you'd like to edit and then select "Remove."
|
||
|
||
4. Confirm the action.
|
||
|
||
## Delete a team
|
||
|
||
To delete a team:
|
||
|
||
1. In the top navigation, select "Settings" and then, in the sub-navigation, select "Teams."
|
||
|
||
2. Find your team and select it.
|
||
|
||
3. On the right side, select "Delete team" and confirm the action.
|
||
|
||
<meta name="pageOrderInSection" value="1000"> |