search

fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
2.93k stars 409 forks source link

Ability to exempt a group of hosts from configuration items #20694

Open Patagonia121 opened 1 month ago

Patagonia121 commented 1 month ago

User story: As an admin, I want to exempt a group of hosts (potentially as small as one host) from configuration items, supporting an auditable policy exemption process.

Customer feedback:

No concept of exemptions from “scope” of items within a team; would required building a team with no inheritance for each exemption.

noahtalerman commented 1 month ago

I want to exempt a group of hosts (potentially as small as one host) from configuration items, supporting an auditable policy exemption process.

Hey @Patagonia121 I think customer-reedtimmer is talking about scoping configuration profiles to specific hosts.

Can you please help confirm?

If that's the use case, Fleet supports scoping configuration profiles to specific hosts via label. Check out these stories:

What are we missing?