Ability to lock all devices assigned to a user in single action

harrisonravazzolo commented 3 weeks ago

customer-pingali: https://us-65885.app.gong.io/call?id=6614462928873447831&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A2580%2C%22to%22%3A2690%7D%5D
@noahtalerman: User requested this because they want to be sure that all relevant devices are locked when an employee leaves the organization or there's a security event. This way, they can be confident that they did all they can to prevent organization data from getting into the wrong hands.
- @allenhouchins: In the interim the user can build a workflow using the Fleet API, Tines, and Slack. There's a slash (/) command in Slack.
- @harrisonravazzolo: Here's the workflow: https://us-65885.app.gong.io/call?id=1989192898666666867&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A330%2C%22to%22%3A482%7D%5D
- @noahtalerman: Eventually there could be an option on the Host details > Actions > Lock modal in which there's a button to not only lock the host you're viewing but lock all hosts associated with the end user ("used_by" field in Fleet).

noahtalerman commented 2 weeks ago

Problem

As an IT Admin, I want to be able to quickly offboard a user but locking all of their assigned devices with a single click in the UI or a single command through the Fleet API.

Jamf endpoint that lets you, you can input an email address, and when you input the email address, what you get returned is every device associated with that email address, which is pretty cool, because you get it all in one list.

What have you tried?

There is not really a concept of a 'user' in Fleet - there is just the 'Used By' field that can be inaccurate or not up-to-date.

I have built an automation in a low-code platform that does various look ups, and this does work, but I would like to see this functionality supported natively in Fleet.

Potential solutions

Similar to above - built an app outside of Fleet to accomplish this, but without proper user <> device mapping, this can be unreliable. This would require something like https://github.com/fleetdm/fleet/issues/21028 in-place first for maximum reliability.

What is the expected workflow as a result of your proposal?

User leaves an organization, in Fleet a single action locks all of their devices.

noahtalerman commented 2 weeks ago

the user can build a workflow using the Fleet API, Tines, and Slack. There's a slash (/) command in Slack

Hey @harrisonravazzolo, @allenhouchins mentioned that you demo'd this workflow and it might be in Gong. If true, can you please share the Gong snippet here?

harrisonravazzolo commented 2 weeks ago

@noahtalerman You got it -- https://us-65885.app.gong.io/call?id=1989192898666666867&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A330%2C%22to%22%3A482%7D%5D

fleetdm / fleet